Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/6a6313-8546-4031-be9b-8b2ebe4e29ce/1/V7vJK1PzSdzcivTHP2kjHgag3Cc.roa
File: V7vJK1PzSdzcivTHP2kjHgag3Cc.roa (raw, json)
Hash identifier: OnLS3rg6t36BwcZTS3yV6qxgn2/9ln9WoFUEiCOulgw=
Subject key identifier: 57:BB:C9:2B:53:F3:49:DC:DC:8A:F4:C7:3F:69:23:1E:06:A0:DC:27
Certificate issuer: /CN=1a879de1c75fbbd2c31d1d90814056f27d57d776
Certificate serial: 0194274868725122C9BD729009DC3305FDEB
Authority key identifier: 1A:87:9D:E1:C7:5F:BB:D2:C3:1D:1D:90:81:40:56:F2:7D:57:D7:76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Goed4cdfu9LDHR2QgUBW8n1X13Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/6a6313-8546-4031-be9b-8b2ebe4e29ce/1/V7vJK1PzSdzcivTHP2kjHgag3Cc.roa
Signing time: Thu 02 Jan 2025 13:50:44 +0000
ROA not before: Thu 02 Jan 2025 13:50:44 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48206
IP address blocks: 185.142.40.0/24 maxlen: 24
185.142.41.0/24 maxlen: 24
185.142.42.0/24 maxlen: 24
185.142.43.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:68:72:51:22:c9:bd:72:90:09:dc:33:05:fd:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a879de1c75fbbd2c31d1d90814056f27d57d776
Validity
Not Before: Jan 2 13:50:44 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=57bbc92b53f349dcdc8af4c73f69231e06a0dc27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:e7:bc:70:b7:46:78:bd:d3:e0:62:84:b9:96:
76:dd:91:54:a1:6b:e2:91:23:9f:ec:7c:54:f8:dc:
22:5a:45:77:f8:a3:a2:8d:52:d7:09:e5:f2:27:55:
2f:e4:37:0b:45:5c:77:b4:8f:70:b7:95:7b:ae:ed:
e6:d3:c4:91:24:3a:10:95:21:22:92:3f:33:16:b2:
af:04:e6:8c:4e:aa:01:8f:26:23:79:e8:fa:cb:b9:
dd:d3:75:57:b2:cb:61:2e:32:ac:a4:4d:05:70:08:
36:ee:55:c0:8f:5e:1a:e6:3e:b8:ea:4d:fa:ec:a8:
94:9c:29:de:54:2d:5e:a3:18:4d:93:9b:08:f2:03:
d8:cf:d3:46:19:ed:94:58:80:37:59:81:ee:e9:bb:
6e:20:f7:84:db:dc:fb:cd:84:a2:8e:00:f4:fa:38:
f7:d4:0f:40:bc:75:b8:c3:4a:aa:85:e4:e4:bb:53:
5f:d8:52:8a:17:8e:c8:5f:a6:4f:a6:0b:67:fa:da:
3e:95:3d:3c:c7:e6:c2:ea:87:2a:e2:33:a1:8c:99:
06:e4:40:03:b3:76:e2:76:04:0a:e7:36:68:24:28:
d5:41:8d:42:81:86:0c:77:13:8c:6b:29:7a:0a:2d:
05:43:a5:68:c0:08:23:0b:86:aa:80:b2:6d:dd:2b:
ec:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:BB:C9:2B:53:F3:49:DC:DC:8A:F4:C7:3F:69:23:1E:06:A0:DC:27
X509v3 Authority Key Identifier:
keyid:1A:87:9D:E1:C7:5F:BB:D2:C3:1D:1D:90:81:40:56:F2:7D:57:D7:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Goed4cdfu9LDHR2QgUBW8n1X13Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/6a6313-8546-4031-be9b-8b2ebe4e29ce/1/V7vJK1PzSdzcivTHP2kjHgag3Cc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/6a6313-8546-4031-be9b-8b2ebe4e29ce/1/Goed4cdfu9LDHR2QgUBW8n1X13Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.142.40.0/22
Signature Algorithm: sha256WithRSAEncryption
21:94:28:65:7a:f2:18:d9:08:dc:28:90:66:ad:cc:1c:01:1c:
37:6e:c7:ac:45:fb:a4:7d:ed:00:b1:20:c0:1a:7d:42:4d:97:
ee:bb:0b:7b:99:54:fa:b7:2c:9a:3a:df:66:54:48:55:d0:cf:
4b:ab:b4:28:72:c0:0a:8e:55:0b:8f:25:00:8e:08:45:5b:07:
47:96:4a:65:55:c6:89:8f:9a:ae:56:5c:54:3e:91:af:72:c3:
c0:7f:d5:66:bc:6e:b1:fc:8a:00:54:06:bc:14:47:8f:83:82:
c2:7c:06:f5:c1:a0:12:36:f2:c0:92:09:25:80:d5:e1:0e:1c:
f8:41:34:61:69:9b:2a:08:cf:2c:8f:14:91:15:a2:6f:4e:3e:
31:61:3a:cb:60:f7:36:d2:b0:88:e5:99:57:70:1a:43:de:0a:
10:b7:f4:49:61:f9:2a:5d:2f:d2:37:79:27:34:75:e5:e5:ae:
f2:0a:7c:d8:c1:df:e3:f2:6f:b7:ec:a6:e1:6e:c9:27:e8:75:
1e:ce:ec:be:29:d1:6d:cc:b0:f8:b4:5c:60:0d:5c:93:7d:df:
a8:75:b3:83:50:f8:b0:cc:8d:6f:54:6f:c1:de:17:de:ce:99:
53:37:b6:33:0b:82:42:3f:8a:2d:6c:df:a8:13:c0:78:e7:2b:
0d:3a:b1:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:35:02 2025 by rpki-client