Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/a32aba-e9c7-40ea-8162-91494ac3b6d5/1/RfXdB1uHqTBN6RI4Ei6Oa090sJU.roa
File: RfXdB1uHqTBN6RI4Ei6Oa090sJU.roa (raw, json)
Hash identifier: dQnKrWhdakZ+384uTWhQC1swu7fczbqA0NfqM/pjIIQ=
Subject key identifier: 45:F5:DD:07:5B:87:A9:30:4D:E9:12:38:12:2E:8E:6B:4F:74:B0:95
Certificate issuer: /CN=271d84369c155055ad9bd5b471558d3fa7b109d2
Certificate serial: 019421B1BB5BE95ADA2D771AAE4B0635B8B1
Authority key identifier: 27:1D:84:36:9C:15:50:55:AD:9B:D5:B4:71:55:8D:3F:A7:B1:09:D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jx2ENpwVUFWtm9W0cVWNP6exCdI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/a32aba-e9c7-40ea-8162-91494ac3b6d5/1/RfXdB1uHqTBN6RI4Ei6Oa090sJU.roa
Signing time: Wed 01 Jan 2025 11:48:03 +0000
ROA not before: Wed 01 Jan 2025 11:48:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207773
IP address blocks: 185.155.216.0/24 maxlen: 24
185.155.217.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b1:bb:5b:e9:5a:da:2d:77:1a:ae:4b:06:35:b8:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=271d84369c155055ad9bd5b471558d3fa7b109d2
Validity
Not Before: Jan 1 11:48:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=45f5dd075b87a9304de91238122e8e6b4f74b095
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fc:eb:14:ad:7c:84:a3:44:87:2b:7f:ae:3c:a8:
08:be:88:83:af:30:17:06:c8:6a:74:a4:f9:b6:56:
b7:12:bb:63:b2:15:34:52:ed:c3:1b:aa:5c:24:72:
d8:e9:c3:f8:0d:5d:a4:c8:47:7e:08:60:ca:ab:b3:
86:76:97:e8:cf:b8:3a:dd:a5:b3:28:e3:bd:4a:6f:
06:74:1c:12:34:2b:9c:7e:50:f1:94:83:bb:e8:8f:
c8:d5:29:f8:64:49:9c:ac:f4:d2:52:5b:82:46:04:
2c:fd:e1:f8:79:86:28:e6:f0:92:7b:34:67:29:5f:
3f:21:61:a6:4c:58:b6:9a:cd:f6:78:a5:d8:11:cc:
6f:ad:f6:b3:ed:93:33:42:59:71:a1:8f:0a:64:73:
a3:c8:40:21:83:7f:35:b3:5a:5f:01:d9:d0:f0:3c:
1c:97:94:c7:3d:d5:ba:e6:26:2f:6b:5a:cc:a0:15:
e1:aa:38:4f:2c:95:b9:36:f4:da:b3:ea:16:19:71:
da:b8:34:92:e1:d5:76:6c:fa:38:11:78:29:01:6b:
01:54:ab:d3:fb:e9:2f:3a:d6:0e:bd:68:14:65:6f:
f3:a0:6c:e5:ae:be:b0:5f:70:e6:2d:ec:2c:b4:e5:
92:1a:2c:3e:48:b8:5d:53:25:9f:57:0e:9c:af:6e:
a4:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:F5:DD:07:5B:87:A9:30:4D:E9:12:38:12:2E:8E:6B:4F:74:B0:95
X509v3 Authority Key Identifier:
keyid:27:1D:84:36:9C:15:50:55:AD:9B:D5:B4:71:55:8D:3F:A7:B1:09:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jx2ENpwVUFWtm9W0cVWNP6exCdI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/a32aba-e9c7-40ea-8162-91494ac3b6d5/1/RfXdB1uHqTBN6RI4Ei6Oa090sJU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/a32aba-e9c7-40ea-8162-91494ac3b6d5/1/Jx2ENpwVUFWtm9W0cVWNP6exCdI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.155.216.0/23
Signature Algorithm: sha256WithRSAEncryption
38:2b:ef:ba:45:b6:d9:a5:b1:98:7e:08:ec:7a:d7:a3:08:d8:
d6:a5:72:61:a7:57:1d:40:1a:42:9f:dd:86:9d:e4:d7:3a:1a:
84:1b:e6:fe:d0:85:0b:b6:8a:cd:92:0f:87:7b:34:05:7d:b1:
f4:40:0a:b6:3f:2c:6f:c9:8a:42:1a:df:56:57:08:90:09:d0:
8c:7c:16:1f:d8:48:b3:1e:cc:c0:e4:bf:1c:fd:d2:67:6a:85:
a7:5d:8c:ce:e0:9d:1e:09:79:1c:fe:47:64:c2:e4:c5:57:dd:
51:4e:3a:09:8d:44:dd:89:21:6e:dd:92:b4:4f:79:21:c6:bd:
cb:e4:df:68:62:46:31:9e:a0:8b:cc:c6:5f:0e:e7:4d:ef:f6:
ef:da:98:27:c7:b2:75:45:32:33:b1:c6:56:2c:bc:65:2e:1f:
3e:ce:e2:0b:b0:7c:3f:c7:7d:7a:01:2b:b1:2e:8d:3b:39:ed:
5a:4d:60:2d:3d:39:a1:c1:2d:03:5b:4e:c0:ae:9a:d6:62:45:
fd:8a:56:3b:6d:70:9b:fa:3f:e7:de:20:21:18:c9:6b:d2:dc:
59:8e:c7:33:49:b5:51:29:95:5b:04:65:d3:4f:aa:b5:bb:2f:
f3:7c:37:57:dc:1d:d8:b6:31:ac:09:5c:a7:4c:bd:71:85:45:
72:2c:09:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 21:40:45 2025 by rpki-client