Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/2a7bf4-3454-4d14-9e0c-183f9975fc94/1/dek1yBz9hU9Sw_jKA33of_zM9K4.roa
File: dek1yBz9hU9Sw_jKA33of_zM9K4.roa (raw, json)
Hash identifier: yub3ufVUEc3WS+XkUJMCp9euptnf3DjONJgSPtRCvNQ=
Subject key identifier: 75:E9:35:C8:1C:FD:85:4F:52:C3:F8:CA:03:7D:E8:7F:FC:CC:F4:AE
Certificate issuer: /CN=b40d494333cb4d9e5fd10c846c47cf56445c503a
Certificate serial: 019423D7E865D76D5839C60E9C294E493252
Authority key identifier: B4:0D:49:43:33:CB:4D:9E:5F:D1:0C:84:6C:47:CF:56:44:5C:50:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tA1JQzPLTZ5f0QyEbEfPVkRcUDo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/2a7bf4-3454-4d14-9e0c-183f9975fc94/1/dek1yBz9hU9Sw_jKA33of_zM9K4.roa
Signing time: Wed 01 Jan 2025 21:48:59 +0000
ROA not before: Wed 01 Jan 2025 21:48:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 29119
IP address blocks: 185.145.178.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:e8:65:d7:6d:58:39:c6:0e:9c:29:4e:49:32:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b40d494333cb4d9e5fd10c846c47cf56445c503a
Validity
Not Before: Jan 1 21:48:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=75e935c81cfd854f52c3f8ca037de87ffcccf4ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:a3:12:ea:c1:46:fc:dc:8f:7d:f9:76:7d:53:
e2:34:a5:95:33:00:ec:8a:5a:24:64:b1:ae:97:77:
ce:0b:f2:ad:8e:ae:50:d7:00:ba:ea:d2:54:4c:73:
38:2c:f5:b7:99:aa:5a:f3:38:f2:b5:54:eb:b0:a6:
af:9a:b3:2e:2d:fa:85:5d:64:d5:5c:7d:e6:0b:31:
97:e1:e0:25:f7:2e:c8:b9:51:5e:e1:31:88:2b:52:
70:2e:c8:97:99:4d:25:76:bb:04:66:43:52:7d:24:
9a:3d:b2:33:6e:42:82:84:66:75:98:b1:85:f1:e0:
fb:41:a3:8c:e9:6f:32:6e:d5:5f:ac:1f:22:93:38:
c2:1c:f0:55:01:6a:8b:1d:69:b1:16:4d:8e:15:88:
e1:22:38:b5:13:81:a6:52:ca:d1:4d:ca:c8:b0:a0:
e3:06:48:c4:fe:4d:c5:33:64:c8:e6:62:07:d4:a7:
e7:b9:89:93:8f:43:59:74:d8:84:a9:57:ef:83:f2:
5a:38:e5:f1:90:1d:80:ef:3f:58:af:73:06:9a:e7:
ce:ec:43:8a:aa:ad:99:dd:93:39:40:ff:d8:36:4b:
cb:cf:26:2e:9d:c5:66:bd:7c:7e:96:f7:24:eb:02:
61:fc:4f:08:6f:ea:a6:c9:ca:68:97:49:55:57:94:
33:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:E9:35:C8:1C:FD:85:4F:52:C3:F8:CA:03:7D:E8:7F:FC:CC:F4:AE
X509v3 Authority Key Identifier:
keyid:B4:0D:49:43:33:CB:4D:9E:5F:D1:0C:84:6C:47:CF:56:44:5C:50:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tA1JQzPLTZ5f0QyEbEfPVkRcUDo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/2a7bf4-3454-4d14-9e0c-183f9975fc94/1/dek1yBz9hU9Sw_jKA33of_zM9K4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/2a7bf4-3454-4d14-9e0c-183f9975fc94/1/tA1JQzPLTZ5f0QyEbEfPVkRcUDo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.145.178.0/24
Signature Algorithm: sha256WithRSAEncryption
51:70:8c:b4:18:27:79:6a:f6:e6:eb:04:a4:8f:1f:27:74:41:
ed:82:3c:4f:8d:e2:90:87:5e:0b:44:cb:ab:27:8a:2e:1f:da:
9a:da:57:e0:83:02:9c:aa:9f:e1:1f:e3:83:7a:e7:d6:7f:77:
29:d7:a3:88:d3:16:eb:c4:a9:f3:48:7a:1c:65:ef:b4:8d:18:
6a:6c:e5:a5:c1:08:b6:f2:fb:1e:a4:d8:79:c3:f1:68:8f:9c:
d1:86:80:c6:2f:ec:b9:44:76:be:fc:27:73:3c:a4:f3:49:80:
1a:df:7d:9c:14:47:59:dc:75:e9:a3:f6:5e:4c:cc:c6:e3:66:
c5:88:f5:20:9a:52:30:6c:3e:11:88:b2:6e:ba:c4:49:26:9d:
b2:2f:1e:72:f0:79:49:40:38:8f:37:53:a7:90:fc:19:6d:3d:
5b:40:0b:1f:6f:45:f7:51:59:b8:6b:79:71:0e:e4:a8:cf:7d:
d0:50:b4:95:46:81:4f:f7:0e:a6:65:31:18:dd:77:03:38:c1:
1a:53:99:e1:f2:bc:0c:18:17:23:55:8f:a9:6a:b8:bf:9a:3d:
15:e6:17:58:f0:87:8f:cb:ce:fc:d4:8e:b6:f4:97:2c:19:97:
b2:9c:02:a2:e7:06:46:c7:21:b1:1a:21:26:a0:1b:33:d8:56:
f4:7d:06:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 17:49:36 2025 by rpki-client