Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/e4ccb1-ca25-4099-8273-3993aa324e1f/1/Vv7xuEIJNPkNiS2jgKXFiJ0hO5o.roa
File: Vv7xuEIJNPkNiS2jgKXFiJ0hO5o.roa (raw, json)
Hash identifier: 0tBte5YJPRScKJDnL/xskQjq4j0+cjIuEo3Z5S4On/k=
Subject key identifier: 56:FE:F1:B8:42:09:34:F9:0D:89:2D:A3:80:A5:C5:88:9D:21:3B:9A
Certificate issuer: /CN=6ce97cf4d8d0bc17b3af1d62c4d71488661bd212
Certificate serial: 019425FDC7A29FA05483152E1566F71E8014
Authority key identifier: 6C:E9:7C:F4:D8:D0:BC:17:B3:AF:1D:62:C4:D7:14:88:66:1B:D2:12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bOl89NjQvBezrx1ixNcUiGYb0hI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/e4ccb1-ca25-4099-8273-3993aa324e1f/1/Vv7xuEIJNPkNiS2jgKXFiJ0hO5o.roa
Signing time: Thu 02 Jan 2025 07:49:36 +0000
ROA not before: Thu 02 Jan 2025 07:49:36 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205513
IP address blocks: 185.190.151.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:c7:a2:9f:a0:54:83:15:2e:15:66:f7:1e:80:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ce97cf4d8d0bc17b3af1d62c4d71488661bd212
Validity
Not Before: Jan 2 07:49:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=56fef1b8420934f90d892da380a5c5889d213b9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:92:3d:25:4e:32:cc:95:16:68:9f:90:76:a6:
80:af:d5:b8:86:29:26:c1:d6:89:93:18:37:fe:77:
66:c4:23:fd:07:8b:b8:79:1a:b9:d3:5f:8e:93:4f:
59:27:6d:2c:77:97:37:ae:06:b4:33:70:5b:9c:74:
95:4f:f2:84:2c:9f:ec:19:f1:f9:72:5b:ee:c3:95:
7a:ba:0a:56:75:9b:ce:68:9e:6f:b7:bd:db:0a:c3:
1c:d9:61:7d:86:62:a9:e9:b6:33:80:ba:b0:1d:70:
2e:59:15:4b:52:a3:65:cb:2e:91:f0:c2:51:bf:a9:
69:72:97:71:2b:0f:7d:64:0e:ab:96:76:d5:5d:b2:
a4:08:87:a1:df:f4:56:bf:7b:91:f2:b0:4e:ef:32:
89:14:df:7b:0d:4a:02:26:ae:d3:74:5e:60:df:7b:
ca:a0:c8:4a:33:4f:2c:e6:c6:38:18:32:3a:49:ef:
5d:cb:4b:63:72:09:c0:ca:60:16:60:9d:33:05:f7:
fd:49:ac:01:23:39:98:bf:b7:4e:f3:c2:02:37:fb:
67:85:19:14:f9:19:2e:67:62:6c:9a:a2:27:00:53:
8f:8d:13:b7:5b:1a:ee:49:14:7d:a5:d5:95:59:12:
f4:b3:f7:2e:28:c4:c4:5d:5c:2e:58:2f:50:83:87:
ae:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:FE:F1:B8:42:09:34:F9:0D:89:2D:A3:80:A5:C5:88:9D:21:3B:9A
X509v3 Authority Key Identifier:
keyid:6C:E9:7C:F4:D8:D0:BC:17:B3:AF:1D:62:C4:D7:14:88:66:1B:D2:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bOl89NjQvBezrx1ixNcUiGYb0hI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/e4ccb1-ca25-4099-8273-3993aa324e1f/1/Vv7xuEIJNPkNiS2jgKXFiJ0hO5o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/e4ccb1-ca25-4099-8273-3993aa324e1f/1/bOl89NjQvBezrx1ixNcUiGYb0hI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.190.151.0/24
Signature Algorithm: sha256WithRSAEncryption
89:0f:88:0d:02:e5:b4:4d:ce:b1:b6:39:36:b8:fd:b6:9f:b5:
41:c0:15:72:d7:85:6a:90:65:2a:84:6d:5b:f8:bf:c1:e3:ae:
c2:32:58:c4:08:23:f0:d8:03:dc:0a:06:8d:6c:8a:0e:ad:31:
18:d5:f0:b1:35:e1:dc:51:37:2f:c5:e4:4b:b4:0a:01:22:c6:
51:15:9a:e6:92:22:23:44:de:26:b2:0b:c1:33:2f:6a:88:21:
2b:62:07:1b:55:67:b0:fe:28:29:f6:11:da:78:e6:82:6a:ce:
c9:4d:ca:fd:ac:63:38:77:21:2d:78:84:67:06:69:91:53:e3:
3e:59:11:1f:72:17:e1:89:8b:af:e4:5e:79:37:48:14:38:ae:
1c:0e:d2:1c:c9:6c:8a:7b:8d:a3:18:bb:21:cf:27:ad:43:86:
0f:ff:30:b6:59:58:fa:25:ab:1f:4b:15:f1:2c:6b:c9:27:d3:
e2:51:d0:d0:95:96:80:3e:43:f5:ab:e8:47:e9:ab:0c:4a:c8:
a1:e9:cb:75:28:c0:c8:1b:80:cf:d3:3b:64:4a:f2:11:7c:36:
8e:93:57:97:ee:38:20:23:95:b0:91:cf:c3:db:e4:de:a3:56:
11:10:d6:a9:d7:da:62:6e:15:b4:95:12:17:a4:00:2d:c0:89:
8f:f2:86:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:15:34 2025 by rpki-client