Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/18feb3-f3d2-49f3-90d2-9d4b16b59de6/1/7kjs94GsooBC3ok8_eDki6AqwvE.roa
File: 7kjs94GsooBC3ok8_eDki6AqwvE.roa (raw, json)
Hash identifier: JBRZ5Zvu3ouJDx1Zug8almp1xArIsUFTcW8TFA1+REc=
Subject key identifier: EE:48:EC:F7:81:AC:A2:80:42:DE:89:3C:FD:E0:E4:8B:A0:2A:C2:F1
Certificate issuer: /CN=082a6e377f1c885a6d73f3f569fd06d7ea4c7a45
Certificate serial: 01941F8CA7ACA75AEDDE1B50F5B062B88C50
Authority key identifier: 08:2A:6E:37:7F:1C:88:5A:6D:73:F3:F5:69:FD:06:D7:EA:4C:7A:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CCpuN38ciFptc_P1af0G1-pMekU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/18feb3-f3d2-49f3-90d2-9d4b16b59de6/1/7kjs94GsooBC3ok8_eDki6AqwvE.roa
Signing time: Wed 01 Jan 2025 01:48:19 +0000
ROA not before: Wed 01 Jan 2025 01:48:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200020
IP address blocks: 185.157.145.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:a7:ac:a7:5a:ed:de:1b:50:f5:b0:62:b8:8c:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=082a6e377f1c885a6d73f3f569fd06d7ea4c7a45
Validity
Not Before: Jan 1 01:48:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ee48ecf781aca28042de893cfde0e48ba02ac2f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:e9:d1:53:84:3a:27:1d:2f:7c:ab:3d:8e:ab:
3c:e4:f1:4c:20:06:66:e9:ac:c8:1e:a3:bc:1d:ef:
71:25:b9:bd:1a:13:38:7e:e7:92:3e:cc:8d:f4:0b:
e3:2d:ba:10:47:9f:ee:42:b8:e0:2a:ed:07:5f:43:
07:ad:00:5e:28:94:e1:25:b5:3c:e9:8c:d1:0f:b0:
7d:20:9a:be:00:cd:84:4f:b1:29:7b:da:0b:18:dc:
01:58:1a:f6:c4:3e:20:ad:6c:1e:45:e5:4f:4b:a1:
36:67:8e:67:3a:5e:8c:4e:37:fe:ee:a0:0a:70:e5:
4f:64:67:88:77:65:8e:a2:03:48:f8:c5:44:92:40:
e6:d6:72:90:3a:86:fb:2d:a9:18:1c:de:74:8d:b3:
e4:c5:2c:76:09:37:65:02:7a:e5:27:22:3c:0b:37:
85:6b:09:cb:51:ee:17:02:0c:aa:44:14:72:73:d3:
fc:1c:c9:78:68:35:5e:76:24:35:30:e8:d5:be:b8:
c9:87:5d:65:91:3b:9b:37:11:84:69:46:bc:30:d7:
bf:1d:3e:e2:37:a5:70:4d:bc:c2:db:b1:49:2a:35:
01:fa:01:a7:5e:ff:89:d5:69:0b:88:1b:f2:82:a4:
63:cd:10:37:ee:4f:5c:f5:b2:3d:06:9a:0d:8e:ca:
bc:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:48:EC:F7:81:AC:A2:80:42:DE:89:3C:FD:E0:E4:8B:A0:2A:C2:F1
X509v3 Authority Key Identifier:
keyid:08:2A:6E:37:7F:1C:88:5A:6D:73:F3:F5:69:FD:06:D7:EA:4C:7A:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CCpuN38ciFptc_P1af0G1-pMekU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/18feb3-f3d2-49f3-90d2-9d4b16b59de6/1/7kjs94GsooBC3ok8_eDki6AqwvE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/18feb3-f3d2-49f3-90d2-9d4b16b59de6/1/CCpuN38ciFptc_P1af0G1-pMekU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.157.145.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:91:c2:53:d5:a6:3a:e5:c4:b1:da:e3:e0:6a:b3:5a:18:c9:
d7:6a:9b:1b:7f:8a:60:af:d0:3d:b7:de:6d:73:2c:42:8b:0c:
41:15:04:ee:9c:4d:17:d5:64:e6:09:f1:78:a7:64:95:a8:ae:
70:7b:5f:93:7e:43:f6:af:b5:d1:2c:04:3f:cf:e8:be:0d:f9:
35:f7:52:d5:44:e6:04:99:9f:41:a9:b0:7a:24:25:3e:1a:dd:
b9:52:f6:55:00:0c:51:8c:fb:37:39:e4:8c:23:09:33:38:96:
68:ce:3c:9e:f2:62:23:76:7b:e5:5e:3a:89:70:65:ce:2c:ff:
85:70:5e:e1:25:8c:c4:03:39:97:eb:7c:d9:a3:88:00:06:be:
98:7f:6c:f4:08:35:f8:8c:11:33:f7:26:05:52:3d:aa:a3:c6:
a5:92:59:00:bc:d3:5d:2e:72:8f:c1:20:58:21:18:9a:84:f1:
06:9c:98:7f:a2:13:c6:7b:af:15:5c:e3:9c:00:2f:e5:e0:a5:
7c:7a:69:a6:1e:07:41:34:c0:37:5c:f8:02:c7:80:c9:53:d4:
bf:94:e1:6c:65:44:f6:90:7d:1d:d7:a9:f1:ca:51:f2:3e:60:
ee:1c:b1:43:f8:aa:76:4d:64:44:8e:83:cc:1b:e5:0d:72:37:
0d:76:35:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 02:15:06 2025 by rpki-client