Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/5615ec-51c5-4a4d-b6f9-e407e6025a43/1/V9AZTNgU1d002QfKUotGNDSDtvk.roa
File: V9AZTNgU1d002QfKUotGNDSDtvk.roa (raw, json)
Hash identifier: x3l+fuQjKQuMTqxTAI/mH6BtVLnUzYs7euSSf0MTbRg=
Subject key identifier: 57:D0:19:4C:D8:14:D5:DD:34:D9:07:CA:52:8B:46:34:34:83:B6:F9
Certificate issuer: /CN=1f00b0aa8924c377889e3d3b996093b87a73d0e1
Certificate serial: 01941FFA02C88921FC4AED33196AB9A2AC61
Authority key identifier: 1F:00:B0:AA:89:24:C3:77:88:9E:3D:3B:99:60:93:B8:7A:73:D0:E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HwCwqokkw3eInj07mWCTuHpz0OE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/5615ec-51c5-4a4d-b6f9-e407e6025a43/1/V9AZTNgU1d002QfKUotGNDSDtvk.roa
Signing time: Wed 01 Jan 2025 03:47:45 +0000
ROA not before: Wed 01 Jan 2025 03:47:45 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50264
IP address blocks: 87.251.23.0/24 maxlen: 24
185.165.20.0/24 maxlen: 24
185.165.21.0/24 maxlen: 24
185.165.22.0/24 maxlen: 24
185.165.23.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:02:c8:89:21:fc:4a:ed:33:19:6a:b9:a2:ac:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f00b0aa8924c377889e3d3b996093b87a73d0e1
Validity
Not Before: Jan 1 03:47:45 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=57d0194cd814d5dd34d907ca528b46343483b6f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:8b:e6:6b:23:0f:18:6d:36:f8:08:c8:fb:31:
75:33:c5:f4:90:f9:65:ee:e2:9c:24:5d:bc:47:f2:
91:21:02:e0:50:59:fc:9a:ab:8d:a5:1f:99:08:25:
41:10:05:e8:02:97:67:23:3b:69:6c:b3:8a:96:bb:
dd:52:fd:54:f6:d8:b5:78:90:3d:fd:fb:ca:c7:77:
a6:7a:d8:cd:e9:a7:a1:0a:d8:47:92:ab:37:56:af:
49:ad:7a:e7:91:92:bf:59:06:55:7b:22:31:75:f3:
5a:f3:e8:32:4e:4c:e0:c0:8f:26:3d:6d:89:87:3f:
42:a6:73:c9:57:12:f6:29:59:a2:93:7e:b6:2f:0a:
49:31:de:1b:68:fa:49:d6:0c:20:ee:70:61:7b:ed:
50:ee:7c:a0:44:5a:85:06:02:e6:ec:a6:c4:7f:cc:
76:d1:83:7a:17:0f:88:5e:57:28:49:f4:c2:9d:e2:
97:80:56:3e:e3:2e:0a:9b:0b:39:65:0e:79:a5:cc:
d4:ad:62:25:e4:69:c4:ff:aa:b1:ee:74:8c:2c:bc:
1b:19:3c:59:5a:1b:a5:2b:79:69:78:4c:25:4d:07:
ec:a2:0c:1c:a7:5e:f6:d0:55:7e:f6:46:22:94:ef:
ce:8c:06:ee:36:d5:ab:97:ac:37:46:44:fd:65:d4:
e6:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:D0:19:4C:D8:14:D5:DD:34:D9:07:CA:52:8B:46:34:34:83:B6:F9
X509v3 Authority Key Identifier:
keyid:1F:00:B0:AA:89:24:C3:77:88:9E:3D:3B:99:60:93:B8:7A:73:D0:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HwCwqokkw3eInj07mWCTuHpz0OE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/5615ec-51c5-4a4d-b6f9-e407e6025a43/1/V9AZTNgU1d002QfKUotGNDSDtvk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/5615ec-51c5-4a4d-b6f9-e407e6025a43/1/HwCwqokkw3eInj07mWCTuHpz0OE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.251.23.0/24
185.165.20.0/22
Signature Algorithm: sha256WithRSAEncryption
3b:85:b6:bf:0e:18:ca:b1:ea:f4:24:15:d0:b9:0a:cb:d4:62:
9f:16:17:69:a1:ea:e1:e9:8e:a3:9d:15:48:78:d0:80:92:22:
5c:84:a0:4c:8c:c2:ea:b8:4c:c8:3f:cd:3d:08:d1:f7:f8:d1:
fd:d8:a9:30:31:5d:4d:55:80:19:34:17:d3:1a:e3:f5:14:df:
39:6b:f6:a4:2d:b3:2f:6e:8b:20:40:32:c9:33:a9:3a:b2:af:
72:f9:85:3a:36:d6:e3:7a:f7:2d:83:cf:ca:97:2e:44:35:91:
ef:ee:65:d5:03:57:5b:8a:24:3f:00:ab:5d:a8:e4:8b:2d:e3:
2f:71:42:77:27:2e:f4:f0:ea:cd:0c:ed:ab:28:13:18:34:35:
a8:ae:de:bb:54:e2:33:3a:68:74:2d:91:78:ea:7f:62:cd:d9:
48:e0:6e:ad:08:4f:e4:c4:7e:7e:6f:ea:a0:da:22:c0:7a:08:
d1:e5:bd:72:81:6b:2b:7a:20:42:f3:75:8a:44:2f:3b:99:72:
e1:a7:7d:24:ff:4d:7f:fa:aa:bf:7d:23:ac:15:4e:51:23:04:
66:6a:10:c8:67:6c:c9:b3:82:be:4c:98:83:80:56:8a:16:9c:
fe:9a:66:bc:80:10:cc:14:c0:e3:d4:c1:29:1c:cf:9d:c4:7c:
4c:f3:d4:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:59:31 2025 by rpki-client