Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/605f1c-0d7a-4bd3-88b6-2f0a6bdbbe51/1/2CKju1sFnZ0dhsD0IYQZTaEskZg.roa
File: 2CKju1sFnZ0dhsD0IYQZTaEskZg.roa (raw, json)
Hash identifier: hgm4YcpbD+zZdUyJsK5xaCbHCgY7kvAz52Dw1xev4OE=
Subject key identifier: D8:22:A3:BB:5B:05:9D:9D:1D:86:C0:F4:21:84:19:4D:A1:2C:91:98
Certificate issuer: /CN=10f1d0dbe093c722350618f4045c25ba94317f87
Certificate serial: 01942067EFC16F475B376B95B46FFB27D819
Authority key identifier: 10:F1:D0:DB:E0:93:C7:22:35:06:18:F4:04:5C:25:BA:94:31:7F:87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EPHQ2-CTxyI1Bhj0BFwlupQxf4c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/605f1c-0d7a-4bd3-88b6-2f0a6bdbbe51/1/2CKju1sFnZ0dhsD0IYQZTaEskZg.roa
Signing time: Wed 01 Jan 2025 05:47:49 +0000
ROA not before: Wed 01 Jan 2025 05:47:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211633
IP address blocks: 185.221.245.0/24 maxlen: 24
2a04:3f83:49::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:67:ef:c1:6f:47:5b:37:6b:95:b4:6f:fb:27:d8:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10f1d0dbe093c722350618f4045c25ba94317f87
Validity
Not Before: Jan 1 05:47:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d822a3bb5b059d9d1d86c0f42184194da12c9198
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:6e:d5:dd:c7:97:4a:d0:68:ec:56:2d:28:58:
72:53:ae:49:f8:16:0a:29:e8:6c:93:3a:c5:2a:75:
05:9f:51:98:fe:a0:59:4a:a3:25:02:3e:ec:64:26:
6b:f4:f5:f2:65:c5:9d:b7:c0:0c:c6:84:cc:46:69:
f0:79:77:ff:72:1e:28:15:f6:c4:15:ab:74:32:1a:
de:2a:c6:f7:7f:de:5b:bb:19:d2:e9:d1:94:ca:5d:
a1:29:32:09:39:9e:ec:af:71:c3:ef:b7:5a:e9:41:
60:a3:ae:6e:8f:f4:bc:86:5b:57:b1:e1:df:e4:3b:
26:f5:f4:a1:72:68:e5:2f:df:3d:f6:8d:63:99:6a:
9f:7e:5d:80:20:e6:91:4f:aa:50:76:93:db:7b:4a:
4d:7b:bf:10:13:df:10:e8:d1:ca:16:c5:a5:05:13:
b7:85:a0:35:8f:5c:6f:32:da:da:cf:3a:fb:c9:08:
02:bb:eb:50:7d:79:56:be:53:9d:96:96:40:23:7e:
ae:d7:51:2a:90:6c:71:17:b1:3b:3f:21:82:5c:ae:
83:97:db:18:55:f0:c4:d9:fe:4b:12:42:dd:c4:87:
64:c5:d0:cb:83:67:61:bc:d2:c2:7f:43:17:6a:f8:
67:98:6e:92:e3:ac:d5:21:73:d8:9a:a4:54:17:8c:
b9:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:22:A3:BB:5B:05:9D:9D:1D:86:C0:F4:21:84:19:4D:A1:2C:91:98
X509v3 Authority Key Identifier:
keyid:10:F1:D0:DB:E0:93:C7:22:35:06:18:F4:04:5C:25:BA:94:31:7F:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EPHQ2-CTxyI1Bhj0BFwlupQxf4c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/605f1c-0d7a-4bd3-88b6-2f0a6bdbbe51/1/2CKju1sFnZ0dhsD0IYQZTaEskZg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/605f1c-0d7a-4bd3-88b6-2f0a6bdbbe51/1/EPHQ2-CTxyI1Bhj0BFwlupQxf4c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.221.245.0/24
IPv6:
2a04:3f83:49::/48
Signature Algorithm: sha256WithRSAEncryption
74:8e:75:ff:d7:77:15:9a:58:a6:2b:40:09:45:ef:8c:55:96:
26:74:0e:4e:b2:cf:eb:0c:9c:27:36:54:26:68:05:3d:16:8f:
04:62:49:47:84:cb:f2:36:74:82:7c:0a:98:d1:5a:e6:da:b1:
95:e8:19:c6:bc:e7:7d:7c:fa:a1:66:90:0c:ed:87:b9:6d:df:
54:3a:88:b5:3e:93:79:39:85:de:32:7d:97:0e:ae:80:f6:fe:
39:c1:de:cf:25:96:22:7f:3e:84:84:3e:32:89:94:d0:04:b9:
16:cd:37:d0:da:ae:98:5a:de:f3:7e:06:b5:9e:96:c4:4f:a4:
58:b4:d0:a6:5a:68:ac:e6:8b:8e:96:fb:95:19:4f:d3:f6:52:
3c:78:bc:81:57:ed:c5:f4:a6:b7:ae:b5:cc:20:28:38:24:1b:
f2:66:c2:43:30:67:6d:d4:ad:10:ef:ce:bb:1f:2d:52:79:d0:
d7:66:4d:9f:87:bd:8e:72:f2:a1:82:28:e6:58:b6:70:58:6b:
fd:60:71:84:8c:a7:2a:8b:5c:86:c5:d9:8e:09:ae:8f:c1:b5:
cc:94:55:3f:96:9d:1b:f5:9f:dd:6a:95:43:1d:2e:88:dd:de:
1e:f9:0a:fa:87:c6:da:0f:d5:63:10:1c:0a:49:e8:9c:83:e5:
37:c5:1b:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 14:12:50 2025 by rpki-client