Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/2406ab-3bcb-41bc-a942-368608385883/1/Rm5aIxDvXkvVkBBg3XIjNRMEevw.roa
File: Rm5aIxDvXkvVkBBg3XIjNRMEevw.roa (raw, json)
Hash identifier: 91lRhrOUw2PQdAXyAGgZms7aAgC+waBbAPHPOWg5hPI=
Subject key identifier: 46:6E:5A:23:10:EF:5E:4B:D5:90:10:60:DD:72:23:35:13:04:7A:FC
Certificate issuer: /CN=c0747fbe26c9cdd7628adfedb57b78be8de75e29
Certificate serial: 019423D72BFB345DDBA53014F74FCDA81FA1
Authority key identifier: C0:74:7F:BE:26:C9:CD:D7:62:8A:DF:ED:B5:7B:78:BE:8D:E7:5E:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wHR_vibJzddiit_ttXt4vo3nXik.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/2406ab-3bcb-41bc-a942-368608385883/1/Rm5aIxDvXkvVkBBg3XIjNRMEevw.roa
Signing time: Wed 01 Jan 2025 21:48:11 +0000
ROA not before: Wed 01 Jan 2025 21:48:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 36385
IP address blocks: 185.25.30.0/24 maxlen: 24
2a00:79e0:101::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:2b:fb:34:5d:db:a5:30:14:f7:4f:cd:a8:1f:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c0747fbe26c9cdd7628adfedb57b78be8de75e29
Validity
Not Before: Jan 1 21:48:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=466e5a2310ef5e4bd5901060dd72233513047afc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:18:56:eb:b7:03:3e:ae:8c:5e:bb:21:c6:63:
f6:06:c6:c0:6d:fe:95:46:3e:c6:33:97:1f:65:ba:
29:94:eb:34:04:e6:4f:61:8a:f5:62:94:03:c8:1b:
a7:17:e8:5e:9e:05:a4:8c:fe:42:c1:66:8b:b7:28:
85:ec:7b:90:98:86:6e:42:50:08:9a:b0:08:f2:ab:
25:05:e9:85:cf:8f:1f:7d:a1:2a:30:de:e3:1c:b8:
a2:dc:e9:3b:5e:45:45:d2:5a:d3:99:25:d4:23:7b:
fb:51:91:3c:0f:26:c3:72:a3:19:07:c8:95:dc:9c:
ee:3f:f9:cb:ed:95:08:2f:95:a0:c6:89:48:07:9e:
f1:5b:85:6f:d9:8b:d2:da:10:3b:a2:27:b3:d6:7e:
4b:9c:5e:d9:73:c1:bc:7c:d7:5c:cf:d6:f5:ac:5d:
56:93:35:c4:24:67:60:08:87:13:8f:a1:d7:b3:03:
52:9b:64:77:ab:48:30:3c:a7:da:bc:2f:1c:ca:98:
08:f3:dd:ea:29:08:f7:36:68:a5:91:d6:8e:02:f3:
8f:c6:dd:39:8b:8c:58:af:56:77:a6:6d:35:09:96:
f5:4c:67:e6:4d:b5:6d:7c:da:f5:7b:58:f2:4a:43:
4b:75:2d:e1:eb:ce:3a:48:d7:ed:f8:50:f4:86:01:
7f:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:6E:5A:23:10:EF:5E:4B:D5:90:10:60:DD:72:23:35:13:04:7A:FC
X509v3 Authority Key Identifier:
keyid:C0:74:7F:BE:26:C9:CD:D7:62:8A:DF:ED:B5:7B:78:BE:8D:E7:5E:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wHR_vibJzddiit_ttXt4vo3nXik.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/2406ab-3bcb-41bc-a942-368608385883/1/Rm5aIxDvXkvVkBBg3XIjNRMEevw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/2406ab-3bcb-41bc-a942-368608385883/1/wHR_vibJzddiit_ttXt4vo3nXik.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.25.30.0/24
IPv6:
2a00:79e0:101::/48
Signature Algorithm: sha256WithRSAEncryption
70:ea:ce:36:bf:0c:43:fc:1b:bb:82:50:e5:b1:f4:1a:b0:c9:
a6:a5:d5:77:76:12:39:c1:83:8d:6a:c1:1d:48:96:6e:c3:ab:
89:48:68:b9:9b:1d:63:75:e0:49:a0:59:fb:56:31:40:b1:c8:
18:9c:56:9c:79:c9:4b:7f:71:de:4b:ee:17:8e:90:0e:b5:3c:
20:ad:cc:17:d8:59:e7:bb:a2:bb:bb:5e:04:ff:84:ed:5a:c0:
75:90:4e:6d:2f:e0:fd:f9:fd:50:62:a6:43:7e:5f:86:cd:8f:
1b:9c:37:e7:06:c5:7e:f9:e0:d9:e9:da:24:74:50:35:ff:99:
ce:e5:aa:7d:79:b9:4a:6d:60:87:fb:e7:df:0d:5a:2a:a3:41:
da:d1:8c:8b:1d:bd:36:cb:a0:44:99:a6:96:2e:3e:fc:85:ab:
47:04:00:f7:6e:98:24:ce:64:bd:5e:d4:a1:17:48:30:bc:b6:
bd:cb:58:dd:59:3f:3b:d8:17:93:98:b1:ef:8c:f5:88:eb:1d:
d2:f4:d8:41:9a:f5:03:c5:ef:7f:dd:bc:fe:c3:0d:a3:86:ef:
ff:c2:6f:df:78:f8:c8:17:11:43:26:2b:08:29:11:43:36:1f:
d2:0f:fe:4b:e1:86:56:19:40:e6:7b:c1:d6:38:f9:9b:24:d3:
86:15:3f:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 14:41:23 2025 by rpki-client