Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/hV3esBXd7kWM19SwGoTWr4W2RYo.roa
File: hV3esBXd7kWM19SwGoTWr4W2RYo.roa (raw, json)
Hash identifier: nkuIcdLSR2rDjqKAyaaEtGABcGXULTJNPUbi1fRjd+w=
Subject key identifier: 85:5D:DE:B0:15:DD:EE:45:8C:D7:D4:B0:1A:84:D6:AF:85:B6:45:8A
Certificate issuer: /CN=7d06a42bb2446e51f192ea375bdf7eec5a51c77f
Certificate serial: 019420D5E49656099237C9B2E61205D52B83
Authority key identifier: 7D:06:A4:2B:B2:44:6E:51:F1:92:EA:37:5B:DF:7E:EC:5A:51:C7:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/hV3esBXd7kWM19SwGoTWr4W2RYo.roa
Signing time: Wed 01 Jan 2025 07:47:56 +0000
ROA not before: Wed 01 Jan 2025 07:47:56 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212025
IP address blocks: 85.158.145.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d5:e4:96:56:09:92:37:c9:b2:e6:12:05:d5:2b:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d06a42bb2446e51f192ea375bdf7eec5a51c77f
Validity
Not Before: Jan 1 07:47:56 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=855ddeb015ddee458cd7d4b01a84d6af85b6458a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:fa:e8:4e:e1:66:ad:d7:30:e8:64:75:20:75:
89:08:07:d1:0a:da:3f:86:73:af:b9:b8:45:28:48:
e6:78:b4:1a:10:47:f0:0d:4f:a8:0e:ca:43:56:db:
e0:83:2b:55:f3:99:3b:f9:46:42:1b:e8:c1:77:91:
fc:3c:bc:9a:95:74:d6:cb:e0:7c:e8:10:c9:f4:23:
78:a9:15:6a:87:5b:12:ba:1f:52:34:5d:11:0b:ee:
91:4c:4f:98:9f:3e:22:47:84:8c:a5:73:66:0d:f4:
ba:89:32:9e:7a:76:dd:eb:0f:c6:23:de:94:84:69:
97:c7:66:d7:2f:7a:43:c7:cd:81:03:09:40:5b:31:
97:9a:e3:d3:71:10:c3:12:f7:82:ec:09:f2:ab:4e:
8f:e9:2c:47:53:a4:69:7f:cf:ca:bc:b0:11:f1:4b:
33:53:76:6b:5a:b4:7b:28:5b:24:fb:ea:81:3e:e0:
8d:af:53:47:b8:ce:10:f9:7f:b5:59:60:04:18:1b:
76:2a:fb:3c:f3:24:33:85:1e:0f:0d:1f:5c:2c:eb:
2b:41:9a:6b:ad:61:67:15:e9:33:68:dd:c0:d4:8e:
e3:54:28:63:43:e8:5b:83:1d:da:e9:b7:73:44:58:
de:50:21:1b:c7:be:e0:82:1f:8d:af:ce:8a:67:e0:
b7:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:5D:DE:B0:15:DD:EE:45:8C:D7:D4:B0:1A:84:D6:AF:85:B6:45:8A
X509v3 Authority Key Identifier:
keyid:7D:06:A4:2B:B2:44:6E:51:F1:92:EA:37:5B:DF:7E:EC:5A:51:C7:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/hV3esBXd7kWM19SwGoTWr4W2RYo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/fQakK7JEblHxkuo3W99-7FpRx38.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.158.145.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:e7:64:78:c0:61:9e:64:ed:f3:cd:4a:83:9f:eb:98:a9:d5:
f9:ce:14:b4:9b:9d:51:56:19:5d:ad:cc:48:38:03:6c:2e:7f:
4e:7f:71:35:a1:1a:92:c9:df:14:95:a4:40:ac:ac:e7:47:49:
27:51:fe:8a:9e:0b:a3:b9:07:8d:62:19:a2:1f:9e:be:6e:43:
b9:5d:75:e6:35:c5:19:c0:00:a6:21:35:b9:1a:06:e6:4f:c8:
b4:88:04:01:56:d6:ee:c2:cb:2e:af:83:03:1e:0c:d2:d1:d5:
1a:d5:78:13:b9:8c:45:03:d3:39:ed:2f:5b:08:d1:2b:ba:7d:
ab:11:8b:c8:dc:79:14:a2:44:48:9b:d5:28:85:35:5c:d5:13:
b8:6a:4e:bf:0d:33:55:b2:7b:ef:87:ca:95:d9:ab:55:4f:f9:
e6:0e:fc:b9:59:75:b5:48:e8:1e:1b:78:51:9d:fc:45:57:f6:
fe:5e:44:5c:ad:27:c1:1a:79:8a:85:3c:47:76:d9:a2:71:69:
7b:fd:8b:8e:80:20:5f:55:0b:7a:5c:71:08:e7:38:f5:76:e0:
75:2a:d1:68:c6:2c:b4:f5:fe:3e:e3:41:d5:23:54:f4:23:78:
ca:72:23:70:75:0d:9d:be:04:a4:ec:72:f4:81:59:e4:8c:83:
50:3d:61:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:30:39 2025 by rpki-client