Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/78d528-7cdf-44c0-acdd-f533b8df80a9/1/fVzi51ZTYJvG8OlHaHe6Hpz-9d0.roa
File: fVzi51ZTYJvG8OlHaHe6Hpz-9d0.roa (raw, json)
Hash identifier: 3gHjTPNLpFC2wsNZgxq1+e+hiCj6cjetK9vCSU+h69I=
Subject key identifier: 7D:5C:E2:E7:56:53:60:9B:C6:F0:E9:47:68:77:BA:1E:9C:FE:F5:DD
Certificate issuer: /CN=3f3f554b80281dea2a300318aaad6d2d97f1ce44
Certificate serial: 019494B63354389CCA4B115BA2B8A66971E4
Authority key identifier: 3F:3F:55:4B:80:28:1D:EA:2A:30:03:18:AA:AD:6D:2D:97:F1:CE:44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pz9VS4AoHeoqMAMYqq1tLZfxzkQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/78d528-7cdf-44c0-acdd-f533b8df80a9/1/fVzi51ZTYJvG8OlHaHe6Hpz-9d0.roa
Signing time: Thu 23 Jan 2025 19:49:16 +0000
ROA not before: Thu 23 Jan 2025 19:49:16 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 36680
IP address blocks: 185.224.0.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:94:b6:33:54:38:9c:ca:4b:11:5b:a2:b8:a6:69:71:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f3f554b80281dea2a300318aaad6d2d97f1ce44
Validity
Not Before: Jan 23 19:49:16 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7d5ce2e75653609bc6f0e9476877ba1e9cfef5dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:8d:0b:dd:ae:9b:43:86:d9:13:d0:fc:5c:70:
8c:94:9f:a0:8f:aa:8a:90:01:a6:8b:c5:b4:73:e0:
e7:83:68:0f:05:38:06:43:9b:a5:be:6d:be:b1:40:
62:5a:25:8e:6c:43:f9:2d:3b:6c:1a:7f:96:8b:e1:
60:c4:71:e0:77:db:71:33:a7:1e:a3:bd:d8:4a:35:
ea:5d:9e:a9:4c:9d:8d:10:4f:7e:ce:a4:72:c8:a0:
89:b4:08:8e:48:33:a5:43:79:de:d6:2b:03:cc:4b:
6e:5c:69:98:3b:a2:0d:f3:74:6c:8b:d1:43:42:3d:
37:11:28:16:5a:39:70:56:06:f6:8a:dc:81:58:39:
62:c4:e4:83:be:be:2c:08:ff:52:5e:93:75:a8:5b:
d7:75:46:46:91:ef:0f:ad:f1:ea:af:72:46:b5:7b:
ca:f7:ae:23:c2:24:e9:d1:b4:8f:03:94:b8:0e:29:
62:b6:46:dd:01:d6:6f:71:ad:b6:ab:91:a2:e2:3f:
37:68:3a:3a:58:19:05:93:23:03:ff:0b:cc:47:e2:
8f:0e:5a:ec:02:f5:c4:1d:9c:89:c8:1f:9c:8e:42:
0a:4c:ff:2a:0b:66:75:22:24:15:fe:e9:36:e8:87:
ed:9d:30:64:2c:8d:ae:b0:52:3b:99:8a:7b:0e:2f:
fd:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:5C:E2:E7:56:53:60:9B:C6:F0:E9:47:68:77:BA:1E:9C:FE:F5:DD
X509v3 Authority Key Identifier:
keyid:3F:3F:55:4B:80:28:1D:EA:2A:30:03:18:AA:AD:6D:2D:97:F1:CE:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pz9VS4AoHeoqMAMYqq1tLZfxzkQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/78d528-7cdf-44c0-acdd-f533b8df80a9/1/fVzi51ZTYJvG8OlHaHe6Hpz-9d0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/78d528-7cdf-44c0-acdd-f533b8df80a9/1/Pz9VS4AoHeoqMAMYqq1tLZfxzkQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.224.0.0/24
Signature Algorithm: sha256WithRSAEncryption
44:74:29:1d:11:44:a6:1a:7d:cb:7c:2e:3f:6a:81:6f:00:53:
66:d6:79:2a:81:82:81:e0:cc:87:4c:5c:49:f0:83:f1:22:8d:
eb:be:36:90:7c:b4:33:fc:71:2c:f9:b2:51:43:a3:c5:0e:97:
75:40:0b:ed:f9:7a:b2:8f:25:13:ba:60:cb:3d:9f:62:77:e1:
74:2b:ca:e7:bd:41:b5:db:62:1e:81:33:a5:77:0f:27:71:17:
20:d1:9a:85:10:e4:a5:dc:54:cd:25:99:10:93:ef:12:20:c4:
a9:ee:9a:fb:b8:59:d4:b1:2c:d1:48:25:96:88:d2:a7:df:96:
75:6d:f3:a4:8b:b4:79:eb:0d:2b:19:68:93:38:f5:db:68:aa:
24:9f:19:fd:9c:98:f3:2c:3c:c8:f2:34:38:7e:cc:ee:b1:2e:
b8:e6:97:87:cd:50:c4:0e:82:5c:28:3c:46:cb:c9:26:28:d2:
34:a7:17:41:43:27:ef:e9:bd:16:3e:6e:16:1c:42:c1:1f:df:
5e:89:29:21:69:0a:b7:12:33:34:af:f2:ce:97:fb:c7:2c:a0:
ce:9c:6a:25:59:87:bf:f4:08:63:c8:18:ab:12:98:b5:22:01:
bd:c7:7b:3a:53:2b:79:00:bd:92:a1:2c:a8:e4:24:9d:67:a4:
b8:00:d3:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:52:24 2025 by rpki-client