Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/9fedd0-4ed7-4419-8e73-b5ca0adf2f08/1/cfHPpH74hHCJK1pLDEwyQ7AMZJY.roa
File: cfHPpH74hHCJK1pLDEwyQ7AMZJY.roa (raw, json)
Hash identifier: Gmnr746njngjtdW+doOVMtWLzbG5WcOtPqH2dI9MOLw=
Subject key identifier: 71:F1:CF:A4:7E:F8:84:70:89:2B:5A:4B:0C:4C:32:43:B0:0C:64:96
Certificate issuer: /CN=fff442affba1cfaef3102c981d7569502ce6515c
Certificate serial: 01941F8CA4ADE28545D7170B2D19A3B85821
Authority key identifier: FF:F4:42:AF:FB:A1:CF:AE:F3:10:2C:98:1D:75:69:50:2C:E6:51:5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/__RCr_uhz67zECyYHXVpUCzmUVw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/9fedd0-4ed7-4419-8e73-b5ca0adf2f08/1/cfHPpH74hHCJK1pLDEwyQ7AMZJY.roa
Signing time: Wed 01 Jan 2025 01:48:18 +0000
ROA not before: Wed 01 Jan 2025 01:48:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 204861
IP address blocks: 185.237.172.0/22 maxlen: 24
2a0c:1a80::/29 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:a4:ad:e2:85:45:d7:17:0b:2d:19:a3:b8:58:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fff442affba1cfaef3102c981d7569502ce6515c
Validity
Not Before: Jan 1 01:48:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=71f1cfa47ef88470892b5a4b0c4c3243b00c6496
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:6d:ad:46:77:3e:0d:12:35:ff:a1:d4:f4:e5:
07:dc:7e:fc:d0:3c:82:43:8a:61:87:f5:5e:c7:bd:
20:51:48:e3:e7:b7:67:ea:ba:c9:a0:c0:6f:6d:a5:
b2:40:b8:34:ad:40:8f:0e:bb:04:c9:f8:ef:1c:6b:
41:2f:59:bf:8a:f2:0c:7b:9e:8b:87:64:03:8f:d4:
05:f9:ce:24:2a:b4:57:da:bc:43:f0:f1:24:57:49:
a2:b6:8c:61:a9:75:91:8d:e1:8d:f5:f9:e5:6c:e4:
37:2a:e6:f6:a5:1c:4f:8c:58:b9:e5:4e:81:2e:08:
1c:43:13:43:82:5f:09:0f:dd:ec:c7:ed:76:90:4e:
d0:49:37:06:10:5c:0f:a6:2b:c7:f9:5a:c2:a2:19:
b8:a3:a3:ea:0d:bb:c7:38:ee:18:ab:1a:f2:5d:66:
68:54:90:c8:0e:c4:33:bd:c5:e5:9e:0a:93:d9:83:
c0:0f:33:e8:c2:1a:83:ce:72:22:83:7d:0d:d7:f5:
50:63:c0:4b:0a:10:b5:4e:7c:6b:7d:a3:33:96:58:
d3:7a:a6:85:7a:ec:a9:f9:71:7e:b7:5c:4c:a2:b7:
ae:6a:10:a9:60:1a:98:2f:81:c7:23:71:e3:6b:c5:
cb:cf:2a:e4:49:5e:cb:21:7a:14:ef:d1:3e:8f:45:
c6:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:F1:CF:A4:7E:F8:84:70:89:2B:5A:4B:0C:4C:32:43:B0:0C:64:96
X509v3 Authority Key Identifier:
keyid:FF:F4:42:AF:FB:A1:CF:AE:F3:10:2C:98:1D:75:69:50:2C:E6:51:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/__RCr_uhz67zECyYHXVpUCzmUVw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/9fedd0-4ed7-4419-8e73-b5ca0adf2f08/1/cfHPpH74hHCJK1pLDEwyQ7AMZJY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/9fedd0-4ed7-4419-8e73-b5ca0adf2f08/1/__RCr_uhz67zECyYHXVpUCzmUVw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.237.172.0/22
IPv6:
2a0c:1a80::/29
Signature Algorithm: sha256WithRSAEncryption
52:00:39:c8:65:f0:60:c6:13:f8:79:85:97:dc:ec:87:e9:08:
1b:31:41:b2:1e:cc:de:99:7e:16:70:25:1d:0c:ad:30:01:e5:
e1:f6:90:9f:24:2e:17:dd:7e:bb:a3:03:26:a0:33:63:da:a2:
a5:15:8a:d6:73:21:90:c8:50:c6:da:a4:5c:eb:c3:fe:1c:62:
a0:26:c6:4f:ca:88:4d:15:df:be:60:08:76:b2:bd:37:7c:2c:
b3:1e:80:89:b5:42:7a:9d:8a:6f:71:48:4b:aa:0e:0a:b3:05:
09:36:27:96:02:e6:26:87:80:05:43:1e:e2:4b:56:1b:78:fc:
3a:1a:1b:e7:78:74:ce:c0:46:ab:07:43:9c:75:f2:b7:97:2d:
88:2a:b5:61:f8:70:a1:95:b3:fb:28:b1:7f:e9:14:21:f8:b2:
40:97:71:6f:87:d9:f4:40:2e:fc:33:fa:d4:fe:50:6e:4d:cd:
ae:e4:c1:65:45:b3:fc:bf:ea:c0:27:27:14:a7:50:3d:0e:3c:
47:e9:77:d1:41:02:6e:8f:e7:fd:30:2d:9c:32:2e:45:7c:05:
b1:e4:e7:5f:60:8b:7e:2c:42:66:52:f5:79:11:9a:ee:99:3c:
6f:02:a6:61:fa:57:fb:75:d7:d3:0d:0f:e6:d5:71:03:fb:06:
7d:08:48:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 01:48:46 2025 by rpki-client