Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/79e439-fc0b-4e6e-8b06-39fb66a26ef8/1/FFbUWYwdC98UV9f9LgiYYBOYjz4.roa
File: FFbUWYwdC98UV9f9LgiYYBOYjz4.roa (raw, json)
Hash identifier: qHQMRtEIE6PEk6OgWACfwNz50T8j2hZuZAIlDNeAQBs=
Subject key identifier: 14:56:D4:59:8C:1D:0B:DF:14:57:D7:FD:2E:08:98:60:13:98:8F:3E
Certificate issuer: /CN=5f93da757c17fe38a0e6cd70275c73c8c69c896e
Certificate serial: 019424B396E646A902D08C14E47CC6941F5E
Authority key identifier: 5F:93:DA:75:7C:17:FE:38:A0:E6:CD:70:27:5C:73:C8:C6:9C:89:6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X5PadXwX_jig5s1wJ1xzyMaciW4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/79e439-fc0b-4e6e-8b06-39fb66a26ef8/1/FFbUWYwdC98UV9f9LgiYYBOYjz4.roa
Signing time: Thu 02 Jan 2025 01:48:56 +0000
ROA not before: Thu 02 Jan 2025 01:48:56 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 201073
IP address blocks: 185.86.206.0/24 maxlen: 24
2a05:bb80::/29 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:96:e6:46:a9:02:d0:8c:14:e4:7c:c6:94:1f:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f93da757c17fe38a0e6cd70275c73c8c69c896e
Validity
Not Before: Jan 2 01:48:56 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1456d4598c1d0bdf1457d7fd2e08986013988f3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:2a:ec:34:81:1a:85:3c:7d:32:20:f2:b2:5b:
06:0a:ee:71:16:cf:3d:78:09:68:f9:00:8c:28:b9:
57:0b:f4:6c:12:aa:54:0f:80:41:d6:9e:07:ff:b9:
5e:36:1e:5f:e5:ef:0a:3f:b1:8c:b7:64:cc:24:2a:
24:ab:fe:50:ad:df:2a:cd:81:92:63:e4:e5:31:aa:
5b:c2:f7:6e:a6:ca:5b:4d:ba:6f:2a:8c:9c:42:28:
6f:a5:79:05:00:82:0b:87:6f:0c:50:69:c4:55:13:
d1:db:4f:c3:43:e4:bd:e3:87:77:9f:13:a3:05:16:
5d:69:ed:e3:ec:13:6d:ca:27:b3:c1:cb:51:e3:dc:
b5:34:e9:19:20:aa:83:18:95:98:83:4a:69:83:fa:
37:68:aa:9e:a7:21:e5:4a:ce:2c:b9:f4:ba:86:32:
52:f4:b2:33:c0:88:e3:fc:d6:8d:22:af:25:69:dc:
a8:b9:31:a2:a8:38:a5:48:c3:fd:10:f4:bb:48:8e:
9b:10:8a:8b:d3:f2:a1:b2:73:aa:8b:00:58:90:ca:
9c:ca:c3:c5:9c:60:f3:b7:b6:a4:00:e3:35:54:24:
d6:33:0f:cd:7c:cf:33:c8:63:b8:a9:ed:db:a7:ca:
a6:ef:74:7f:f1:90:db:7c:45:9f:a9:d9:99:a6:63:
d1:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:56:D4:59:8C:1D:0B:DF:14:57:D7:FD:2E:08:98:60:13:98:8F:3E
X509v3 Authority Key Identifier:
keyid:5F:93:DA:75:7C:17:FE:38:A0:E6:CD:70:27:5C:73:C8:C6:9C:89:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X5PadXwX_jig5s1wJ1xzyMaciW4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/79e439-fc0b-4e6e-8b06-39fb66a26ef8/1/FFbUWYwdC98UV9f9LgiYYBOYjz4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/79e439-fc0b-4e6e-8b06-39fb66a26ef8/1/X5PadXwX_jig5s1wJ1xzyMaciW4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.86.206.0/24
IPv6:
2a05:bb80::/29
Signature Algorithm: sha256WithRSAEncryption
88:15:09:fb:9b:e6:7b:04:22:8c:80:ac:95:fc:f4:6a:2f:99:
e3:66:89:62:dc:0f:9e:e6:06:97:cd:e9:53:3e:1d:25:ec:6d:
e3:2a:df:cc:95:65:93:41:fc:4a:b6:7b:cf:db:09:d5:e1:e3:
6e:d8:ec:3f:e1:4b:23:56:cb:fc:3f:83:91:84:30:40:bf:80:
2b:f0:83:fb:2d:8e:5f:d9:86:78:62:ca:f0:66:fb:45:a0:f1:
61:3d:8d:b8:14:4b:4f:81:19:9f:ed:19:2c:af:72:53:2a:f6:
8f:d3:ee:f7:7a:43:a8:5c:ad:d0:f3:3b:3c:24:37:15:92:ab:
9a:0e:26:96:50:0a:7b:a8:dc:81:8d:23:45:95:72:59:2c:ce:
6b:82:bd:64:06:77:2b:1c:41:6b:ad:fc:17:44:58:cf:ad:cf:
52:7a:ae:d0:e5:84:03:20:41:1c:cf:ab:b3:d0:03:5d:77:de:
a9:9c:0d:0f:f8:80:b7:90:4f:ca:cc:14:7e:51:5a:12:cb:89:
ca:02:5f:43:06:ed:2e:de:5b:cd:a8:e0:d9:8a:8e:7e:1a:ae:
e0:56:34:a5:3e:fb:f6:ce:81:3e:f4:81:5f:7e:f1:7a:08:c4:
0e:39:0f:30:09:c6:50:89:dd:31:7a:90:0e:64:4b:da:d1:6a:
9c:52:2a:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:24:31 2025 by rpki-client