Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/8OSYTODqs_OVKKJ0Xn8VmQ-cq5Q.roa
File: 8OSYTODqs_OVKKJ0Xn8VmQ-cq5Q.roa (raw, json)
Hash identifier: vLGuiUaaMRg3Oh7AvVSEZuZjqVJEBlIV9vKNBDoC7tE=
Subject key identifier: F0:E4:98:4C:E0:EA:B3:F3:95:28:A2:74:5E:7F:15:99:0F:9C:AB:94
Certificate issuer: /CN=641975583b250362c8150f63adb30a0f6a0c6fc3
Certificate serial: 019425214E94E5F2668642A9FCA4975CBD42
Authority key identifier: 64:19:75:58:3B:25:03:62:C8:15:0F:63:AD:B3:0A:0F:6A:0C:6F:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/8OSYTODqs_OVKKJ0Xn8VmQ-cq5Q.roa
Signing time: Thu 02 Jan 2025 03:48:47 +0000
ROA not before: Thu 02 Jan 2025 03:48:47 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43072
IP address blocks: 185.112.241.0/24 maxlen: 24
185.112.243.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:4e:94:e5:f2:66:86:42:a9:fc:a4:97:5c:bd:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=641975583b250362c8150f63adb30a0f6a0c6fc3
Validity
Not Before: Jan 2 03:48:47 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f0e4984ce0eab3f39528a2745e7f15990f9cab94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:56:9c:5d:44:4f:ee:c1:96:a9:ff:35:85:59:
70:68:7c:fb:59:61:eb:c3:f5:37:e5:41:70:dd:f5:
e0:a3:f4:75:ee:8f:37:53:02:59:13:0d:b4:86:3a:
4d:ac:ec:9b:eb:14:21:44:25:44:e2:31:47:81:d3:
f3:36:ef:0b:2b:3b:13:ef:9d:5b:72:0d:5b:99:50:
02:ba:80:01:e1:66:d8:b1:fc:d5:a5:c3:e6:69:63:
5f:59:b3:ad:29:a3:4b:58:1d:57:b0:dd:e0:98:ff:
9a:43:a0:3f:ac:88:b8:14:eb:9e:a7:20:4d:fd:06:
0a:66:79:86:0f:a3:48:cc:ee:86:55:7b:59:4a:cb:
1a:04:a4:7f:88:3a:19:19:67:6e:b0:01:6b:26:ee:
72:bf:c7:a8:0a:a9:b6:da:ce:7c:6e:33:9d:7d:61:
06:fc:a9:f0:5f:0f:0e:c0:85:53:ec:2c:1c:f7:0d:
c4:af:69:73:90:65:a2:41:2f:34:a1:81:7d:b7:16:
a9:56:43:f4:c1:7a:af:d3:ce:ef:60:63:30:a9:6e:
84:85:48:b2:4d:02:ac:1b:69:de:bd:05:9e:e1:23:
eb:6f:f6:0a:74:81:e1:2f:18:46:3a:3f:ae:87:4d:
9e:87:0c:0f:65:68:c7:c7:25:91:e5:67:f4:c6:67:
e7:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:E4:98:4C:E0:EA:B3:F3:95:28:A2:74:5E:7F:15:99:0F:9C:AB:94
X509v3 Authority Key Identifier:
keyid:64:19:75:58:3B:25:03:62:C8:15:0F:63:AD:B3:0A:0F:6A:0C:6F:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/8OSYTODqs_OVKKJ0Xn8VmQ-cq5Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.112.241.0/24
185.112.243.0/24
Signature Algorithm: sha256WithRSAEncryption
a4:93:98:58:f6:1c:44:4b:6d:bb:8c:df:3b:28:40:63:39:63:
03:8d:1f:49:f9:2c:7e:1c:7f:4b:76:aa:07:d3:8e:06:2c:92:
58:2b:bc:a0:32:22:44:09:4f:99:dc:60:76:0b:76:f1:c1:2e:
28:15:e6:9b:f5:b7:63:c5:0d:f1:7a:43:de:92:8a:0f:c7:71:
67:04:1c:b2:37:02:09:c8:3c:89:09:60:e1:65:32:91:72:24:
ef:6f:7a:61:42:b4:7a:43:6c:c1:79:46:2b:7f:3c:ba:99:0b:
e9:4a:93:cd:c9:42:1f:bf:33:62:20:e7:fc:38:f2:cb:2a:aa:
06:0e:10:1d:d9:12:02:0b:24:a9:85:ef:f2:5f:c6:e9:52:41:
fb:17:48:36:b0:17:5c:b9:41:60:bb:2e:10:53:88:0f:fa:0d:
6f:d9:6d:95:b0:cd:76:da:f5:2a:ee:66:62:45:33:39:6b:ce:
37:b8:ce:07:dc:eb:7c:20:10:88:d6:49:fb:68:75:9e:bd:7e:
83:d6:18:c5:28:d1:82:48:f0:23:3a:8a:82:a9:e4:cf:3b:5f:
34:6e:89:df:6c:bb:f6:57:98:b4:30:19:be:a4:da:0a:48:04:
7e:70:c4:f9:e3:a4:43:fa:fb:42:a4:c0:e3:e9:ab:f7:9d:42:
b3:27:83:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 21:33:28 2025 by rpki-client