Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/rH9fjtKyKbkp-JAaMAw2wwgD_Fs.roa
File: rH9fjtKyKbkp-JAaMAw2wwgD_Fs.roa (raw, json)
Hash identifier: fT5xVyhOymjjjY5+pYaIjInGs4R/KcUxc9NUcHlQFy4=
Subject key identifier: AC:7F:5F:8E:D2:B2:29:B9:29:F8:90:1A:30:0C:36:C3:08:03:FC:5B
Certificate issuer: /CN=f13533399f55eb52e6b2200c7cae4272b74d6464
Certificate serial: 01947E26E82BC1BBBD39EADE6E40BA50BACC
Authority key identifier: F1:35:33:39:9F:55:EB:52:E6:B2:20:0C:7C:AE:42:72:B7:4D:64:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/rH9fjtKyKbkp-JAaMAw2wwgD_Fs.roa
Signing time: Sun 19 Jan 2025 10:41:06 +0000
ROA not before: Sun 19 Jan 2025 10:41:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214526
IP address blocks: 178.239.144.0/24 maxlen: 24
185.124.175.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:7e:26:e8:2b:c1:bb:bd:39:ea:de:6e:40:ba:50:ba:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f13533399f55eb52e6b2200c7cae4272b74d6464
Validity
Not Before: Jan 19 10:41:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ac7f5f8ed2b229b929f8901a300c36c30803fc5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:76:31:71:ae:8f:03:85:db:06:72:be:37:5c:
d4:41:c1:e0:59:e6:d4:15:6f:d8:a8:80:61:15:a2:
32:2d:d2:ec:09:7d:68:b8:98:b1:46:1a:06:6f:36:
3d:f3:91:fb:4c:29:dd:58:ab:71:ac:8d:f0:a3:f2:
ec:48:3d:54:4e:ac:16:e6:52:bb:cd:da:01:d9:20:
45:ac:c2:28:f4:ac:77:1f:d7:29:3a:0a:e5:6e:c6:
aa:55:e1:8f:37:f2:29:35:af:bb:d4:72:39:41:ac:
8b:f3:d4:e7:7d:3c:e6:af:b5:e0:40:e3:bb:1e:3c:
a1:f4:45:0e:13:2c:b4:72:d3:af:2e:8c:eb:03:62:
1b:72:8e:8a:ea:a8:98:64:e0:b7:a8:a6:3f:ae:0a:
c5:0e:a1:af:f9:21:95:eb:21:b4:6d:2d:6a:81:6a:
6e:b8:8e:f3:fc:19:d6:43:4d:9b:67:03:d1:fb:08:
cf:9c:6e:c5:9d:ae:90:0c:37:bf:56:8b:58:6d:06:
2e:89:fd:56:87:46:94:a3:f2:a5:72:80:d8:36:de:
59:9c:da:9c:bb:c3:a2:84:e7:9f:8a:fc:2b:7c:4c:
49:90:e7:60:b2:8d:f2:14:3e:6c:7b:bb:22:96:9f:
6e:39:8d:41:76:ae:fa:7a:84:00:51:5b:c7:9f:92:
99:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:7F:5F:8E:D2:B2:29:B9:29:F8:90:1A:30:0C:36:C3:08:03:FC:5B
X509v3 Authority Key Identifier:
keyid:F1:35:33:39:9F:55:EB:52:E6:B2:20:0C:7C:AE:42:72:B7:4D:64:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/rH9fjtKyKbkp-JAaMAw2wwgD_Fs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.239.144.0/24
185.124.175.0/24
Signature Algorithm: sha256WithRSAEncryption
d1:ee:8c:0a:0f:cb:ca:cf:d8:1a:56:e9:7b:48:9f:3e:dc:59:
a8:2e:5b:d0:40:20:59:a9:76:56:a4:d0:e0:95:7c:b7:49:07:
00:d7:3d:be:76:9d:0f:e6:90:8c:04:8b:10:f3:83:e2:14:f0:
c1:c2:88:a2:3e:fd:ea:c3:6d:74:06:a0:5f:c9:04:64:34:64:
be:ab:5c:e1:f6:57:a9:15:c9:56:6f:f4:ee:b3:a9:2b:30:5d:
80:95:cc:f8:06:0e:b3:47:cb:b7:3f:b5:d3:d2:3f:0c:6d:a6:
7f:72:db:fc:43:25:ba:9a:fb:03:cb:80:00:01:f8:97:f8:c8:
db:42:48:7d:82:71:ea:37:72:6e:ef:38:21:19:22:b6:a6:c4:
3b:71:c8:0f:d2:bb:81:8e:41:2a:23:6d:9f:2c:78:f6:17:da:
6b:cd:de:f0:6b:84:54:3b:eb:e1:6f:83:ab:07:dd:1f:5e:28:
51:79:90:c5:a3:bb:35:7f:e9:73:cf:3f:26:70:c7:3a:97:93:
f1:19:e1:13:4b:ad:13:f4:55:8f:5d:16:50:9d:cb:32:b5:db:
cd:70:c6:c4:4b:36:bf:82:95:58:ca:2b:84:6e:82:f9:3c:a6:
c7:30:8c:e3:28:d0:b6:dc:30:67:9c:0b:af:31:99:47:93:72:
70:95:40:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:00:08 2025 by rpki-client