Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/e74b81-5ff7-4823-9267-0d3e662b0ee0/1/Df2biRKzI0GRqVwee9geZJPoqNE.roa
File: Df2biRKzI0GRqVwee9geZJPoqNE.roa (raw, json)
Hash identifier: niRdMj+wofGmmTCaPQzwp4KH6uD8D+ovTgho72qJUvQ=
Subject key identifier: 0D:FD:9B:89:12:B3:23:41:91:A9:5C:1E:7B:D8:1E:64:93:E8:A8:D1
Certificate issuer: /CN=3092b117062f6065faa1cdfd38915e4bb9c924bb
Certificate serial: 0194266BB0829755B607F72897CB4BA803FF
Authority key identifier: 30:92:B1:17:06:2F:60:65:FA:A1:CD:FD:38:91:5E:4B:B9:C9:24:BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MJKxFwYvYGX6oc39OJFeS7nJJLs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/e74b81-5ff7-4823-9267-0d3e662b0ee0/1/Df2biRKzI0GRqVwee9geZJPoqNE.roa
Signing time: Thu 02 Jan 2025 09:49:39 +0000
ROA not before: Thu 02 Jan 2025 09:49:39 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16509
IP address blocks: 185.121.140.0/24 maxlen: 24
185.121.141.0/24 maxlen: 24
185.121.142.0/24 maxlen: 24
185.121.143.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:b0:82:97:55:b6:07:f7:28:97:cb:4b:a8:03:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3092b117062f6065faa1cdfd38915e4bb9c924bb
Validity
Not Before: Jan 2 09:49:39 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0dfd9b8912b3234191a95c1e7bd81e6493e8a8d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:4d:34:1f:bf:82:47:77:5a:9c:74:e4:8f:9c:
7d:82:c0:33:e2:ff:77:8d:a2:c6:a6:be:23:d0:e7:
ba:4b:5e:33:b8:4e:c5:9a:ff:5d:62:7b:ad:03:eb:
9b:12:47:e1:19:01:77:48:c0:cd:62:3d:d3:64:92:
90:3d:83:c9:23:f6:26:b1:c8:2d:73:e3:1e:cd:23:
a7:88:5a:d9:c2:49:c2:3b:d1:67:24:52:3c:39:fa:
06:72:49:35:e1:7c:ae:a6:45:ab:14:e6:57:75:5f:
4b:5a:c2:df:32:62:17:58:69:a1:cd:db:40:4f:67:
6f:76:af:34:06:01:5a:8b:d0:4b:ae:a6:42:03:f1:
e7:38:da:cb:23:f5:3e:37:5f:c3:e3:84:2a:b3:3a:
90:b9:ab:c9:10:14:05:98:72:11:82:f5:82:38:9e:
90:78:af:d1:05:8e:40:48:61:7e:f7:79:d4:ee:a2:
16:4d:61:e4:5f:1d:25:4c:0e:e9:20:a1:b1:84:c4:
24:f5:9c:5d:a7:a3:84:7c:74:ed:9d:25:81:d3:38:
7a:27:6f:8b:94:2f:8e:80:60:f0:2b:ad:de:08:b9:
95:6f:46:a8:f3:d1:b4:92:a7:f5:bf:b0:15:e3:0e:
be:96:38:b1:35:33:fb:75:3c:9e:34:90:15:8a:97:
c4:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:FD:9B:89:12:B3:23:41:91:A9:5C:1E:7B:D8:1E:64:93:E8:A8:D1
X509v3 Authority Key Identifier:
keyid:30:92:B1:17:06:2F:60:65:FA:A1:CD:FD:38:91:5E:4B:B9:C9:24:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MJKxFwYvYGX6oc39OJFeS7nJJLs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/e74b81-5ff7-4823-9267-0d3e662b0ee0/1/Df2biRKzI0GRqVwee9geZJPoqNE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/e74b81-5ff7-4823-9267-0d3e662b0ee0/1/MJKxFwYvYGX6oc39OJFeS7nJJLs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.121.140.0/22
Signature Algorithm: sha256WithRSAEncryption
7e:c4:72:11:91:f2:9d:8f:03:fc:fc:3b:cf:12:f1:f2:c5:56:
cc:77:8d:03:94:f6:6d:4c:72:fd:f9:4a:dc:a4:89:79:b2:22:
5c:a6:fc:73:c8:78:5d:5b:7f:b0:26:85:06:7f:84:41:90:7d:
3e:3d:97:82:29:61:78:2d:5b:52:93:30:db:81:51:bf:81:16:
aa:85:69:01:6d:d3:0a:60:85:d3:13:db:dd:f5:17:f9:a4:5a:
3a:8c:ed:b5:f6:38:4f:2f:24:e9:f9:60:83:90:ff:bc:f0:be:
5e:a1:e0:8c:af:f8:bb:55:78:98:9e:44:5b:6d:51:0d:c9:7d:
a0:f8:92:67:72:b2:72:d9:29:d3:04:39:02:51:73:2f:3b:16:
0c:18:37:09:d6:f1:67:c4:9c:19:c3:c6:12:97:22:88:a0:f8:
49:c3:81:a9:4f:76:2f:49:2b:6f:0a:c0:f7:8e:bc:60:d1:17:
17:24:66:8e:eb:82:f5:0f:fc:1a:d3:2a:48:ff:76:99:56:74:
7f:28:21:49:78:6e:10:a4:55:5c:6a:2a:3a:0d:49:59:bf:40:
a4:5a:6c:9b:4a:81:01:2f:34:2f:12:92:8a:00:1b:6e:43:14:
02:72:e8:8f:d1:03:42:3a:4b:69:9b:30:6d:41:20:02:ab:13:
44:44:f0:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:00:00 2025 by rpki-client