Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/706c03-7d35-4913-8a18-6e8784a7ad09/1/f4DXZiMB_Ff_0JwzJIxf0LcmHB4.roa
File: f4DXZiMB_Ff_0JwzJIxf0LcmHB4.roa (raw, json)
Hash identifier: BYRfPeQZzgZNAMB4knpfUfsNVjUgJWJmqeqw3IISPlY=
Subject key identifier: 7F:80:D7:66:23:01:FC:57:FF:D0:9C:33:24:8C:5F:D0:B7:26:1C:1E
Certificate issuer: /CN=70847f8221897d6e952e86ea2c339abaacc131f5
Certificate serial: 019427480F523758C6614B53AC03E7814F3C
Authority key identifier: 70:84:7F:82:21:89:7D:6E:95:2E:86:EA:2C:33:9A:BA:AC:C1:31:F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cIR_giGJfW6VLobqLDOauqzBMfU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/706c03-7d35-4913-8a18-6e8784a7ad09/1/f4DXZiMB_Ff_0JwzJIxf0LcmHB4.roa
Signing time: Thu 02 Jan 2025 13:50:21 +0000
ROA not before: Thu 02 Jan 2025 13:50:21 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 34884
IP address blocks: 185.38.28.0/22 maxlen: 24
185.95.252.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:0f:52:37:58:c6:61:4b:53:ac:03:e7:81:4f:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70847f8221897d6e952e86ea2c339abaacc131f5
Validity
Not Before: Jan 2 13:50:21 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7f80d7662301fc57ffd09c33248c5fd0b7261c1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:85:c7:07:27:32:ea:19:1f:1e:8d:87:c4:2e:
a0:f4:3f:d7:57:5a:e4:88:40:d8:76:bf:19:1e:34:
8b:6a:23:22:e8:2d:9b:57:9a:9e:1f:25:01:4b:5d:
06:8b:3e:f9:7a:2d:18:14:9a:e1:d5:43:de:47:44:
44:67:a2:1d:8c:1d:53:7c:63:ae:6d:d2:78:c8:96:
e9:ed:38:27:c6:3d:11:3d:1c:c9:4f:4f:1e:f3:c8:
da:33:4a:a3:ea:6e:7f:39:dc:a4:0e:b9:79:f2:3f:
fb:3b:1e:f3:34:bd:aa:93:fe:25:76:b8:d7:09:c6:
9d:45:e7:85:a5:07:6b:7a:47:d3:de:9a:57:d4:5e:
8a:0e:a3:32:aa:1a:f3:02:7b:16:52:e1:86:e3:e8:
42:4d:15:a5:b8:51:66:d7:9b:3c:30:46:a0:23:b5:
7c:19:2c:da:c0:21:12:00:13:2c:96:17:85:de:4f:
33:f4:97:27:1f:77:63:0e:62:eb:db:0f:17:65:64:
9d:6d:d5:9f:4c:0a:60:ae:da:6e:93:5f:43:49:89:
50:f2:79:0d:22:69:9c:cf:39:6d:b4:55:62:40:09:
ec:92:72:67:0b:e2:21:71:7c:19:82:2d:8f:71:24:
d0:ba:c2:4d:07:29:7a:51:22:c4:5b:5a:25:f7:8f:
50:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:80:D7:66:23:01:FC:57:FF:D0:9C:33:24:8C:5F:D0:B7:26:1C:1E
X509v3 Authority Key Identifier:
keyid:70:84:7F:82:21:89:7D:6E:95:2E:86:EA:2C:33:9A:BA:AC:C1:31:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cIR_giGJfW6VLobqLDOauqzBMfU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/706c03-7d35-4913-8a18-6e8784a7ad09/1/f4DXZiMB_Ff_0JwzJIxf0LcmHB4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/706c03-7d35-4913-8a18-6e8784a7ad09/1/cIR_giGJfW6VLobqLDOauqzBMfU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.38.28.0/22
185.95.252.0/22
Signature Algorithm: sha256WithRSAEncryption
ae:02:ec:23:92:34:12:e1:70:f1:03:bc:cb:56:dc:6f:82:a3:
c7:de:a6:7f:e7:33:b7:74:c4:87:06:08:d4:ab:cd:8f:2f:86:
2b:e4:e5:d3:2e:81:52:d0:e2:08:23:91:33:e4:f4:8c:bc:f7:
09:b1:b2:53:62:c8:24:a2:7a:7b:98:fb:fc:4d:61:6a:85:ce:
67:44:2f:f3:fb:3b:1a:0f:16:93:18:1d:7c:71:a5:86:42:b9:
b7:95:7a:5c:05:41:d1:f8:3f:9f:0c:3c:0a:f1:d1:7b:c2:1d:
06:f1:7c:02:22:4c:8f:b2:a5:43:54:4b:23:05:9e:ea:13:bd:
0b:f4:3a:32:ca:e2:85:ed:52:34:52:eb:ab:22:cd:13:44:23:
85:be:b9:91:f0:92:d8:d7:61:ea:c1:62:b2:3d:0c:5d:c4:53:
6b:9a:c8:1b:c2:86:35:4d:43:d0:15:72:18:d0:c8:f0:12:c6:
82:74:9c:7d:c9:86:e9:64:2e:ca:5c:59:f2:30:a6:a4:4c:c1:
31:55:7a:23:c1:0f:41:d3:41:34:33:7d:5a:5a:05:11:19:cf:
b4:22:35:cf:48:04:c1:40:15:a9:06:8b:26:05:27:4f:c5:62:
44:e3:88:2f:0a:83:af:85:8d:5e:4c:e9:b2:fc:9f:ca:e7:d2:
11:d1:50:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:02:54 2025 by rpki-client