Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/h2qRxiXxk7i9KlmNJhJmJpb_OaM.roa
File: h2qRxiXxk7i9KlmNJhJmJpb_OaM.roa (raw, json)
Hash identifier: j+VFdGxC9FawQtBgBE4UzS/tfbh+oOP9jILN5p7vMpE=
Subject key identifier: 87:6A:91:C6:25:F1:93:B8:BD:2A:59:8D:26:12:66:26:96:FF:39:A3
Certificate issuer: /CN=7df132df13e4be53d8250c8c48420264eef6c14c
Certificate serial: 01941FFA373680EC6702F5F0EB5EEC3FBE92
Authority key identifier: 7D:F1:32:DF:13:E4:BE:53:D8:25:0C:8C:48:42:02:64:EE:F6:C1:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ffEy3xPkvlPYJQyMSEICZO72wUw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/h2qRxiXxk7i9KlmNJhJmJpb_OaM.roa
Signing time: Wed 01 Jan 2025 03:47:59 +0000
ROA not before: Wed 01 Jan 2025 03:47:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44289
IP address blocks: 85.204.68.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:37:36:80:ec:67:02:f5:f0:eb:5e:ec:3f:be:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7df132df13e4be53d8250c8c48420264eef6c14c
Validity
Not Before: Jan 1 03:47:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=876a91c625f193b8bd2a598d2612662696ff39a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:fb:75:a4:e0:4c:3e:18:36:a5:c3:99:72:ae:
47:f8:c9:a9:22:ee:31:c9:6d:4e:d8:08:77:5d:20:
8f:d9:bb:73:e8:66:26:13:3e:cb:12:64:0b:cc:cc:
8e:8c:ad:56:85:8b:1c:6b:81:00:1c:60:44:d2:a5:
bf:bf:c8:ba:ec:60:b4:c6:9a:18:88:15:68:2d:2a:
90:49:55:5f:56:38:7c:54:b3:ce:32:68:63:7d:80:
6d:de:44:80:88:89:d9:b2:aa:bf:ec:df:98:0f:e2:
84:c8:2f:77:09:47:61:91:c8:a2:50:68:12:c4:3a:
7a:1a:43:43:5c:88:2e:24:7d:fc:f3:bf:f0:1f:c1:
33:c5:70:13:20:c5:83:8f:9a:ef:5b:6e:20:3e:a7:
17:b6:42:11:ac:0d:cd:ba:c1:4f:47:37:91:43:47:
c8:3d:3e:26:4b:c8:49:e4:f1:2c:db:a8:96:8a:a5:
88:53:8a:b1:3a:5e:8a:2b:c6:7a:57:be:92:b6:e7:
e3:ef:6a:1a:9d:86:73:db:70:7f:bb:f1:a7:de:a5:
f2:1f:7c:13:60:d5:67:5d:22:a8:d7:e3:12:ad:71:
0e:30:61:6a:58:3f:01:d1:f2:a1:b4:54:90:33:3e:
b6:5f:85:dc:e7:6f:30:69:8a:ba:e6:69:48:41:25:
dd:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:6A:91:C6:25:F1:93:B8:BD:2A:59:8D:26:12:66:26:96:FF:39:A3
X509v3 Authority Key Identifier:
keyid:7D:F1:32:DF:13:E4:BE:53:D8:25:0C:8C:48:42:02:64:EE:F6:C1:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ffEy3xPkvlPYJQyMSEICZO72wUw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/h2qRxiXxk7i9KlmNJhJmJpb_OaM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/ffEy3xPkvlPYJQyMSEICZO72wUw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.204.68.0/24
Signature Algorithm: sha256WithRSAEncryption
46:81:85:92:01:6b:cc:03:56:62:e1:e5:d6:62:0b:7a:e2:66:
5c:97:60:59:47:78:52:dd:9c:24:a1:f1:e5:b7:ec:21:5f:79:
44:fe:d9:6a:e1:28:d6:89:96:2a:cb:7a:b5:89:62:f8:dc:5e:
f1:f5:f4:84:4c:be:af:20:c6:a7:e5:3e:17:3b:99:81:c5:a5:
dc:97:63:53:94:b9:cb:a5:db:ad:37:5a:64:d3:c0:21:92:54:
5c:67:a3:02:c8:74:06:7c:7c:31:06:1b:05:56:fe:ba:40:2b:
69:03:74:74:77:dc:5b:22:17:c3:17:47:9b:de:4e:4a:5c:db:
4e:07:62:51:01:91:99:dc:15:ac:28:5c:b2:75:9a:75:dd:7d:
be:86:77:63:0d:0f:35:97:f4:74:54:3d:e4:2d:38:c8:fd:3e:
c1:25:4b:0d:04:8c:26:71:4b:5d:a5:7b:89:70:7f:d7:28:a1:
25:09:32:be:8d:e8:2c:f5:56:21:fd:f4:c1:98:c0:49:1a:ed:
42:c1:45:b2:c9:5a:a1:a5:dc:46:b0:9d:b7:aa:c0:31:fc:90:
e1:2c:b9:63:48:48:d5:20:06:78:c8:a9:59:07:37:4b:c9:87:
a7:f7:b5:8b:df:d6:2f:b8:1d:71:32:59:16:c3:ab:4b:f2:f0:
18:16:48:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:44:21 2025 by rpki-client