Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/e08318-2975-417a-b863-85ea63c24474/1/vH-eK3MDkjfjQIWGcNruZ1gYj6o.roa
File: vH-eK3MDkjfjQIWGcNruZ1gYj6o.roa (raw, json)
Hash identifier: X8Ll3xNOyDNsY8OoD7P2fm6g2ckrfD35bOMThe6H4RM=
Subject key identifier: BC:7F:9E:2B:73:03:92:37:E3:40:85:86:70:DA:EE:67:58:18:8F:AA
Certificate issuer: /CN=87992088e7655cb134020ca95b0e57d4e6daf40f
Certificate serial: 0194236A41CD697853B949F086907DE03E18
Authority key identifier: 87:99:20:88:E7:65:5C:B1:34:02:0C:A9:5B:0E:57:D4:E6:DA:F4:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h5kgiOdlXLE0AgypWw5X1Oba9A8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/e08318-2975-417a-b863-85ea63c24474/1/vH-eK3MDkjfjQIWGcNruZ1gYj6o.roa
Signing time: Wed 01 Jan 2025 19:49:13 +0000
ROA not before: Wed 01 Jan 2025 19:49:13 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 203201
IP address blocks: 185.146.128.0/22 maxlen: 22
2a07:50c0::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:6a:41:cd:69:78:53:b9:49:f0:86:90:7d:e0:3e:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87992088e7655cb134020ca95b0e57d4e6daf40f
Validity
Not Before: Jan 1 19:49:13 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bc7f9e2b73039237e340858670daee6758188faa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:cf:f6:3e:ce:6d:40:d0:15:3b:62:c5:ac:6d:
ed:74:c3:61:36:24:c3:dd:07:c1:4c:fa:1c:4a:e9:
69:a5:39:0e:76:21:f8:79:47:f3:36:f5:46:66:64:
2b:f0:a2:85:78:cf:17:2f:1f:b1:4a:11:54:2f:fd:
c1:ce:87:67:dc:bb:1a:32:b6:e7:80:87:b3:df:5a:
d5:7b:24:79:60:7e:b8:6b:9d:18:1c:73:a8:34:e5:
df:aa:95:e1:20:11:b1:a9:4e:3f:d7:dd:7d:de:10:
1a:ce:f2:d2:7f:d4:ee:6a:9b:b1:f6:76:30:ef:8c:
5d:30:40:65:5a:45:58:21:fb:57:e3:be:aa:c8:97:
96:d2:ac:8c:69:5b:47:71:c9:9b:cb:e8:a8:8d:aa:
6d:06:bd:d2:5e:ab:bb:98:46:fc:4a:19:9d:93:7e:
8a:12:96:89:3a:d6:10:85:66:fe:84:57:26:f7:26:
a1:7e:32:0f:4b:7d:9f:c1:68:28:63:f5:79:6a:d9:
8b:06:41:f2:3f:b2:9b:8e:47:ae:c4:62:df:e3:ef:
df:6e:af:71:82:59:8d:30:ab:fa:fd:1f:8a:6b:b1:
ee:f6:3b:63:f4:ab:3e:cb:6e:97:f8:8a:4f:3f:56:
b7:c7:f1:32:b8:a4:60:c7:27:3f:45:26:98:53:14:
a4:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:7F:9E:2B:73:03:92:37:E3:40:85:86:70:DA:EE:67:58:18:8F:AA
X509v3 Authority Key Identifier:
keyid:87:99:20:88:E7:65:5C:B1:34:02:0C:A9:5B:0E:57:D4:E6:DA:F4:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h5kgiOdlXLE0AgypWw5X1Oba9A8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/e08318-2975-417a-b863-85ea63c24474/1/vH-eK3MDkjfjQIWGcNruZ1gYj6o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/e08318-2975-417a-b863-85ea63c24474/1/h5kgiOdlXLE0AgypWw5X1Oba9A8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.146.128.0/22
IPv6:
2a07:50c0::/29
Signature Algorithm: sha256WithRSAEncryption
62:d2:49:ca:aa:dc:f3:be:ff:21:0b:3a:b1:c6:c7:6f:aa:3f:
16:2c:4d:17:7b:2c:ef:31:0d:a9:4d:4e:f1:9e:90:91:d8:e7:
99:19:e5:30:da:36:d4:20:6d:aa:4d:34:da:4e:de:92:a7:32:
25:95:c5:62:1c:f2:44:a2:d1:23:bc:34:0a:03:68:d0:47:f8:
15:3a:84:a3:8b:ba:4d:60:6f:60:76:e7:0a:9b:67:7d:fb:0a:
23:48:f8:be:95:9b:a6:d4:ad:c4:4e:29:34:a0:47:32:87:a4:
4b:3e:99:d8:14:64:f2:13:94:f0:d8:3a:62:a3:4d:8b:83:b8:
e1:35:25:c9:a1:ae:82:ed:8f:9d:a9:d4:62:cf:07:66:a0:ed:
5a:43:86:c2:d4:f7:15:08:28:ff:3a:42:9f:ba:b1:1e:c2:1a:
80:17:51:7c:ee:b4:94:c8:5d:9b:e1:6a:d5:7d:0e:69:fa:b1:
a2:ab:d6:4f:99:6c:25:dd:21:c4:48:1c:a6:ad:78:75:25:22:
6f:f6:b7:19:80:86:d9:1b:aa:e2:9a:28:7d:30:ee:a6:1a:2f:
ce:4e:e1:ee:c5:b4:c0:4e:ef:ae:62:b4:23:eb:70:39:b2:0d:
63:48:b9:3c:13:ad:9c:71:82:b5:d3:9e:57:44:8a:8f:bb:c3:
83:cc:7e:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 15:38:42 2025 by rpki-client