Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/b5733b-3891-449b-9950-ff60e218ed41/1/JEYd_tTpdWRz3pFCNxB3FFwgT6Y.roa
File: JEYd_tTpdWRz3pFCNxB3FFwgT6Y.roa (raw, json)
Hash identifier: Cf4mCXc4k2uDXgbB44mtC61vJtEhAxi4CrnAuvkGzGk=
Subject key identifier: 24:46:1D:FE:D4:E9:75:64:73:DE:91:42:37:10:77:14:5C:20:4F:A6
Certificate issuer: /CN=4cbfd3e72d4a0396f95347336b42678f68c26430
Certificate serial: 019425FD4953F8AECE5AA383DEAFEB3DFF2B
Authority key identifier: 4C:BF:D3:E7:2D:4A:03:96:F9:53:47:33:6B:42:67:8F:68:C2:64:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TL_T5y1KA5b5U0cza0Jnj2jCZDA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/b5733b-3891-449b-9950-ff60e218ed41/1/JEYd_tTpdWRz3pFCNxB3FFwgT6Y.roa
Signing time: Thu 02 Jan 2025 07:49:03 +0000
ROA not before: Thu 02 Jan 2025 07:49:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214972
IP address blocks: 185.150.129.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:49:53:f8:ae:ce:5a:a3:83:de:af:eb:3d:ff:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4cbfd3e72d4a0396f95347336b42678f68c26430
Validity
Not Before: Jan 2 07:49:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=24461dfed4e9756473de9142371077145c204fa6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:64:e7:96:2b:dc:0f:e3:d1:c2:81:5b:9a:f8:
d4:d8:ad:ec:1d:f9:b6:2b:f8:f9:81:8b:8c:ff:4c:
dd:aa:4d:f9:be:30:b1:64:89:07:50:b5:17:8f:e0:
13:13:42:94:6f:cc:42:32:44:56:c2:45:3b:e8:e0:
6b:91:17:0b:6a:41:68:b8:33:86:80:d4:91:4e:08:
4c:7c:3d:29:29:04:ac:e7:ba:ca:1e:c7:c6:80:f1:
d9:83:16:7a:36:cd:8d:9f:53:57:6b:12:b5:b6:5a:
64:74:a3:2f:66:82:da:9d:4b:8b:62:ca:2a:96:31:
5b:8e:a7:a3:3e:c4:83:63:38:2a:66:91:f3:8f:8b:
c5:9b:be:8a:c8:fb:36:ab:b7:8b:60:d0:e7:0f:dc:
75:86:d6:97:36:fe:05:6f:9d:57:f2:31:c5:17:f5:
36:52:39:04:ca:fd:f3:df:77:05:6a:93:a5:1e:fd:
60:88:fa:86:41:d2:56:9b:28:33:5d:e2:11:03:eb:
17:c7:3d:70:03:e3:7e:74:55:40:0b:f8:73:9d:3a:
73:8e:08:c8:51:42:b4:0b:f5:75:d7:01:15:ba:3e:
b1:c2:2d:9a:7e:9d:5a:6f:10:25:57:94:cf:5f:95:
00:0c:e1:6f:c3:f6:ea:cc:0a:c3:57:7e:08:56:d6:
0a:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:46:1D:FE:D4:E9:75:64:73:DE:91:42:37:10:77:14:5C:20:4F:A6
X509v3 Authority Key Identifier:
keyid:4C:BF:D3:E7:2D:4A:03:96:F9:53:47:33:6B:42:67:8F:68:C2:64:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TL_T5y1KA5b5U0cza0Jnj2jCZDA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/b5733b-3891-449b-9950-ff60e218ed41/1/JEYd_tTpdWRz3pFCNxB3FFwgT6Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/b5733b-3891-449b-9950-ff60e218ed41/1/TL_T5y1KA5b5U0cza0Jnj2jCZDA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.150.129.0/24
Signature Algorithm: sha256WithRSAEncryption
b0:d9:27:b5:be:06:bc:5c:1c:36:57:ea:70:c4:46:47:f0:43:
19:50:7a:6d:42:07:92:a2:9a:78:77:5e:e7:48:66:16:80:2f:
da:c5:f9:f4:2d:bb:01:ba:cb:db:81:1c:e7:c3:59:c3:dc:b2:
29:e7:87:c1:c5:c2:84:fc:ab:ca:74:e1:66:8f:e3:b5:d3:cf:
90:d1:0c:51:74:41:60:04:a9:68:d5:df:4b:5c:dd:d0:11:e2:
77:1e:26:c2:32:b8:67:22:f2:7d:41:3e:9c:ba:57:ca:3f:97:
f4:be:e1:df:5e:2a:2c:41:2d:cb:2d:6c:30:50:8b:83:05:9d:
9a:0f:f5:90:f1:08:cb:83:ad:40:43:98:4e:fd:09:b8:34:eb:
ac:b4:ca:1e:98:56:56:9f:b6:cb:94:3e:16:0a:b7:af:c3:17:
7c:75:0c:82:65:1c:ec:98:4d:ba:4c:43:9e:d0:69:47:ee:db:
b0:3f:a7:a9:24:58:09:df:0e:87:f7:7c:88:d6:94:76:e4:51:
12:f2:e0:d1:b7:00:c9:c0:f7:b9:29:47:05:16:2a:02:f3:26:
ae:17:08:78:67:3d:0c:71:76:b5:f1:f5:94:51:a4:d5:aa:15:
c3:eb:4f:77:99:e3:fe:bc:59:69:c1:7d:af:7e:86:74:d5:85:
64:cd:7e:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:51:35 2025 by rpki-client