Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/FZ30BS7c99CQqzoVNy_qf_6mJzg.roa
File: FZ30BS7c99CQqzoVNy_qf_6mJzg.roa (raw, json)
Hash identifier: +/HEuopMgXs1AcyNXLuf5qhJ2S6YVu77GGZUrjSbO5s=
Subject key identifier: 15:9D:F4:05:2E:DC:F7:D0:90:AB:3A:15:37:2F:EA:7F:FE:A6:27:38
Certificate issuer: /CN=8eb441dadbbecb6965d4ea1f046cc5c8e28817fc
Certificate serial: 019424B3E5D7995EB4B650A07A7179EAC166
Authority key identifier: 8E:B4:41:DA:DB:BE:CB:69:65:D4:EA:1F:04:6C:C5:C8:E2:88:17:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jrRB2tu-y2ll1OofBGzFyOKIF_w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/FZ30BS7c99CQqzoVNy_qf_6mJzg.roa
Signing time: Thu 02 Jan 2025 01:49:17 +0000
ROA not before: Thu 02 Jan 2025 01:49:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202302
IP address blocks: 185.143.145.0/24 maxlen: 24
185.235.218.0/24 maxlen: 24
185.235.219.0/24 maxlen: 24
185.253.218.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:e5:d7:99:5e:b4:b6:50:a0:7a:71:79:ea:c1:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8eb441dadbbecb6965d4ea1f046cc5c8e28817fc
Validity
Not Before: Jan 2 01:49:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=159df4052edcf7d090ab3a15372fea7ffea62738
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:ad:53:43:d7:f3:b7:bf:18:ae:82:4e:b7:01:
6c:f6:cb:d4:4f:70:13:f8:b7:d5:25:95:ce:0b:77:
a9:bb:2f:b4:17:2a:ab:2c:9c:80:05:69:db:20:51:
e8:fc:32:ed:f2:bf:31:19:3f:a9:81:ac:85:97:4f:
d9:63:da:48:46:79:62:7d:05:5d:36:03:e3:7c:c4:
67:9b:70:06:98:f9:3f:73:a5:50:80:af:06:a7:7a:
3a:15:0d:3c:2d:e2:d6:c7:dd:e2:41:f8:2a:5b:8a:
e7:d3:25:4d:27:90:01:0a:f0:08:a5:f4:fc:30:fd:
06:44:96:d6:07:05:2b:91:82:8c:a6:ca:c1:fc:4f:
28:a2:31:b4:6c:5d:08:8e:dc:fa:b6:66:7a:97:04:
b8:8f:99:df:41:02:88:7f:39:3a:43:cf:ff:46:63:
e0:5d:f1:a7:b2:a1:8a:84:b8:c5:5a:87:07:47:57:
de:62:dd:d2:bc:a9:05:97:09:fd:fc:46:73:ad:ba:
0f:ad:62:06:1c:f6:d6:83:eb:d4:4d:49:53:04:1e:
ec:c7:ca:cc:42:51:9c:ac:88:1b:26:74:16:0e:db:
8f:a2:8c:a3:86:ee:3e:31:cd:7f:8c:0b:8d:df:81:
93:23:67:d9:70:3e:14:fa:86:4c:49:e0:01:32:a4:
f5:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:9D:F4:05:2E:DC:F7:D0:90:AB:3A:15:37:2F:EA:7F:FE:A6:27:38
X509v3 Authority Key Identifier:
keyid:8E:B4:41:DA:DB:BE:CB:69:65:D4:EA:1F:04:6C:C5:C8:E2:88:17:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jrRB2tu-y2ll1OofBGzFyOKIF_w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/FZ30BS7c99CQqzoVNy_qf_6mJzg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/jrRB2tu-y2ll1OofBGzFyOKIF_w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.143.145.0/24
185.235.218.0/23
185.253.218.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:74:52:e1:12:5f:f2:c1:82:3e:64:9f:9c:86:a4:02:61:7c:
bc:80:0e:54:25:76:81:a1:e7:cf:be:bd:d8:d4:b9:8a:87:c7:
2e:e3:8d:ed:59:09:21:d3:ab:54:57:3b:6c:0e:b7:af:52:18:
71:32:14:7b:82:cd:43:ff:47:30:1f:ce:2b:1b:33:4e:a0:8d:
b0:4e:44:a5:9f:8b:ff:56:41:6a:5d:13:80:45:bc:08:c3:1b:
92:43:20:76:74:06:b1:c7:b9:2c:85:de:f7:9a:cd:fa:c7:55:
17:ca:af:23:88:b4:1f:35:63:77:c7:31:66:8e:78:c9:ba:08:
c1:fc:52:75:21:d2:a7:09:18:eb:fb:59:c2:ae:0c:1d:b7:9b:
7b:2a:87:59:93:e2:0c:97:3d:e3:0a:72:f7:f0:c4:16:82:d6:
2f:48:78:45:53:f7:7c:39:9c:57:ae:a2:f5:cd:d0:6e:1b:83:
64:1a:ee:c7:e8:69:b8:b6:7b:fe:98:9b:e5:ed:d4:55:b8:71:
ba:40:d5:72:f3:94:42:a2:7b:50:3d:bd:79:40:87:48:8e:6d:
b4:ab:44:08:df:75:65:a3:a4:cc:d5:28:55:9f:d2:94:f0:8e:
0a:d8:73:89:24:5f:1d:dc:18:87:40:db:30:b6:c2:3e:fb:af:
5e:bc:95:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 04:15:28 2025 by rpki-client