Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/9da601-635e-4d07-8096-2cb17b7bc618/1/1-zGyc8-sNFoNd9jrRwy0ohv-lr8.roa
File: 1-zGyc8-sNFoNd9jrRwy0ohv-lr8.roa (raw, json)
Hash identifier: X6damPmptp3XphV2HfGbEnZgUQ5Ok8UVDdDjwWdsAA0=
Subject key identifier: FB:31:B2:73:CF:AC:34:5A:0D:77:D8:EB:47:0C:B4:A2:1B:FE:96:BF
Certificate issuer: /CN=db70ce7a4e6e4ab3a4ea9f081f592ea5f6d2b9aa
Certificate serial: 019427B5F8E30411E6816DF725179781086E
Authority key identifier: DB:70:CE:7A:4E:6E:4A:B3:A4:EA:9F:08:1F:59:2E:A5:F6:D2:B9:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/23DOek5uSrOk6p8IH1kupfbSuao.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/9da601-635e-4d07-8096-2cb17b7bc618/1/1-zGyc8-sNFoNd9jrRwy0ohv-lr8.roa
Signing time: Thu 02 Jan 2025 15:50:24 +0000
ROA not before: Thu 02 Jan 2025 15:50:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 216153
IP address blocks: 185.153.235.0/24 maxlen: 24
204.235.104.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:f8:e3:04:11:e6:81:6d:f7:25:17:97:81:08:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db70ce7a4e6e4ab3a4ea9f081f592ea5f6d2b9aa
Validity
Not Before: Jan 2 15:50:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fb31b273cfac345a0d77d8eb470cb4a21bfe96bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:e0:6f:ec:02:cd:a4:d5:f2:d2:1f:91:4a:ec:
2e:f7:d9:48:62:93:28:9a:a8:ac:cb:28:38:50:ff:
5e:a3:fd:29:fb:50:8b:00:20:a0:89:64:7c:97:22:
51:79:d0:d7:66:1c:39:1f:ca:2d:d6:c2:a5:17:80:
f7:bd:56:00:da:be:23:3d:a8:50:1e:03:86:23:e5:
6b:44:9e:21:d9:c7:68:b9:cc:e5:b0:e7:02:88:66:
1d:12:4b:2e:20:1d:69:d8:d8:2e:a1:a0:f3:79:3f:
02:88:12:93:e1:a8:e0:dd:9b:e8:5c:eb:4e:07:2a:
4c:14:c3:3a:8c:e8:5e:76:34:fa:02:01:6a:50:7f:
cc:64:7a:47:6a:f8:68:fd:9c:92:55:c5:3e:b2:ce:
b4:e0:a8:2d:79:88:d6:7a:e2:03:b8:2b:37:f5:0e:
2f:f2:95:0a:74:b7:53:4b:07:29:a8:42:bf:5a:93:
c0:b5:1c:2b:92:8b:9a:ec:a2:4d:39:a7:c1:c7:13:
ce:d2:d9:45:09:6e:3a:36:a1:ac:fd:43:ce:72:88:
56:9d:e9:34:b3:05:68:75:e3:8f:02:e1:20:26:fb:
ca:dd:22:5c:33:dd:23:b4:58:99:46:93:a6:a5:af:
8f:53:88:d2:51:a6:22:42:7b:a4:60:a6:54:e2:54:
ef:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:31:B2:73:CF:AC:34:5A:0D:77:D8:EB:47:0C:B4:A2:1B:FE:96:BF
X509v3 Authority Key Identifier:
keyid:DB:70:CE:7A:4E:6E:4A:B3:A4:EA:9F:08:1F:59:2E:A5:F6:D2:B9:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/23DOek5uSrOk6p8IH1kupfbSuao.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/9da601-635e-4d07-8096-2cb17b7bc618/1/1-zGyc8-sNFoNd9jrRwy0ohv-lr8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/9da601-635e-4d07-8096-2cb17b7bc618/1/23DOek5uSrOk6p8IH1kupfbSuao.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.153.235.0/24
204.235.104.0/24
Signature Algorithm: sha256WithRSAEncryption
96:db:fc:3b:75:de:a7:1c:a4:75:f9:12:f5:fd:ea:b1:83:85:
41:58:ed:5e:99:f6:7e:2b:67:e3:3e:45:ff:8e:9b:33:22:d7:
c7:e6:d9:fc:c5:4c:8f:4c:6f:24:15:70:df:eb:4d:29:86:71:
a8:7a:9c:6e:fc:8b:81:3a:20:63:f4:c2:d1:93:f9:6a:4a:58:
74:93:15:b0:5b:54:26:52:b6:c8:84:30:51:be:92:f3:af:b7:
db:33:44:d7:9d:86:1a:05:ef:e7:f6:ab:cd:a1:23:dd:17:26:
4c:8a:52:46:91:4a:24:11:56:07:3f:22:3c:22:64:9e:62:d4:
ae:8c:73:48:a0:07:b4:4c:bb:b4:7f:78:2b:09:fa:b2:c0:59:
3b:86:77:0e:03:d4:9c:00:85:e4:59:68:ec:02:b3:c6:08:d8:
42:69:e0:64:a0:92:7d:d1:c1:b8:a8:3c:ab:d4:08:e8:f7:3e:
ff:de:a3:89:08:fa:d9:2a:eb:c4:98:b0:78:8b:b2:c4:5a:ff:
da:2a:b4:3d:cd:cb:47:70:ff:ff:9a:14:13:02:f8:5e:b7:30:
18:00:de:45:3d:89:5e:78:1a:36:62:31:e5:61:f1:84:94:8f:
54:83:99:79:0c:39:bb:31:9f:5e:e2:b0:c0:7c:ca:24:0c:f2:
be:cb:98:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:38:41 2025 by rpki-client