Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/ae4547-2ca2-4cbd-a1b5-3cf3b463a86a/1/8ea9JzqwyGDT2dMFgAmUz7EOwao.roa
File: 8ea9JzqwyGDT2dMFgAmUz7EOwao.roa (raw, json)
Hash identifier: VSNDXOm1+cAC798c36135Xw4x7+9RwirArr3iwfbiGQ=
Subject key identifier: F1:E6:BD:27:3A:B0:C8:60:D3:D9:D3:05:80:09:94:CF:B1:0E:C1:AA
Certificate issuer: /CN=03f7e7cf8176e302764d48299fc22a9bdc6ba683
Certificate serial: 0194B11145265CA2FFF24025CF7404BDD67B
Authority key identifier: 03:F7:E7:CF:81:76:E3:02:76:4D:48:29:9F:C2:2A:9B:DC:6B:A6:83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A_fnz4F24wJ2TUgpn8Iqm9xrpoM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/ae4547-2ca2-4cbd-a1b5-3cf3b463a86a/1/8ea9JzqwyGDT2dMFgAmUz7EOwao.roa
Signing time: Wed 29 Jan 2025 07:58:06 +0000
ROA not before: Wed 29 Jan 2025 07:58:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214012
IP address blocks: 185.201.69.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:b1:11:45:26:5c:a2:ff:f2:40:25:cf:74:04:bd:d6:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03f7e7cf8176e302764d48299fc22a9bdc6ba683
Validity
Not Before: Jan 29 07:58:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f1e6bd273ab0c860d3d9d305800994cfb10ec1aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:cf:29:71:ee:07:eb:86:4b:59:e8:3a:82:9b:
a4:f4:7f:ab:20:61:b0:b5:03:36:33:93:d4:27:b7:
be:3a:91:28:f1:57:91:1f:00:27:67:f1:cf:e4:65:
de:9e:df:77:96:54:6f:97:1a:d1:4b:bc:b4:9c:f9:
f4:d1:5b:e5:e7:4c:f3:d2:64:5a:e9:2a:0e:95:a0:
95:5b:f2:7f:0c:e5:80:4a:ae:4e:55:59:e1:0f:b2:
26:1b:09:80:1c:74:46:5e:e1:e3:4b:ae:36:e5:13:
34:10:f1:a3:28:7f:42:97:48:8f:55:74:d7:50:73:
27:07:5a:2f:1c:95:19:f8:97:1b:d4:7f:98:e3:c6:
a5:0e:92:59:fb:31:1d:c8:90:65:13:b9:de:58:de:
55:b4:80:b6:4b:62:f5:91:4c:97:1d:6f:51:9e:e8:
48:41:36:e1:f4:ee:27:70:31:a8:82:c9:b8:4b:ae:
8c:0b:84:66:43:5e:0b:d7:5a:46:f9:72:cd:7d:9d:
39:4c:4b:30:df:be:77:61:dc:ae:a1:01:df:61:9d:
21:34:71:22:5f:c1:53:68:93:2a:f1:76:17:f7:dc:
c4:66:8f:3f:bc:84:e2:7b:13:e6:06:38:26:2a:02:
02:86:0b:7a:a6:6f:ab:a3:e3:03:88:30:8d:74:a7:
68:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:E6:BD:27:3A:B0:C8:60:D3:D9:D3:05:80:09:94:CF:B1:0E:C1:AA
X509v3 Authority Key Identifier:
keyid:03:F7:E7:CF:81:76:E3:02:76:4D:48:29:9F:C2:2A:9B:DC:6B:A6:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A_fnz4F24wJ2TUgpn8Iqm9xrpoM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/ae4547-2ca2-4cbd-a1b5-3cf3b463a86a/1/8ea9JzqwyGDT2dMFgAmUz7EOwao.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/ae4547-2ca2-4cbd-a1b5-3cf3b463a86a/1/A_fnz4F24wJ2TUgpn8Iqm9xrpoM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.201.69.0/24
Signature Algorithm: sha256WithRSAEncryption
23:c4:a7:27:e0:e1:f6:32:ff:c6:f0:b8:67:33:f4:22:c6:96:
ee:6d:b8:80:76:18:84:46:e8:e3:4a:2b:8f:2e:04:7b:1d:2a:
9f:c9:d9:79:9e:f1:36:01:a2:c0:7d:b5:2b:10:05:20:cc:c6:
36:70:45:7a:2e:d2:05:04:72:e8:63:27:f9:ca:12:30:9b:61:
12:88:d1:b2:08:60:80:60:5f:c5:8e:c3:ca:55:92:d1:e1:d7:
90:83:46:17:c6:64:ef:a8:f3:ce:c2:6f:19:7a:2d:dc:11:de:
2d:41:89:51:05:88:d6:74:af:39:d0:a6:4d:85:9b:8e:21:cc:
c9:af:13:04:33:06:e0:74:79:6d:cf:ad:a9:39:0f:d4:d2:53:
6a:dd:e6:4a:35:5e:70:e1:98:46:ca:c4:70:31:87:29:51:2b:
31:65:06:4f:f3:d5:98:dc:2e:08:f9:e7:33:ba:3d:c7:92:ce:
be:a4:98:2e:ef:ff:e4:a3:12:e9:8d:93:3d:9f:be:4d:88:ce:
07:32:3a:4d:9c:b0:e7:90:7b:89:4b:d5:d1:f2:62:db:85:ca:
ad:9b:8f:a2:92:ef:e3:83:a5:c3:45:30:8e:0d:de:69:37:6d:
e0:62:38:51:30:46:b7:3d:46:8e:d1:70:5e:92:b5:76:f7:f7:
ee:50:7e:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:03:26 2025 by rpki-client