Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/767ae5-b9a2-4993-81a8-05f18fc212a7/1/P4l18X0E6wGAiypR58C2CsBAfew.roa
File: P4l18X0E6wGAiypR58C2CsBAfew.roa (raw, json)
Hash identifier: V35a2kBLapjAgjmC/NuotWMp7OBF1Qv4aZCQYf/dZTg=
Subject key identifier: 3F:89:75:F1:7D:04:EB:01:80:8B:2A:51:E7:C0:B6:0A:C0:40:7D:EC
Certificate issuer: /CN=86cb742a03bc9c85507217a25204dfff82fccdf9
Certificate serial: 019528342CB569E010EEF9EA606E9836AF25
Authority key identifier: 86:CB:74:2A:03:BC:9C:85:50:72:17:A2:52:04:DF:FF:82:FC:CD:F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hst0KgO8nIVQcheiUgTf_4L8zfk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/767ae5-b9a2-4993-81a8-05f18fc212a7/1/P4l18X0E6wGAiypR58C2CsBAfew.roa
Signing time: Fri 21 Feb 2025 11:11:02 +0000
ROA not before: Fri 21 Feb 2025 11:11:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57043
IP address blocks: 185.144.29.0/24 maxlen: 24
2a0a:eec0:9::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:28:34:2c:b5:69:e0:10:ee:f9:ea:60:6e:98:36:af:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86cb742a03bc9c85507217a25204dfff82fccdf9
Validity
Not Before: Feb 21 11:11:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3f8975f17d04eb01808b2a51e7c0b60ac0407dec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:a2:41:66:40:a2:74:02:8b:60:83:75:a3:5b:
c1:52:f6:0a:16:26:44:8c:f3:4b:43:79:f8:85:eb:
c4:a7:d4:ef:ef:bb:ca:bd:94:fd:05:2b:9c:35:6e:
a2:30:3b:9a:dc:aa:8c:5b:00:9f:1b:0b:bf:93:2f:
04:4e:83:65:2b:e4:69:0c:42:ab:b8:96:56:86:8a:
e1:5e:6b:b6:67:da:3f:21:53:04:e5:01:c3:dc:c2:
3e:e9:ff:4f:c3:7f:b8:c6:e4:58:d7:3b:05:59:23:
cf:8e:8c:e4:5d:b9:1f:a3:3e:71:7a:f6:eb:4b:d9:
ab:97:b9:14:63:68:ec:47:6f:3f:93:3f:c2:3d:da:
76:9c:54:68:60:0a:bd:7f:3c:a3:6d:80:11:44:f7:
50:f3:ca:0d:2e:3b:40:8d:5f:84:ab:39:fd:ac:5f:
8b:5b:41:91:90:e1:7b:24:58:79:3f:e3:3d:09:d0:
bd:dd:c6:19:26:f4:99:95:cc:c4:41:cd:d3:50:22:
53:05:e0:6b:aa:39:b1:75:47:91:1e:91:ee:87:60:
b9:d2:6a:ff:9e:42:ea:e2:ee:6b:c9:b4:8e:34:c4:
c3:82:c1:e1:fa:da:f6:5a:9e:ba:d8:f7:0c:59:ad:
88:4f:93:a6:1a:f3:4b:21:aa:94:00:14:42:d4:be:
ab:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:89:75:F1:7D:04:EB:01:80:8B:2A:51:E7:C0:B6:0A:C0:40:7D:EC
X509v3 Authority Key Identifier:
keyid:86:CB:74:2A:03:BC:9C:85:50:72:17:A2:52:04:DF:FF:82:FC:CD:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hst0KgO8nIVQcheiUgTf_4L8zfk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/767ae5-b9a2-4993-81a8-05f18fc212a7/1/P4l18X0E6wGAiypR58C2CsBAfew.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/767ae5-b9a2-4993-81a8-05f18fc212a7/1/hst0KgO8nIVQcheiUgTf_4L8zfk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.144.29.0/24
IPv6:
2a0a:eec0:9::/48
Signature Algorithm: sha256WithRSAEncryption
36:47:2c:cf:e4:c0:65:9e:ff:80:85:8a:45:4e:5e:eb:a5:d6:
30:53:f5:80:8d:b4:e5:ed:43:eb:ba:32:2b:f2:e3:69:5c:3e:
c7:04:42:11:d4:64:ac:96:2d:d6:76:3b:01:70:3c:1a:ff:67:
77:3c:51:d7:c6:e9:97:c8:cb:b4:d0:cb:87:06:74:f5:35:ab:
36:0b:81:9a:cd:c3:ef:af:6b:d4:b3:79:b0:8f:51:d7:c0:c2:
73:e6:cf:ba:a1:f4:c7:eb:0c:95:ed:24:b0:ba:d6:5b:be:8b:
73:68:63:bc:d4:98:80:8d:e7:33:7b:3e:90:25:cc:a3:8a:0b:
5a:3d:ac:89:5a:46:c0:fa:e7:64:d5:ff:42:75:2b:2b:f6:98:
15:38:b8:77:bc:85:c0:0d:d9:db:c2:a3:0c:24:14:73:95:49:
06:1d:87:3e:e5:ba:bd:1e:62:ec:de:70:26:28:5a:51:2d:48:
a3:10:a0:0a:9c:5d:88:5d:38:cc:2b:19:58:3c:c8:db:c2:fe:
97:e5:aa:dc:6a:80:fc:ee:a2:94:59:4f:9f:c4:21:c7:de:4b:
0b:ba:7a:ce:5d:09:25:da:06:89:20:d1:4e:6e:df:d0:f3:82:
a3:0c:88:a4:5c:b7:b5:3e:46:7e:bf:b3:60:60:e1:38:0c:04:
47:d1:da:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 18:54:55 2025 by rpki-client