Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/3f110b-dedb-490f-9e66-6fad08aa20ee/1/0tRdpRIVKa8GC5rndgVUBjWyq_0.roa
File: 0tRdpRIVKa8GC5rndgVUBjWyq_0.roa (raw, json)
Hash identifier: zQ8BfDuwqWf4BKhuE29aPhx2YBI5m36iLFxsbczWouw=
Subject key identifier: D2:D4:5D:A5:12:15:29:AF:06:0B:9A:E7:76:05:54:06:35:B2:AB:FD
Certificate issuer: /CN=f1bbf9bee531f3dee2d03bbf4e69ef82eedb99af
Certificate serial: 01942369295127652FBAED701D79FD930AAF
Authority key identifier: F1:BB:F9:BE:E5:31:F3:DE:E2:D0:3B:BF:4E:69:EF:82:EE:DB:99:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8bv5vuUx897i0Du_Tmnvgu7bma8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/3f110b-dedb-490f-9e66-6fad08aa20ee/1/0tRdpRIVKa8GC5rndgVUBjWyq_0.roa
Signing time: Wed 01 Jan 2025 19:48:01 +0000
ROA not before: Wed 01 Jan 2025 19:48:01 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210839
IP address blocks: 185.224.172.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:69:29:51:27:65:2f:ba:ed:70:1d:79:fd:93:0a:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1bbf9bee531f3dee2d03bbf4e69ef82eedb99af
Validity
Not Before: Jan 1 19:48:01 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d2d45da5121529af060b9ae77605540635b2abfd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:b3:14:83:75:ce:5a:84:9a:5f:3b:18:08:0f:
14:a1:8f:78:b2:4f:8f:0c:91:5e:6d:4b:29:92:ac:
c1:60:94:06:62:ad:a5:38:bf:98:c6:fe:48:78:0f:
f6:5b:7a:08:cb:2d:9d:d2:5d:24:19:8c:2f:65:fd:
56:51:e7:ef:88:52:c4:86:b2:4f:f0:d0:1e:9f:c8:
69:2c:b8:37:92:ce:c4:66:a7:d3:54:6c:1a:9f:64:
9d:fd:39:17:b0:69:72:19:e5:79:39:a0:35:72:f0:
cf:ab:2d:d2:08:a5:f2:c8:04:4f:c5:1d:80:5b:95:
ed:00:36:c5:fe:eb:c9:6e:0b:24:6a:9b:65:d7:db:
9c:78:d6:c0:b6:bf:85:03:fc:de:5c:83:81:2d:8a:
4b:14:74:6e:91:a9:5a:ae:6a:ba:03:97:42:2e:2d:
9f:98:51:f5:b8:82:82:7e:b2:8e:0d:fd:fa:1a:71:
cd:87:55:fc:2d:32:45:08:ff:f2:6d:5f:c9:d3:d9:
fa:51:c3:86:1c:81:73:78:a7:7f:e1:d6:3a:88:26:
ac:e3:8d:c2:c9:ba:35:0f:9c:ab:7a:d7:12:20:b7:
d1:e4:23:fc:c7:54:b6:0d:97:13:f0:a0:84:f2:43:
55:fd:bc:ff:f0:7a:4a:cb:07:98:8c:62:19:25:ec:
78:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:D4:5D:A5:12:15:29:AF:06:0B:9A:E7:76:05:54:06:35:B2:AB:FD
X509v3 Authority Key Identifier:
keyid:F1:BB:F9:BE:E5:31:F3:DE:E2:D0:3B:BF:4E:69:EF:82:EE:DB:99:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8bv5vuUx897i0Du_Tmnvgu7bma8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/3f110b-dedb-490f-9e66-6fad08aa20ee/1/0tRdpRIVKa8GC5rndgVUBjWyq_0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/3f110b-dedb-490f-9e66-6fad08aa20ee/1/8bv5vuUx897i0Du_Tmnvgu7bma8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.224.172.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:9b:23:fb:78:fa:cf:c8:51:84:f3:79:ed:f6:b5:ba:2b:da:
32:be:4e:2b:c0:70:84:f6:80:84:7a:bd:e6:40:f6:b2:1e:4c:
6e:e5:4a:e4:f2:60:d6:a9:cf:34:66:b8:e0:02:de:c7:2f:c2:
e2:6f:f1:26:87:d2:05:b6:d1:76:6e:c3:b8:25:9f:e7:2d:69:
c1:12:91:f4:ab:5e:58:12:3e:a3:fa:bd:05:28:8d:24:d8:09:
ec:19:4a:4a:0b:02:45:12:79:df:a6:c2:ca:0e:f6:30:03:b7:
10:18:a8:a3:2e:3d:ea:47:8d:88:ac:4c:9c:5a:fa:1a:3b:01:
83:b0:11:82:f1:e2:90:03:c3:5f:82:66:5d:7e:f3:df:3a:5c:
7b:68:03:0c:c5:1b:ce:46:ae:30:16:fb:71:79:39:ad:1c:31:
07:1e:c3:e7:ec:8d:90:58:39:d9:62:8d:5e:d3:3a:91:c2:5a:
99:1f:8f:48:61:23:59:69:80:90:75:f0:5a:18:15:d0:b7:4b:
fc:f5:40:da:21:e2:73:58:80:18:d5:70:b6:53:c3:99:f4:92:
73:eb:fd:3b:be:8f:63:37:1a:54:bd:59:fe:53:62:4d:6c:94:
81:f7:29:5e:05:f8:7f:d5:91:e4:11:ce:52:67:38:9a:f9:53:
28:f8:0e:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 04:00:22 2025 by rpki-client