Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/c4ca9d-5d32-4efd-8e1b-132937d39cea/1/CNVAQFJW7dBRHMv023-ZukS0QAo.roa
File: CNVAQFJW7dBRHMv023-ZukS0QAo.roa (raw, json)
Hash identifier: MbBRQaCsuzQIrO/4FeJapKxDDTyVBpclGoH+IKXEFkE=
Subject key identifier: 08:D5:40:40:52:56:ED:D0:51:1C:CB:F4:DB:7F:99:BA:44:B4:40:0A
Certificate issuer: /CN=b7a670e51c96419fc52028b12e45655ef914ddbb
Certificate serial: 0194266BA7D43D241E22A01B88B4F0B6BBDE
Authority key identifier: B7:A6:70:E5:1C:96:41:9F:C5:20:28:B1:2E:45:65:5E:F9:14:DD:BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t6Zw5RyWQZ_FICixLkVlXvkU3bs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/c4ca9d-5d32-4efd-8e1b-132937d39cea/1/CNVAQFJW7dBRHMv023-ZukS0QAo.roa
Signing time: Thu 02 Jan 2025 09:49:37 +0000
ROA not before: Thu 02 Jan 2025 09:49:37 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43395
IP address blocks: 185.66.224.0/24 maxlen: 24
185.66.225.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:a7:d4:3d:24:1e:22:a0:1b:88:b4:f0:b6:bb:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b7a670e51c96419fc52028b12e45655ef914ddbb
Validity
Not Before: Jan 2 09:49:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=08d540405256edd0511ccbf4db7f99ba44b4400a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:f3:9c:e7:a2:45:8c:6d:76:14:ae:39:9b:b7:
8c:ff:f1:cf:7a:83:57:61:45:04:6b:b5:20:e2:fd:
36:a9:31:22:7e:32:6f:4c:7f:5c:c4:b0:d3:cd:53:
9c:d0:07:0f:b9:1b:ed:5b:2e:97:6a:9f:89:56:38:
eb:68:29:68:1b:73:e0:1f:90:f5:c2:a0:6a:8c:c8:
d1:52:ab:ea:a6:31:f8:52:11:5e:cc:b7:3f:95:3f:
03:8e:02:df:8e:7c:19:91:0d:77:6d:b4:1c:75:6a:
d1:13:a0:6a:2f:0f:fb:b4:02:ce:28:61:24:72:54:
97:e9:0a:98:dd:6f:a5:d5:99:4a:70:95:a7:1d:55:
a1:c5:69:20:62:37:0f:c6:6f:b9:01:88:af:5f:f2:
54:3b:47:8b:f9:18:cf:5e:80:f7:a4:5a:32:92:50:
07:35:9b:a0:20:8b:f3:b5:a3:4a:e1:3c:c2:07:bc:
b5:48:70:ca:0d:da:58:69:42:3e:71:e7:79:e6:93:
1c:b1:f0:af:06:c9:d5:90:44:31:ac:33:96:13:0b:
f7:be:b1:81:14:74:d0:d1:f6:5b:82:79:cd:02:08:
c2:8b:66:69:a4:e5:3c:a3:24:44:3c:f7:6f:51:a8:
32:59:e4:a6:60:64:aa:05:48:24:b0:b9:3a:d3:f8:
5f:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:D5:40:40:52:56:ED:D0:51:1C:CB:F4:DB:7F:99:BA:44:B4:40:0A
X509v3 Authority Key Identifier:
keyid:B7:A6:70:E5:1C:96:41:9F:C5:20:28:B1:2E:45:65:5E:F9:14:DD:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t6Zw5RyWQZ_FICixLkVlXvkU3bs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/c4ca9d-5d32-4efd-8e1b-132937d39cea/1/CNVAQFJW7dBRHMv023-ZukS0QAo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/c4ca9d-5d32-4efd-8e1b-132937d39cea/1/t6Zw5RyWQZ_FICixLkVlXvkU3bs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.66.224.0/23
Signature Algorithm: sha256WithRSAEncryption
40:bc:ff:fc:ed:24:71:1d:a4:26:fd:67:7d:82:1a:a4:f8:3f:
1e:7a:78:4f:44:b1:a1:78:d7:7f:4e:77:d7:a4:dc:dd:d2:f5:
ff:cf:10:f0:e7:4d:e8:f3:13:9d:67:ec:3a:03:fb:4f:aa:03:
42:2d:3f:29:12:4b:64:31:97:8e:ef:2e:a0:5e:23:b3:89:d8:
46:07:2c:65:b4:41:5d:05:e2:92:2f:0b:89:4b:4a:32:90:60:
1e:60:9d:de:2a:46:d4:c8:1a:9c:a2:8e:c1:5f:76:1b:80:cc:
68:cc:a6:dd:8a:5c:67:15:ce:86:32:50:0b:91:8a:c9:12:95:
d5:8b:ed:dd:a4:3c:62:3c:84:1f:5c:93:87:4c:d1:48:35:75:
e5:2b:04:3a:6b:ea:2a:b5:f1:3c:0f:41:92:e2:11:38:d1:72:
6e:76:c3:40:37:44:fb:a9:29:b9:c6:ab:64:6a:8a:02:82:1e:
a9:af:19:20:68:ba:5e:ea:2e:fb:9d:91:f3:48:09:af:23:f5:
75:10:78:ed:0d:50:39:f4:87:ba:e7:d2:6d:e8:32:c8:30:18:
b6:9f:8c:0e:57:51:18:0a:4e:22:7e:8c:60:d9:6b:bf:c8:90:
49:45:01:03:8e:38:c5:75:46:12:3c:9f:c3:92:66:13:6f:f9:
f1:a4:f5:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 02:08:57 2025 by rpki-client