Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/1-IthlL3DEq8O-rteg4WxJjjdK6w.roa
File: 1-IthlL3DEq8O-rteg4WxJjjdK6w.roa (raw, json)
Hash identifier: NrL5LNgSxBWcbV7x/wU9Lr8CHnFUer7MhIowqLgkdVQ=
Subject key identifier: F8:8B:61:94:BD:C3:12:AF:0E:FA:BB:5E:83:85:B1:26:38:DD:2B:AC
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 019422205E223F7B367811910498F8987CE6
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/1-IthlL3DEq8O-rteg4WxJjjdK6w.roa
Signing time: Wed 01 Jan 2025 13:48:54 +0000
ROA not before: Wed 01 Jan 2025 13:48:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 273909
IP address blocks: 185.226.104.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:20:5e:22:3f:7b:36:78:11:91:04:98:f8:98:7c:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Jan 1 13:48:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f88b6194bdc312af0efabb5e8385b12638dd2bac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:d1:fa:a9:7b:5a:99:ed:22:25:d5:ad:b6:8f:
6c:b4:f0:cd:28:c4:b1:22:c1:a6:b4:6e:a0:9b:1c:
24:7e:d7:66:9c:4f:c9:d5:27:03:68:18:2b:d4:c1:
e5:69:66:d2:cf:d8:c4:06:40:97:0a:67:88:ce:a1:
71:92:89:eb:d2:82:fa:dc:9a:88:fb:6c:fd:5f:4a:
f8:50:3c:24:05:04:b4:1e:fd:60:6c:6e:e3:8a:a8:
6e:02:dd:b3:50:65:9f:86:98:9d:f1:7d:a7:91:3a:
17:ef:3a:1b:c2:6d:e6:17:29:ab:0d:b9:4a:d4:0e:
91:a0:2e:3d:40:12:9a:ce:a6:a7:d3:7c:4b:6a:18:
76:96:e8:fa:b8:8d:2e:89:ed:61:bd:6c:f2:36:08:
1b:e5:76:c9:10:b7:09:69:bc:f4:a4:61:ae:7b:ef:
a6:58:8f:f3:a5:34:93:3f:3e:87:64:b0:98:89:d4:
a9:0c:a7:87:1e:46:a9:e2:d9:1e:2e:f0:19:3c:bc:
e2:4f:34:f5:27:02:a1:99:14:62:da:9a:fd:1c:63:
4d:6f:1f:29:83:03:17:63:03:e0:5e:7a:2c:96:b9:
76:8b:48:4a:96:c9:40:b3:f4:50:ef:13:5f:f7:8e:
97:1c:f9:0a:98:36:59:df:1b:3b:b9:c1:54:ea:04:
90:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:8B:61:94:BD:C3:12:AF:0E:FA:BB:5E:83:85:B1:26:38:DD:2B:AC
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/1-IthlL3DEq8O-rteg4WxJjjdK6w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.226.104.0/24
Signature Algorithm: sha256WithRSAEncryption
75:78:22:50:c8:a6:5f:b6:9e:7d:0e:4d:20:53:8a:b4:a7:dc:
22:70:63:13:43:29:bf:1d:eb:07:b7:a7:b9:4b:5d:9d:4b:57:
a7:ff:03:11:ba:3b:37:49:0e:17:3f:2e:69:a2:53:df:1b:65:
8c:42:d3:86:a0:1d:65:dd:e4:09:de:aa:48:9c:8a:fa:66:3c:
84:38:15:03:d4:69:03:52:d6:a9:3f:e9:0b:f3:31:6e:a3:84:
37:0c:da:c0:8b:f3:b5:97:17:71:04:3c:c2:1a:2a:9a:f1:9e:
44:87:c4:ae:dc:3d:4d:ad:11:be:18:1b:e9:bc:ab:f1:11:b0:
cf:1a:34:37:3f:b5:b5:1e:ab:73:9d:95:15:37:40:f8:60:cd:
7c:78:e5:38:8d:ee:db:41:89:43:e6:33:85:af:25:9c:59:61:
f7:33:32:8f:27:ff:e8:8d:07:f0:71:d9:40:78:ac:46:39:3f:
9a:c9:8c:b8:50:fb:2f:aa:3c:5a:82:f7:cc:35:77:2d:25:56:
46:84:48:37:ea:0b:35:9a:6e:1e:b6:a5:ab:4e:40:6d:0f:74:
47:8a:18:45:8f:65:67:f9:0a:87:c6:88:df:88:d6:95:42:7e:
16:cd:9f:59:eb:81:b0:94:9f:a4:0a:49:21:1c:f8:b1:55:4f:
7d:f8:4a:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:25:54 2025 by rpki-client