Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/d097bf-b0f5-43e1-86a2-cfb8da549067/1/0GPPNqD70BhEEc5OGdElRSZQ_uA.roa
File: 0GPPNqD70BhEEc5OGdElRSZQ_uA.roa (raw, json)
Hash identifier: d+8R//aHUIcUEfpxVOLBHR3p78wpduw1XLPn+Xxxlzo=
Subject key identifier: D0:63:CF:36:A0:FB:D0:18:44:11:CE:4E:19:D1:25:45:26:50:FE:E0
Certificate issuer: /CN=2a1e65f8083c859bcd0d2c52a1e061eb5131f5f1
Certificate serial: 019424B3E6AB888FC5468AD26BE274B1507D
Authority key identifier: 2A:1E:65:F8:08:3C:85:9B:CD:0D:2C:52:A1:E0:61:EB:51:31:F5:F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Kh5l-Ag8hZvNDSxSoeBh61Ex9fE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/d097bf-b0f5-43e1-86a2-cfb8da549067/1/0GPPNqD70BhEEc5OGdElRSZQ_uA.roa
Signing time: Thu 02 Jan 2025 01:49:17 +0000
ROA not before: Thu 02 Jan 2025 01:49:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207934
IP address blocks: 185.156.96.0/22 maxlen: 32
2a03:300::/29 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:e6:ab:88:8f:c5:46:8a:d2:6b:e2:74:b1:50:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a1e65f8083c859bcd0d2c52a1e061eb5131f5f1
Validity
Not Before: Jan 2 01:49:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d063cf36a0fbd0184411ce4e19d125452650fee0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:f9:3f:d5:51:69:ff:e3:05:8a:c2:4a:3c:dc:
09:58:21:d9:c0:a0:c9:91:c1:4b:3e:4a:a2:d9:0d:
2b:6e:c9:3c:76:f4:d6:13:83:c3:2d:c2:e2:2b:dc:
91:54:b9:59:10:05:74:83:c5:ce:18:7e:d9:21:02:
e9:87:6b:f0:c4:99:ee:4f:e5:48:a0:20:0d:b8:3e:
1c:ae:c0:cd:8d:81:b1:99:17:6e:52:84:15:6a:f0:
06:fa:a6:a5:c7:e2:77:0e:72:73:88:ad:2e:f5:8b:
15:24:cd:25:75:04:2b:6c:50:70:76:6a:05:3c:f9:
d9:9f:91:6f:a0:94:f3:6d:3c:ac:23:c6:46:7f:bd:
df:2d:8b:5d:f5:19:38:24:b2:6a:12:77:0a:3d:66:
2d:59:ff:5e:09:c9:81:62:81:fa:07:f3:c8:1d:50:
ce:58:c6:d0:f0:b0:7c:e3:09:13:9c:d9:c4:17:d5:
89:1b:bf:fd:b6:16:18:08:1c:40:2a:3f:ed:5b:d0:
2b:03:ad:0c:ad:7f:f8:15:f6:eb:16:68:d7:27:bf:
0a:6b:fd:bd:e2:70:d8:aa:34:e8:fa:c4:02:4f:ce:
af:fd:e0:40:54:df:92:02:f4:85:67:b0:28:9d:48:
69:da:62:08:82:ee:cd:34:ec:35:bb:04:5a:2b:44:
bc:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:63:CF:36:A0:FB:D0:18:44:11:CE:4E:19:D1:25:45:26:50:FE:E0
X509v3 Authority Key Identifier:
keyid:2A:1E:65:F8:08:3C:85:9B:CD:0D:2C:52:A1:E0:61:EB:51:31:F5:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Kh5l-Ag8hZvNDSxSoeBh61Ex9fE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/d097bf-b0f5-43e1-86a2-cfb8da549067/1/0GPPNqD70BhEEc5OGdElRSZQ_uA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/d097bf-b0f5-43e1-86a2-cfb8da549067/1/Kh5l-Ag8hZvNDSxSoeBh61Ex9fE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.156.96.0/22
IPv6:
2a03:300::/29
Signature Algorithm: sha256WithRSAEncryption
76:e7:e8:7a:61:ea:49:9a:77:99:a4:c6:52:69:da:0d:63:05:
b3:5b:56:b6:94:e1:61:d1:3e:2c:18:c0:69:97:b2:64:9b:ee:
47:a5:f6:92:ab:e6:3b:6f:26:6e:3b:96:b6:4d:d4:de:e0:ef:
7e:d6:d5:6d:d8:f2:c7:3c:dc:e1:3a:37:a5:01:21:33:e8:00:
31:c6:7e:92:c5:c8:09:b8:75:ae:3d:6f:8a:c2:ff:c5:1c:72:
ec:f3:b9:5e:24:99:d7:b3:80:c8:70:be:26:5b:09:41:f5:76:
48:60:6c:b6:3d:dd:a0:53:1e:1b:bb:7b:df:48:a5:cd:04:f9:
c9:51:33:d1:53:e1:28:ff:0a:28:56:7d:3b:c6:dc:6c:4b:d0:
a5:0e:17:0e:74:7b:44:67:a0:d3:02:05:ad:a0:a0:9b:1d:18:
95:c4:95:60:93:25:c3:af:92:f2:67:d8:eb:24:fb:68:e4:d7:
59:b6:ad:e5:5b:53:ed:a9:85:4b:08:2f:c3:91:4b:52:97:f6:
c4:12:f5:2b:ed:ab:d6:bc:d4:be:17:20:13:1a:91:2b:50:ee:
a2:47:36:75:72:1a:8e:67:e9:92:96:ad:0f:93:be:33:48:f1:
9e:2b:7c:dc:a3:48:b7:ea:7c:e8:c4:ff:9f:fa:20:88:9b:1c:
82:72:3f:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 17:37:34 2025 by rpki-client