Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/2b417d-2869-411f-aeda-4a05bac5265f/1/1-PJ8uFT3vIGcdh8Ryvstj5V11gs.roa
File: 1-PJ8uFT3vIGcdh8Ryvstj5V11gs.roa (raw, json)
Hash identifier: flh68N5wBml9poaLXGZmGeNQ/HSV3CHvsWwwddNW1dc=
Subject key identifier: F8:F2:7C:B8:54:F7:BC:81:9C:76:1F:11:CA:FB:2D:8F:95:75:D6:0B
Certificate issuer: /CN=f98669d31a14dbdc5077159cf0a65353bfbfa20a
Certificate serial: 019425222B6ACA8B5EAE3BBC5FEC6DD5C90A
Authority key identifier: F9:86:69:D3:1A:14:DB:DC:50:77:15:9C:F0:A6:53:53:BF:BF:A2:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-YZp0xoU29xQdxWc8KZTU7-_ogo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/2b417d-2869-411f-aeda-4a05bac5265f/1/1-PJ8uFT3vIGcdh8Ryvstj5V11gs.roa
Signing time: Thu 02 Jan 2025 03:49:43 +0000
ROA not before: Thu 02 Jan 2025 03:49:43 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 34222
IP address blocks: 37.46.208.0/21 maxlen: 21
217.198.112.0/20 maxlen: 20
2a00:19a0::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:22:2b:6a:ca:8b:5e:ae:3b:bc:5f:ec:6d:d5:c9:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f98669d31a14dbdc5077159cf0a65353bfbfa20a
Validity
Not Before: Jan 2 03:49:43 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f8f27cb854f7bc819c761f11cafb2d8f9575d60b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:30:8d:c4:ab:47:45:9b:65:c3:c6:53:15:91:
06:0f:8f:41:2c:fb:ac:f5:f8:a4:a3:ca:dc:d4:81:
ee:44:15:bf:ee:82:fb:cc:87:a2:53:5a:c0:2e:4d:
cc:3b:fc:46:c2:c7:42:a9:fb:2f:4a:35:33:b2:cd:
a1:5e:f0:22:cd:9c:17:29:c8:70:20:c6:e1:65:c1:
26:96:9b:65:45:82:d9:e1:86:5d:1d:8c:59:3f:c4:
7e:39:6a:3b:69:64:09:88:11:e0:7a:81:bb:69:f6:
ef:61:6d:f6:1e:7b:71:ce:a0:72:31:f8:5c:95:d0:
3a:86:b3:71:22:6b:8f:e6:1c:d7:57:37:83:a8:23:
cd:0f:87:26:60:5d:4f:bf:cb:01:8c:08:c5:57:9b:
47:59:1f:3a:cf:15:d4:a3:83:6e:69:01:31:ab:88:
fb:cf:5c:8c:f0:a3:55:0b:bb:d3:0d:d4:96:c4:07:
80:52:6f:37:8c:b5:de:30:cd:cb:22:6f:09:04:f4:
58:7a:8a:a8:4d:a2:e9:32:a9:46:8a:bd:f4:12:38:
13:37:58:41:25:63:53:ec:6f:e3:e9:82:c6:d9:d7:
6d:18:f9:c5:f2:ef:b2:60:08:f1:48:f5:b4:a7:5a:
29:57:26:bd:03:f2:f4:e2:15:21:d0:d0:0b:f5:13:
67:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:F2:7C:B8:54:F7:BC:81:9C:76:1F:11:CA:FB:2D:8F:95:75:D6:0B
X509v3 Authority Key Identifier:
keyid:F9:86:69:D3:1A:14:DB:DC:50:77:15:9C:F0:A6:53:53:BF:BF:A2:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-YZp0xoU29xQdxWc8KZTU7-_ogo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/2b417d-2869-411f-aeda-4a05bac5265f/1/1-PJ8uFT3vIGcdh8Ryvstj5V11gs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/2b417d-2869-411f-aeda-4a05bac5265f/1/1-YZp0xoU29xQdxWc8KZTU7-_ogo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.46.208.0/21
217.198.112.0/20
IPv6:
2a00:19a0::/32
Signature Algorithm: sha256WithRSAEncryption
6c:4f:52:5e:d3:8d:e1:9f:c0:59:4d:25:85:b8:65:1e:06:55:
e5:38:37:fa:d4:b9:b7:2b:bf:d8:7f:23:47:3a:db:53:27:47:
e3:5f:3c:fd:05:c8:44:db:5f:45:a9:93:21:4a:e2:54:28:79:
46:79:c8:2d:c1:32:7c:6e:a1:bf:1b:1e:05:7c:4c:65:7d:ae:
10:78:b5:f3:f9:4a:5a:eb:69:21:41:c6:dc:2b:e7:2f:e3:32:
4f:06:8d:22:63:88:dc:2f:8d:b3:21:1b:f2:18:7a:c4:7a:6e:
11:ae:f4:39:ca:99:9d:71:e8:76:8d:fb:57:df:87:81:5c:ee:
c7:df:2d:24:57:7b:34:51:cb:03:1e:1c:ee:33:97:66:af:57:
de:f8:00:fb:9f:37:26:af:df:41:d9:a7:f1:fd:99:3f:da:37:
0b:3e:ac:a5:99:b9:1c:43:6b:6b:7e:3f:d5:fd:48:8d:82:80:
34:d9:88:39:a9:b2:5c:fa:f4:33:40:b7:5e:d1:b6:4e:f7:b2:
5d:ee:56:16:3c:07:91:7a:4e:09:b5:44:87:32:27:a4:5b:9f:
8d:5b:c7:0c:e4:54:c7:cf:a4:cd:af:18:42:64:06:79:97:a8:
da:be:8d:ea:2d:03:34:3f:49:c4:16:d7:d5:69:4b:47:78:57:
e9:e5:92:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 07:53:13 2025 by rpki-client