Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/051f88-857c-4e4b-bd3d-f1b893887884/1/7nXaaVv_V235Zw4BMul2GWZ7xR8.roa
File: 7nXaaVv_V235Zw4BMul2GWZ7xR8.roa (raw, json)
Hash identifier: R4Zh1p9XslQWQrmRqKza0m+0LD8N9LPjaGQT5LDiOOY=
Subject key identifier: EE:75:DA:69:5B:FF:57:6D:F9:67:0E:01:32:E9:76:19:66:7B:C5:1F
Certificate issuer: /CN=fb0aee0e1bf8212c0225e785b394f0416bb32bb7
Certificate serial: 019427488EA4B4E4F199D144B76AA602C854
Authority key identifier: FB:0A:EE:0E:1B:F8:21:2C:02:25:E7:85:B3:94:F0:41:6B:B3:2B:B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-wruDhv4ISwCJeeFs5TwQWuzK7c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/051f88-857c-4e4b-bd3d-f1b893887884/1/7nXaaVv_V235Zw4BMul2GWZ7xR8.roa
Signing time: Thu 02 Jan 2025 13:50:54 +0000
ROA not before: Thu 02 Jan 2025 13:50:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212629
IP address blocks: 185.145.108.0/22 maxlen: 22
2a07:48c0::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:8e:a4:b4:e4:f1:99:d1:44:b7:6a:a6:02:c8:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb0aee0e1bf8212c0225e785b394f0416bb32bb7
Validity
Not Before: Jan 2 13:50:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ee75da695bff576df9670e0132e97619667bc51f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:b6:06:3d:f8:ac:76:61:12:eb:ca:fe:50:63:
2b:c0:a1:fd:08:87:b3:e1:27:30:2d:6a:71:11:bc:
c5:6e:e5:b6:c1:de:04:87:7f:c8:f7:21:02:32:56:
0b:5e:2b:46:ab:5f:80:3d:cf:bf:4d:b7:45:f5:fb:
a8:b2:64:84:5c:50:b0:e7:35:c5:c0:34:f7:02:89:
fc:dd:40:49:9e:b1:aa:20:42:12:3d:53:ea:cf:42:
9f:1d:9d:df:69:a7:ad:32:81:b8:a1:a4:10:ef:d6:
d6:2c:7b:cf:5d:c8:54:dc:e8:bc:90:6b:47:bc:8f:
fa:04:1d:0a:83:46:f6:44:66:1e:f7:e0:df:de:d5:
0b:a2:73:bc:78:16:f8:85:d9:20:6c:bf:72:78:b6:
dd:d7:28:05:28:92:d4:ef:0c:c3:34:7e:c2:5a:86:
32:d7:ab:ab:a2:55:49:3d:59:27:bd:7d:a0:07:9d:
62:50:36:b5:60:8d:5a:fe:1f:62:5d:f1:8e:00:73:
32:fa:f7:24:98:ad:50:82:1a:98:27:2f:20:28:43:
ab:e2:3c:e4:c6:72:d8:48:79:e9:43:68:b3:73:df:
c3:f5:ca:44:88:68:ee:35:52:d3:b8:1f:33:59:bc:
e2:70:c6:04:09:08:34:25:d5:30:aa:57:18:7b:29:
58:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:75:DA:69:5B:FF:57:6D:F9:67:0E:01:32:E9:76:19:66:7B:C5:1F
X509v3 Authority Key Identifier:
keyid:FB:0A:EE:0E:1B:F8:21:2C:02:25:E7:85:B3:94:F0:41:6B:B3:2B:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-wruDhv4ISwCJeeFs5TwQWuzK7c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/051f88-857c-4e4b-bd3d-f1b893887884/1/7nXaaVv_V235Zw4BMul2GWZ7xR8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/051f88-857c-4e4b-bd3d-f1b893887884/1/1-wruDhv4ISwCJeeFs5TwQWuzK7c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.145.108.0/22
IPv6:
2a07:48c0::/29
Signature Algorithm: sha256WithRSAEncryption
66:1d:1e:cf:f1:a6:9e:f6:9b:d3:9a:ec:96:74:be:69:05:df:
f1:24:5d:fa:31:e1:ad:a6:7e:13:cf:9f:72:7b:55:af:9c:9e:
eb:29:c5:54:09:d0:89:30:99:02:03:ba:41:83:77:82:f8:ef:
1d:50:da:48:9a:af:e0:5b:0d:bc:81:d8:f7:3d:26:0f:76:dc:
27:10:fc:e2:17:24:bf:f4:bf:8a:11:61:74:d0:88:bc:49:03:
de:bc:4c:8a:18:a4:fa:29:5b:48:10:ac:13:a6:dd:c5:9c:f5:
0b:de:d4:fd:16:f1:22:64:60:80:2d:c0:55:5f:59:56:08:c9:
64:c3:96:73:06:b0:9e:66:e8:e6:89:89:40:3a:9b:e7:68:6e:
7d:1e:f2:19:e7:08:0b:b6:0e:2e:70:74:31:d0:d2:12:dd:78:
bb:54:fc:fc:12:a8:a0:c0:72:1d:ff:ab:1b:33:a0:f4:3b:4f:
69:50:18:83:2d:32:cf:7a:c8:ca:d3:e7:74:01:a1:71:59:58:
63:03:ee:6d:d2:e7:fa:8c:59:66:93:48:82:ab:70:46:50:7d:
33:ec:57:79:e1:3c:89:5e:80:2d:e9:fd:91:ef:a0:a5:ff:1a:
9b:e7:43:ba:97:91:86:01:e2:1c:7f:0b:43:a0:5d:3c:ed:92:
1d:56:54:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:07:19 2025 by rpki-client