Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/1ccf25-20de-4b2e-a0e1-de4acf447fae/1/8rBNukWPHPmFUpvlkGmzTz1-HwA.roa
File: 8rBNukWPHPmFUpvlkGmzTz1-HwA.roa (raw, json)
Hash identifier: tMcco5dxWlTIQfy3zxbp0EQ9rOWiTqcDWIU/jeQq+bM=
Subject key identifier: F2:B0:4D:BA:45:8F:1C:F9:85:52:9B:E5:90:69:B3:4F:3D:7E:1F:00
Certificate issuer: /CN=7979863cea82aeb8e9df384b39aa5176f4bcfa61
Certificate serial: 0194228DAA2C58BEFDF069AA76828A92ACE5
Authority key identifier: 79:79:86:3C:EA:82:AE:B8:E9:DF:38:4B:39:AA:51:76:F4:BC:FA:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eXmGPOqCrrjp3zhLOapRdvS8-mE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/1ccf25-20de-4b2e-a0e1-de4acf447fae/1/8rBNukWPHPmFUpvlkGmzTz1-HwA.roa
Signing time: Wed 01 Jan 2025 15:48:17 +0000
ROA not before: Wed 01 Jan 2025 15:48:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 204755
IP address blocks: 185.241.176.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:aa:2c:58:be:fd:f0:69:aa:76:82:8a:92:ac:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7979863cea82aeb8e9df384b39aa5176f4bcfa61
Validity
Not Before: Jan 1 15:48:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f2b04dba458f1cf985529be59069b34f3d7e1f00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:31:dc:52:a2:96:13:05:8d:6d:c0:be:1d:dc:
9f:2b:8a:be:15:76:8e:d3:93:86:a3:30:c5:8a:9d:
da:2e:c3:9c:e2:30:9d:9e:be:c9:26:08:53:47:df:
91:33:7d:2c:e5:fd:e8:6f:d9:58:68:c4:ad:f2:b2:
bf:4a:9c:0b:58:5c:90:8f:68:50:59:18:1d:89:61:
88:9b:0d:f0:e1:de:4f:c0:c6:6f:ce:52:38:f3:4f:
72:9c:db:a2:2b:3e:3f:3a:55:b7:b2:f6:4f:8f:12:
7b:45:40:a4:03:f1:88:4b:d6:e6:04:b3:c6:5c:3a:
48:b6:75:5a:3b:61:44:31:91:ea:09:8c:2c:f8:6f:
19:42:a0:21:61:d3:a3:53:91:6e:7c:29:dd:6c:90:
2a:c8:78:a7:f5:5a:93:4f:5d:5e:16:9c:4e:60:31:
7e:dd:4a:d9:4b:15:ee:e6:4c:78:95:2c:e7:24:36:
13:32:03:53:5d:4a:b5:48:a5:77:4b:55:4f:5a:6b:
58:46:82:33:c9:f1:9e:4d:dc:bf:ac:74:79:03:aa:
d2:ee:d3:74:43:25:f4:70:6b:da:e0:d1:e6:a5:d1:
28:17:20:b5:45:7a:43:9b:e7:fc:82:6c:47:fe:44:
81:b5:f1:e6:a6:40:96:a2:47:0e:82:6a:80:2b:ab:
bd:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:B0:4D:BA:45:8F:1C:F9:85:52:9B:E5:90:69:B3:4F:3D:7E:1F:00
X509v3 Authority Key Identifier:
keyid:79:79:86:3C:EA:82:AE:B8:E9:DF:38:4B:39:AA:51:76:F4:BC:FA:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eXmGPOqCrrjp3zhLOapRdvS8-mE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/1ccf25-20de-4b2e-a0e1-de4acf447fae/1/8rBNukWPHPmFUpvlkGmzTz1-HwA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/1ccf25-20de-4b2e-a0e1-de4acf447fae/1/eXmGPOqCrrjp3zhLOapRdvS8-mE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.241.176.0/24
Signature Algorithm: sha256WithRSAEncryption
09:b2:8b:85:69:d2:4d:8a:5a:54:40:1e:15:0c:b8:94:7f:c7:
e9:5b:54:ce:6b:cf:7a:b3:76:03:cb:46:3d:03:62:68:b8:e9:
09:df:eb:f3:15:a7:12:94:9f:a7:93:6c:d8:14:31:28:66:f3:
8f:83:37:9a:a4:18:32:62:41:ff:89:08:c8:68:87:ba:42:59:
6d:bf:66:98:9a:b7:c9:ed:98:b9:6c:58:12:44:db:6f:03:9f:
f5:54:ed:02:30:2e:87:28:da:b9:81:18:47:7c:20:33:11:97:
11:cd:24:87:1f:87:7f:23:93:3f:8e:61:40:18:b1:b7:5e:74:
4d:76:98:05:17:75:30:47:a7:92:d3:22:20:01:9c:d2:69:ea:
ce:21:1b:b2:e4:78:55:56:1b:1c:3c:8b:a8:89:2b:53:f8:ba:
41:98:55:e3:70:b6:79:dd:e2:a1:7b:bd:ec:b6:f1:61:d6:b8:
b9:db:26:ea:c5:2a:2d:e5:fb:34:97:24:fe:3b:61:91:69:2c:
8b:dc:27:9b:79:d6:c3:fc:d2:6d:58:76:a2:b4:3b:70:76:51:
84:73:af:e4:95:e5:24:c4:3b:f3:2b:fb:33:9d:ed:0f:dc:22:
dc:1b:02:a2:92:c6:74:09:07:a5:d6:49:52:59:9a:ee:8d:6c:
78:24:c6:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 21:28:10 2025 by rpki-client