Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/00c711-0c29-4301-94bc-ea57cbe36811/1/NdSS5Qv1eCox1rtE9X2AJk7dL-4.roa
File: NdSS5Qv1eCox1rtE9X2AJk7dL-4.roa (raw, json)
Hash identifier: lwJLdjY7H5xRVDu9KZYID5aizdkpmbvkAmdLcDJlVYs=
Subject key identifier: 35:D4:92:E5:0B:F5:78:2A:31:D6:BB:44:F5:7D:80:26:4E:DD:2F:EE
Certificate issuer: /CN=bfe6fc768ad47b968e0a259fecc8a3da32fac5ea
Certificate serial: 01941F8CA2D732E1F9969E714CF54D56A486
Authority key identifier: BF:E6:FC:76:8A:D4:7B:96:8E:0A:25:9F:EC:C8:A3:DA:32:FA:C5:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v-b8dorUe5aOCiWf7Mij2jL6xeo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/00c711-0c29-4301-94bc-ea57cbe36811/1/NdSS5Qv1eCox1rtE9X2AJk7dL-4.roa
Signing time: Wed 01 Jan 2025 01:48:17 +0000
ROA not before: Wed 01 Jan 2025 01:48:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 201011
IP address blocks: 185.247.150.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:a2:d7:32:e1:f9:96:9e:71:4c:f5:4d:56:a4:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bfe6fc768ad47b968e0a259fecc8a3da32fac5ea
Validity
Not Before: Jan 1 01:48:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=35d492e50bf5782a31d6bb44f57d80264edd2fee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:2e:05:52:72:f8:83:85:b5:2a:fd:b0:97:0d:
d1:de:e7:8e:3a:0a:77:2b:78:13:ea:51:64:7d:6a:
41:78:55:b0:cb:fa:7b:ad:67:fb:f9:c4:e6:37:3d:
31:d7:40:7a:9d:4b:71:2f:4c:de:ab:7d:49:e8:ff:
52:df:4e:9c:1c:77:09:b7:01:c1:b5:47:9d:11:98:
3d:cc:d7:07:5f:73:a0:b9:ea:46:00:8a:b3:6f:26:
c9:a6:5d:22:80:75:71:0e:14:96:c1:61:e1:72:62:
b8:aa:a3:39:1d:a5:cd:2c:dd:ae:7d:ab:db:c8:36:
64:d0:7a:85:7e:8b:b7:07:9c:f0:1e:2a:8f:2b:4e:
04:33:49:07:39:7a:e5:43:11:f4:2a:48:ae:57:46:
e8:85:b4:7f:42:89:7c:c3:27:2b:f9:a8:bf:06:89:
a9:6d:5f:b7:1f:e6:72:1c:d6:fa:75:f7:3a:7f:2b:
97:b0:00:0a:98:5f:db:29:ce:c9:da:6a:b6:7c:eb:
5e:81:83:55:a8:7f:59:b2:04:26:19:93:12:43:05:
e3:7d:cd:00:c5:fd:dd:7b:b1:40:6d:5e:95:2c:db:
01:17:4e:17:79:c4:bb:1d:90:8a:33:ff:82:73:07:
8f:3d:83:29:b1:ac:68:1d:27:ab:2a:4e:f3:21:9a:
71:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:D4:92:E5:0B:F5:78:2A:31:D6:BB:44:F5:7D:80:26:4E:DD:2F:EE
X509v3 Authority Key Identifier:
keyid:BF:E6:FC:76:8A:D4:7B:96:8E:0A:25:9F:EC:C8:A3:DA:32:FA:C5:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v-b8dorUe5aOCiWf7Mij2jL6xeo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/00c711-0c29-4301-94bc-ea57cbe36811/1/NdSS5Qv1eCox1rtE9X2AJk7dL-4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/00c711-0c29-4301-94bc-ea57cbe36811/1/v-b8dorUe5aOCiWf7Mij2jL6xeo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.247.150.0/24
Signature Algorithm: sha256WithRSAEncryption
95:05:13:6c:6f:b7:ba:3b:60:db:02:09:51:ef:23:06:b1:b6:
f2:e7:4a:a4:1b:91:c7:cd:d2:b0:d5:e0:d8:c2:b3:e6:6e:2d:
dd:6a:1c:da:cd:22:ef:1f:b4:89:9d:c5:11:00:57:ce:03:8f:
b9:78:88:75:f9:43:af:d2:64:54:3e:c0:80:19:f6:03:d0:f3:
be:3d:72:e2:71:24:04:78:dd:93:25:e8:d6:ad:70:4c:63:72:
bf:44:6e:3a:34:80:a0:24:af:17:da:e0:f0:6d:b7:d4:e9:23:
d7:9d:6c:ef:98:2a:d5:2b:fa:c7:f1:8d:76:fc:aa:80:7c:25:
cf:a2:e2:90:e6:38:f1:ba:59:61:e9:e1:fd:ee:8c:f5:a6:bf:
c0:7d:9c:a8:7c:30:a9:99:11:ba:c4:4e:53:85:2e:46:4d:04:
7b:5c:f2:69:69:81:9d:35:41:68:01:ff:dd:3a:99:3d:ec:21:
d5:c4:c7:4f:44:59:c7:26:f6:f4:af:ec:98:ae:3a:a2:4a:ab:
f5:af:41:c0:37:25:6a:d0:7b:d2:f1:e8:14:1a:c3:f3:af:62:
70:cc:25:bf:98:d9:f6:06:3e:b1:c0:89:46:ce:1d:5d:40:d6:
dc:17:80:81:47:90:2d:d8:9e:95:f9:ce:28:d1:32:78:08:23:
1c:4e:3a:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:42:12 2025 by rpki-client