Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/179f80-8838-4d4c-b8d1-31a964f8a37f/1/Ahr8cLoMjuhdLqjDmUtP7XZpYek.roa
File: Ahr8cLoMjuhdLqjDmUtP7XZpYek.roa (raw, json)
Hash identifier: +5UAkntpANzuu6Eiv6TWU+2W0yxLaSEMeiDxRWb4xso=
Subject key identifier: 02:1A:FC:70:BA:0C:8E:E8:5D:2E:A8:C3:99:4B:4F:ED:76:69:61:E9
Certificate issuer: /CN=a1b39d824479d4da7b12f65c15e5c42725f5260b
Certificate serial: 019426D90BFC0AB2C7EDA20E65C5E59E533B
Authority key identifier: A1:B3:9D:82:44:79:D4:DA:7B:12:F6:5C:15:E5:C4:27:25:F5:26:0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/obOdgkR51Np7EvZcFeXEJyX1Jgs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/179f80-8838-4d4c-b8d1-31a964f8a37f/1/Ahr8cLoMjuhdLqjDmUtP7XZpYek.roa
Signing time: Thu 02 Jan 2025 11:49:05 +0000
ROA not before: Thu 02 Jan 2025 11:49:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205341
IP address blocks: 185.221.8.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:0b:fc:0a:b2:c7:ed:a2:0e:65:c5:e5:9e:53:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1b39d824479d4da7b12f65c15e5c42725f5260b
Validity
Not Before: Jan 2 11:49:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=021afc70ba0c8ee85d2ea8c3994b4fed766961e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:42:bc:60:07:70:6f:36:cd:03:0c:0e:3a:86:
33:09:26:fa:fc:39:ca:bc:dd:07:0a:48:89:08:aa:
48:25:ea:6b:43:40:86:ff:e1:8c:48:4e:ba:05:80:
5b:b5:ac:b7:33:32:10:8d:6d:2d:42:5c:53:70:49:
8b:9d:43:98:03:c5:86:69:02:b0:d8:de:ff:3b:28:
2e:5c:c2:7c:24:78:7b:a2:80:ed:67:8f:51:d3:12:
1d:f5:95:f3:51:4c:0a:b1:bc:34:dd:69:00:91:fc:
62:22:5d:a6:d8:41:2b:8f:01:8d:88:61:46:c9:60:
27:c3:1a:24:c3:68:01:2a:bd:62:8b:d9:91:c6:94:
8d:a0:63:e3:1d:f2:e3:bd:b2:65:75:26:05:4a:de:
ad:80:e4:4a:c5:af:c4:b1:c9:1e:58:19:d6:0d:19:
f4:23:09:e4:1c:3a:82:b1:73:2d:9e:3b:38:73:a5:
6b:18:95:0b:e5:44:8d:a6:d0:63:ff:f4:6e:3e:c9:
2b:e2:a0:98:cb:39:e3:60:73:6a:da:a4:7a:08:53:
32:91:ff:07:41:15:34:9c:10:83:7e:fd:66:27:b4:
c3:f1:c2:cb:2c:5d:a7:6b:ac:a1:ef:a1:04:e6:8f:
1c:5a:d6:1b:08:6a:9f:bb:bc:c3:2d:68:1c:86:b4:
50:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:1A:FC:70:BA:0C:8E:E8:5D:2E:A8:C3:99:4B:4F:ED:76:69:61:E9
X509v3 Authority Key Identifier:
keyid:A1:B3:9D:82:44:79:D4:DA:7B:12:F6:5C:15:E5:C4:27:25:F5:26:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/obOdgkR51Np7EvZcFeXEJyX1Jgs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/179f80-8838-4d4c-b8d1-31a964f8a37f/1/Ahr8cLoMjuhdLqjDmUtP7XZpYek.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/179f80-8838-4d4c-b8d1-31a964f8a37f/1/obOdgkR51Np7EvZcFeXEJyX1Jgs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.221.8.0/22
Signature Algorithm: sha256WithRSAEncryption
0c:2d:da:ef:ef:14:c7:d4:72:5b:1e:06:cb:6d:5c:d5:53:d6:
ab:b2:22:47:88:49:cb:95:7c:91:4c:f8:41:47:d8:26:2b:3f:
93:d8:99:30:7d:a3:52:d9:38:7a:74:27:f9:19:4a:72:48:d8:
1c:6e:94:4c:ee:05:74:c5:d2:af:79:e4:d8:69:0f:56:bd:a6:
cf:40:f9:20:c0:f6:98:15:8d:7a:c1:86:ab:bc:f7:9d:50:b0:
4a:3e:a1:33:65:e4:2a:8f:b2:bb:d4:7e:0b:c7:31:06:4b:ec:
75:c2:8f:ac:c9:e2:bf:84:8d:04:9a:f8:18:b3:ef:25:e6:36:
76:73:3b:9c:84:aa:a8:b2:44:b3:71:b9:14:23:16:bc:e5:d7:
8e:00:2c:8a:5f:69:a1:8c:06:ac:ab:cb:d2:a0:ec:b9:eb:fa:
9f:f4:1d:c1:cd:00:21:e7:99:7c:77:d7:6b:42:0c:0c:a1:2a:
21:74:01:da:fc:67:91:18:9d:5c:58:4a:05:21:49:10:ff:a1:
7e:cf:d6:26:fd:9d:1a:1f:5a:3c:60:ca:00:77:2e:b5:94:bf:
12:3a:de:fc:71:d3:b0:cf:50:57:52:6d:d9:33:f0:88:86:ec:
0a:1d:3a:a8:50:4a:82:e8:90:8a:0e:02:99:e7:cf:38:57:f8:
bc:a9:30:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 22:33:48 2025 by rpki-client