Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/00c711-0c29-4301-94bc-ea57cbe36811/1/idgepXLlrREH-xoC6R-XHWqyAro.roa
File: idgepXLlrREH-xoC6R-XHWqyAro.roa (raw, json)
Hash identifier: m88a+GTZ/SRnSaetSuTlX6BeBnowd2dvflLVRuisI/M=
Subject key identifier: 89:D8:1E:A5:72:E5:AD:11:07:FB:1A:02:E9:1F:97:1D:6A:B2:02:BA
Certificate issuer: /CN=bfe6fc768ad47b968e0a259fecc8a3da32fac5ea
Certificate serial: 01956637AE591FF9E0435B0B0494273F806F
Authority key identifier: BF:E6:FC:76:8A:D4:7B:96:8E:0A:25:9F:EC:C8:A3:DA:32:FA:C5:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v-b8dorUe5aOCiWf7Mij2jL6xeo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/00c711-0c29-4301-94bc-ea57cbe36811/1/idgepXLlrREH-xoC6R-XHWqyAro.roa
Signing time: Wed 05 Mar 2025 12:11:19 +0000
ROA not before: Wed 05 Mar 2025 12:11:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 201011
IP address blocks: 185.247.150.0/24 maxlen: 24
2a03:2a00:10::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:66:37:ae:59:1f:f9:e0:43:5b:0b:04:94:27:3f:80:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bfe6fc768ad47b968e0a259fecc8a3da32fac5ea
Validity
Not Before: Mar 5 12:11:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=89d81ea572e5ad1107fb1a02e91f971d6ab202ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:7b:4e:63:22:8f:f4:0b:2f:e6:b0:38:56:8d:
25:d8:09:a9:18:03:f2:8c:7c:ba:d5:94:f6:41:f0:
9f:80:ae:b4:57:c1:fc:91:f4:c5:db:c9:30:e0:b1:
b5:ee:99:fb:1b:45:42:0d:5b:17:3f:d8:e2:cf:20:
d0:ca:fc:c7:68:91:41:f2:64:3f:0d:04:a4:47:8d:
cd:fe:59:87:c3:6c:90:5c:02:e0:11:d5:e8:b4:0d:
f0:fe:ca:74:d1:3c:6e:7c:67:c3:10:32:b3:2b:e0:
dd:35:02:10:d7:48:fd:05:b9:ef:95:12:86:0b:61:
a6:7d:be:08:9e:a2:9b:89:14:a9:81:51:27:59:7c:
ee:5d:59:54:20:f8:76:8c:1e:97:94:86:ff:18:a0:
cb:52:f7:11:73:de:68:00:36:dc:7f:6e:78:01:fb:
4a:22:79:9a:9e:98:d1:b6:02:d2:51:3d:2c:79:75:
cb:9e:10:ee:39:1a:8e:57:bb:a1:1e:7e:46:76:80:
21:fa:f6:ed:5f:81:2a:01:94:5c:b8:a8:94:c9:27:
0d:6a:8d:6a:7e:95:40:70:40:ca:cc:a3:f5:20:16:
fc:d5:7b:32:dc:09:3f:28:02:71:1e:5b:46:f7:bf:
b0:0e:0b:61:43:be:74:b5:8c:ea:e1:aa:4b:a2:c6:
da:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:D8:1E:A5:72:E5:AD:11:07:FB:1A:02:E9:1F:97:1D:6A:B2:02:BA
X509v3 Authority Key Identifier:
keyid:BF:E6:FC:76:8A:D4:7B:96:8E:0A:25:9F:EC:C8:A3:DA:32:FA:C5:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v-b8dorUe5aOCiWf7Mij2jL6xeo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/00c711-0c29-4301-94bc-ea57cbe36811/1/idgepXLlrREH-xoC6R-XHWqyAro.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/00c711-0c29-4301-94bc-ea57cbe36811/1/v-b8dorUe5aOCiWf7Mij2jL6xeo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.247.150.0/24
IPv6:
2a03:2a00:10::/48
Signature Algorithm: sha256WithRSAEncryption
0e:27:b7:b2:a0:1d:76:f3:c2:66:88:14:53:6b:48:7e:de:cc:
8b:d4:51:0c:c2:ba:00:db:47:d1:9c:1d:43:3f:8a:c3:77:63:
22:c0:9f:0e:7a:2b:b3:68:72:91:e5:7a:ac:91:89:71:e9:11:
ba:7f:85:81:98:a3:b7:5b:4f:e2:63:28:cf:cd:49:a7:d3:a4:
aa:71:c2:a9:af:e2:56:a6:42:74:24:09:6c:a3:7d:af:5f:26:
f6:58:05:10:49:c6:59:90:2d:9c:58:9a:57:92:cc:2e:ac:ef:
a4:93:ab:52:14:2c:ac:3a:78:f1:64:5d:19:97:9e:a1:1b:27:
43:2f:ef:77:c3:0f:69:cf:f6:c8:60:51:31:64:30:f3:2c:42:
2e:3b:de:02:5a:0b:4b:01:a8:45:a5:50:a3:27:d9:28:f6:15:
c5:f0:f0:b1:09:e1:0a:e1:b9:2a:75:91:97:8b:39:7e:1c:89:
cf:4c:63:bf:f7:8a:8c:23:ba:c6:cf:a0:1f:27:a0:31:f6:9c:
6f:3a:62:4b:96:2d:77:0c:8e:02:dc:d0:3e:51:7e:1a:ed:a6:
8c:a0:df:0a:67:80:b0:df:79:3b:d7:e8:69:44:fa:31:7f:da:
53:88:ca:17:50:65:41:50:2f:a4:58:6f:90:2e:a4:68:b6:c2:
79:b1:01:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 09:19:38 2025 by rpki-client