Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/4a12c2-9bed-45dd-863c-0b9fb97e529d/1/1-KX-hNqJda_u-tMY8JTRfjoeRgw.roa
File: 1-KX-hNqJda_u-tMY8JTRfjoeRgw.roa (raw, json)
Hash identifier: 0loawEu3EsQvN0YOhlZpUuKsy9W2F4KZ2P7ZrPoURyk=
Subject key identifier: F8:A5:FE:84:DA:89:75:AF:EE:FA:D3:18:F0:94:D1:7E:3A:1E:46:0C
Certificate issuer: /CN=500151e464b29791376c0c57beb40c584ef5a1cf
Certificate serial: 0194236A355DB2862E856708FE5BD99839A5
Authority key identifier: 50:01:51:E4:64:B2:97:91:37:6C:0C:57:BE:B4:0C:58:4E:F5:A1:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UAFR5GSyl5E3bAxXvrQMWE71oc8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/4a12c2-9bed-45dd-863c-0b9fb97e529d/1/1-KX-hNqJda_u-tMY8JTRfjoeRgw.roa
Signing time: Wed 01 Jan 2025 19:49:10 +0000
ROA not before: Wed 01 Jan 2025 19:49:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43824
IP address blocks: 185.222.49.0/24 maxlen: 24
185.222.50.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:6a:35:5d:b2:86:2e:85:67:08:fe:5b:d9:98:39:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=500151e464b29791376c0c57beb40c584ef5a1cf
Validity
Not Before: Jan 1 19:49:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f8a5fe84da8975afeefad318f094d17e3a1e460c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:f4:77:f3:81:61:4e:94:9c:e4:8e:e3:02:5e:
e3:93:7f:ee:e6:d2:48:8a:5a:28:87:a2:19:29:9f:
8f:fd:af:7b:a1:93:b3:76:df:0b:e8:4f:01:67:29:
b2:29:74:f1:9f:06:22:91:57:27:71:95:14:f9:95:
1b:fb:53:3c:9c:04:5f:a6:42:cd:a6:8b:de:04:64:
f5:91:98:5d:a8:91:dd:d6:de:22:94:18:5e:9c:00:
41:b7:9e:6c:8a:0d:85:8e:5c:6e:1f:b1:01:3d:ba:
a4:f3:db:1c:ce:b3:7e:fa:cf:0f:4a:f6:cd:e0:f6:
e6:4c:4b:26:80:ef:f4:d9:78:dc:98:24:7c:b7:17:
a7:f6:cf:50:bf:a6:61:e9:af:77:27:fa:8c:ce:cc:
98:da:fc:f6:ea:54:76:2e:1c:75:76:83:d6:a3:0b:
26:86:27:f3:72:af:0d:5b:17:5f:8d:66:4f:94:27:
33:83:b5:15:22:bf:ae:08:96:8c:6f:6e:aa:03:a3:
0d:60:b4:ed:53:25:9f:4e:4c:c6:28:86:fa:7e:a1:
87:93:58:2c:c9:a3:aa:b1:ce:d3:b3:27:ae:5f:9d:
24:9c:ff:86:d4:a9:99:7c:7a:37:e0:3a:30:9e:b3:
cc:af:5f:33:2c:e6:7f:72:0e:e0:5c:6e:aa:f2:e5:
1c:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:A5:FE:84:DA:89:75:AF:EE:FA:D3:18:F0:94:D1:7E:3A:1E:46:0C
X509v3 Authority Key Identifier:
keyid:50:01:51:E4:64:B2:97:91:37:6C:0C:57:BE:B4:0C:58:4E:F5:A1:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UAFR5GSyl5E3bAxXvrQMWE71oc8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/4a12c2-9bed-45dd-863c-0b9fb97e529d/1/1-KX-hNqJda_u-tMY8JTRfjoeRgw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/4a12c2-9bed-45dd-863c-0b9fb97e529d/1/UAFR5GSyl5E3bAxXvrQMWE71oc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.222.49.0-185.222.50.255
Signature Algorithm: sha256WithRSAEncryption
42:49:a6:b1:7f:bc:40:2a:9c:a8:f5:e7:bf:25:8c:8c:24:2b:
58:27:82:5b:9f:88:81:55:b5:4e:38:89:a9:56:a1:8b:3c:5f:
fc:87:2d:14:1e:66:1e:e2:9e:cc:62:42:0b:14:b1:1f:2d:22:
fe:fd:3a:3c:c5:ae:79:05:22:e1:eb:31:ca:d5:d3:9d:c8:cb:
f6:7d:a2:b6:02:a3:68:a1:fa:6d:b9:71:3f:24:e0:83:e5:bb:
f2:1b:0a:10:5c:a2:6a:76:c3:68:af:f7:74:b2:cb:e5:14:81:
4e:b5:81:35:2a:44:22:cf:36:17:86:29:7e:0b:f8:52:d5:7c:
fa:b0:13:7d:54:41:41:39:f2:fb:81:0f:f5:87:80:92:d1:22:
86:40:88:32:66:47:4a:6f:bc:90:2c:ea:69:c8:3e:4e:a7:bf:
1c:dc:de:96:4f:da:07:70:16:c7:d5:a4:4e:4a:b7:96:b3:5c:
35:08:c8:a8:90:71:90:c2:09:1b:b3:24:0f:90:5f:e5:a2:9c:
e8:51:7e:02:c2:2a:46:81:ff:92:2d:f3:18:0b:c2:4e:ae:6e:
4b:8e:e7:c8:a2:c4:af:3a:65:53:a5:eb:30:95:3f:8e:fd:6c:
9f:11:ee:3d:b1:94:58:0a:db:40:1f:50:52:98:4a:5f:a4:e6:
e6:f3:e3:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 13:17:32 2025 by rpki-client