Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/8b05bf-33f1-4b5b-88a4-1673ad8c4012/1/Sc-FyfdVDPaQqHGz-GI3fsuN6cM.roa
File: Sc-FyfdVDPaQqHGz-GI3fsuN6cM.roa (raw, json)
Hash identifier: zSZi5viNxy6Qez2EVg97kMrTwqojW2kb2exfumMpwjg=
Subject key identifier: 49:CF:85:C9:F7:55:0C:F6:90:A8:71:B3:F8:62:37:7E:CB:8D:E9:C3
Certificate issuer: /CN=cd68f7a391b7b1649ed4903482d3e931ed34e3d8
Certificate serial: 019424459B3E69B093E45D14D287A990B31E
Authority key identifier: CD:68:F7:A3:91:B7:B1:64:9E:D4:90:34:82:D3:E9:31:ED:34:E3:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zWj3o5G3sWSe1JA0gtPpMe0049g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/8b05bf-33f1-4b5b-88a4-1673ad8c4012/1/Sc-FyfdVDPaQqHGz-GI3fsuN6cM.roa
Signing time: Wed 01 Jan 2025 23:48:49 +0000
ROA not before: Wed 01 Jan 2025 23:48:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206061
IP address blocks: 185.24.217.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:45:9b:3e:69:b0:93:e4:5d:14:d2:87:a9:90:b3:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd68f7a391b7b1649ed4903482d3e931ed34e3d8
Validity
Not Before: Jan 1 23:48:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=49cf85c9f7550cf690a871b3f862377ecb8de9c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:d3:93:6f:fd:37:48:94:de:db:65:f4:f5:86:
76:bb:d4:00:3c:34:6e:da:a3:72:07:28:c5:81:6e:
9d:74:40:46:32:95:a6:d9:7a:9e:62:b4:e4:9c:11:
cc:c6:d5:5d:95:f9:26:aa:da:cc:3a:3b:2b:67:c4:
a4:f8:66:03:2f:28:44:7f:64:51:45:21:a9:5a:1c:
8d:6f:ee:12:ad:5d:c0:66:3f:b9:dc:5c:f8:36:bd:
2e:65:59:13:76:61:0a:3d:7a:4c:ba:be:05:70:00:
1c:e9:a1:aa:45:3b:86:b1:02:8e:a3:eb:e6:25:69:
41:5f:1c:40:06:b9:12:1a:4d:a5:4a:d0:7d:48:ae:
bd:26:68:b9:1d:3f:aa:14:c8:4c:c2:37:bf:0a:6f:
b9:72:a2:67:aa:42:6d:29:3b:9d:68:79:8d:a2:55:
12:c0:f9:34:51:7f:4c:0b:f7:2b:46:23:94:c4:7d:
31:e1:83:a6:92:6e:a0:18:12:2b:31:34:aa:82:0c:
08:58:f2:67:f6:a4:d1:32:ee:25:b3:a5:bf:2f:37:
fb:ab:ae:18:1a:cb:a4:b1:f8:c0:20:3e:ae:0e:9e:
c0:71:f3:77:b6:cf:90:01:a8:72:07:9a:f9:c7:77:
a2:14:08:d5:a9:81:e8:28:d4:be:f0:ac:2d:19:00:
07:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:CF:85:C9:F7:55:0C:F6:90:A8:71:B3:F8:62:37:7E:CB:8D:E9:C3
X509v3 Authority Key Identifier:
keyid:CD:68:F7:A3:91:B7:B1:64:9E:D4:90:34:82:D3:E9:31:ED:34:E3:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zWj3o5G3sWSe1JA0gtPpMe0049g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/8b05bf-33f1-4b5b-88a4-1673ad8c4012/1/Sc-FyfdVDPaQqHGz-GI3fsuN6cM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/8b05bf-33f1-4b5b-88a4-1673ad8c4012/1/zWj3o5G3sWSe1JA0gtPpMe0049g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.24.217.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:7f:59:b4:75:dc:2c:52:9e:a4:b3:7c:8a:a4:8c:f8:e8:32:
21:b6:e9:c3:41:e8:1f:4f:9d:e0:33:e9:9a:13:65:ca:90:e9:
af:02:fc:fa:c7:6d:c9:58:34:e6:9e:b2:b8:30:6e:7c:b7:59:
55:1d:4b:9f:cc:f1:71:b9:e2:51:6d:d4:da:14:c3:81:80:44:
6e:87:fc:81:bc:11:f0:c2:5f:a7:a4:b3:72:80:fc:42:9a:ad:
d1:26:1c:21:ff:d1:ca:e0:aa:eb:ad:f0:bc:64:61:dc:d2:81:
5f:16:34:5f:a7:dd:17:b3:fc:44:77:39:76:58:2f:2a:5c:6a:
a8:f0:d9:29:c5:e6:36:e1:38:5f:e6:7d:9d:fc:8a:04:f5:99:
01:0f:de:83:fe:42:0d:ff:90:46:4b:01:36:47:db:29:bf:9a:
b4:3a:e6:9f:bb:c0:c4:da:1d:26:00:10:6e:0c:c9:b3:d0:0d:
6e:e7:62:50:ce:54:2a:19:3f:02:24:28:7d:91:16:5b:b9:66:
9c:0d:12:76:0f:8e:cd:7e:f6:fb:7e:e3:65:17:da:6c:10:bb:
90:c2:19:a2:75:c7:6e:72:34:c8:a0:c7:57:42:a3:25:35:84:
40:33:5c:3b:89:d2:aa:c6:bd:2e:19:d5:9e:73:07:b8:53:9f:
97:d9:86:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:53:30 2025 by rpki-client