Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/6c4021-0b67-4485-b823-0bddc80711ae/1/7KXXDbOmDOJ4LQN1JyFA-k-Tm80.roa
File: 7KXXDbOmDOJ4LQN1JyFA-k-Tm80.roa (raw, json)
Hash identifier: FyGaqVFk+vnx+I1kj3NwUg/UfIFUtqEhpx9/rpeS44U=
Subject key identifier: EC:A5:D7:0D:B3:A6:0C:E2:78:2D:03:75:27:21:40:FA:4F:93:9B:CD
Certificate issuer: /CN=d15a1098c5c8535c9758f128d8a082df7cf8510b
Certificate serial: 0194236A4EB9C6AC3599CC6C049FD1D1C824
Authority key identifier: D1:5A:10:98:C5:C8:53:5C:97:58:F1:28:D8:A0:82:DF:7C:F8:51:0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0VoQmMXIU1yXWPEo2KCC33z4UQs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/6c4021-0b67-4485-b823-0bddc80711ae/1/7KXXDbOmDOJ4LQN1JyFA-k-Tm80.roa
Signing time: Wed 01 Jan 2025 19:49:16 +0000
ROA not before: Wed 01 Jan 2025 19:49:16 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200186
IP address blocks: 185.144.97.0/24 maxlen: 24
194.164.101.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:6a:4e:b9:c6:ac:35:99:cc:6c:04:9f:d1:d1:c8:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d15a1098c5c8535c9758f128d8a082df7cf8510b
Validity
Not Before: Jan 1 19:49:16 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=eca5d70db3a60ce2782d0375272140fa4f939bcd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:36:3d:f5:8f:a8:ce:c0:f1:d6:56:c5:98:e9:
d5:9f:24:12:29:3a:61:5e:5e:ca:6f:ce:f5:48:8d:
ba:11:38:e9:84:72:3a:3b:1a:3f:d2:8a:db:3b:00:
3f:79:bb:b0:95:0b:c3:7c:46:54:ee:48:9f:17:01:
0f:7c:1c:25:aa:9c:b7:24:91:70:a0:1d:fb:57:df:
41:ed:84:50:35:98:c7:1a:4e:8c:47:68:9e:02:dd:
be:32:4f:77:28:f9:86:eb:0d:e6:2f:d0:e1:21:4c:
55:ad:43:2e:59:d9:f0:5b:13:0c:3f:3c:7b:67:0c:
f8:1a:7b:ee:f0:54:e0:85:e5:37:d6:8f:7d:d7:b6:
fd:a0:fb:43:1d:6b:fb:19:c0:cf:e6:02:bb:08:8b:
c0:75:b0:bc:24:ad:d7:b3:08:ce:3a:13:a1:15:de:
b3:a0:a0:0d:e1:7a:a1:66:dc:1e:09:dc:50:26:5f:
8f:d7:b1:56:86:e6:2a:ee:ec:b1:ff:96:18:dd:7c:
97:70:f3:22:cd:c5:ab:c2:10:b9:60:98:23:e0:86:
fa:35:63:f3:94:8e:91:98:5a:f0:d1:01:6c:1f:24:
07:fb:71:9d:65:66:12:49:9c:cf:b9:30:10:a0:43:
bd:d2:01:16:ff:5a:78:db:90:6a:25:15:cf:55:f7:
30:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:A5:D7:0D:B3:A6:0C:E2:78:2D:03:75:27:21:40:FA:4F:93:9B:CD
X509v3 Authority Key Identifier:
keyid:D1:5A:10:98:C5:C8:53:5C:97:58:F1:28:D8:A0:82:DF:7C:F8:51:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0VoQmMXIU1yXWPEo2KCC33z4UQs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/6c4021-0b67-4485-b823-0bddc80711ae/1/7KXXDbOmDOJ4LQN1JyFA-k-Tm80.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/6c4021-0b67-4485-b823-0bddc80711ae/1/0VoQmMXIU1yXWPEo2KCC33z4UQs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.144.97.0/24
194.164.101.0/24
Signature Algorithm: sha256WithRSAEncryption
9e:fc:7d:ce:80:27:19:0a:7c:50:c8:42:5d:ca:e0:81:56:56:
46:23:bf:8e:58:05:91:b7:aa:1c:db:ab:91:7e:7e:0c:44:1e:
f2:f1:d2:06:70:77:1b:a7:8d:4b:9f:56:83:1a:bb:9b:9e:9a:
16:e8:84:db:95:b0:49:62:f7:00:ad:bc:00:8b:2c:e5:4d:21:
45:98:bf:d8:36:8a:b9:86:3d:4b:29:1d:6a:de:7f:81:be:3d:
55:04:44:78:3a:1b:53:06:75:33:17:fa:df:ec:d3:3b:a7:55:
7a:ac:84:3b:ac:43:c6:44:17:8a:7e:6b:d5:3f:14:d8:ab:b3:
9a:eb:22:29:12:42:4d:df:9c:c1:31:43:bf:c9:e3:b2:63:7e:
e2:8b:f0:56:50:94:44:19:61:fe:e8:1b:66:c7:a8:4a:a3:ea:
1a:b7:b4:4d:29:21:fc:c2:dc:ef:bd:6a:91:a0:47:d4:d4:c9:
af:94:25:d0:03:18:46:b1:40:4f:ad:6a:30:8e:f8:17:6e:0c:
3e:a6:a9:b7:66:b4:c0:34:d0:aa:e9:06:70:52:b4:41:48:ab:
be:3f:5c:5d:05:83:20:bb:5c:d4:b3:72:02:52:36:4d:11:7c:
e7:90:fe:94:7b:49:a2:ae:e5:4c:f5:d0:41:a5:76:fa:e3:3b:
0f:ef:3f:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:42:52 2025 by rpki-client