Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/ab5e88-d2f9-487b-bb92-a4cb1cfd00b8/1/1ndyHQjZ22gElMY09b9UIH97Fd0.roa
File: 1ndyHQjZ22gElMY09b9UIH97Fd0.roa (raw, json)
Hash identifier: d9wD6lD21fFSwiL6i7e8/Tvl1y891h5uDv49+B9KB5s=
Subject key identifier: D6:77:72:1D:08:D9:DB:68:04:94:C6:34:F5:BF:54:20:7F:7B:15:DD
Certificate issuer: /CN=2989647851efcd198972ed3d149ccbbde9c55c00
Certificate serial: 019420D6399AABB774A4D73417C3C8E450A9
Authority key identifier: 29:89:64:78:51:EF:CD:19:89:72:ED:3D:14:9C:CB:BD:E9:C5:5C:00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KYlkeFHvzRmJcu09FJzLvenFXAA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/ab5e88-d2f9-487b-bb92-a4cb1cfd00b8/1/1ndyHQjZ22gElMY09b9UIH97Fd0.roa
Signing time: Wed 01 Jan 2025 07:48:17 +0000
ROA not before: Wed 01 Jan 2025 07:48:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 41993
IP address blocks: 185.82.144.0/22 maxlen: 22
2a05:9100::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d6:39:9a:ab:b7:74:a4:d7:34:17:c3:c8:e4:50:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2989647851efcd198972ed3d149ccbbde9c55c00
Validity
Not Before: Jan 1 07:48:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d677721d08d9db680494c634f5bf54207f7b15dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:7b:a1:4c:29:19:f5:c8:a6:5f:e1:e1:cd:13:
4c:9d:09:5e:83:6a:83:88:45:23:0c:0b:a9:10:c1:
e2:7e:ff:80:bb:2e:13:ed:b8:d1:b0:13:53:a8:72:
5d:d9:49:97:17:7e:ce:42:5c:4c:87:29:8d:5c:d7:
b8:1b:41:af:a3:bb:51:db:7a:55:d2:1b:9b:4e:96:
b6:2e:35:8d:fc:87:b7:a4:03:98:c7:75:2a:19:8e:
b9:0b:bf:3a:70:cb:d7:d5:c9:50:37:6e:fd:04:1e:
f4:42:00:c1:df:d1:2a:71:e9:86:6c:4a:4c:13:44:
46:c2:b9:4d:93:b5:a2:a0:1b:07:7c:c8:53:e4:c4:
80:7d:d7:73:32:e5:ae:f1:a5:8d:25:ee:56:8a:da:
f0:de:13:63:9c:5b:0d:9b:70:e9:13:18:77:97:0b:
7a:c0:ea:02:62:93:5b:bc:af:66:53:ad:da:0b:e7:
66:c9:bf:09:6d:f5:99:d2:03:39:5a:9d:c5:59:8e:
83:00:d9:00:69:a1:d3:74:85:59:9a:fd:4e:d1:71:
83:cb:0a:43:4e:c2:69:23:f3:30:e0:ed:ff:79:c8:
dd:99:dc:fb:8f:c7:a9:ba:ad:94:f8:a6:cf:2d:bd:
d1:30:d9:93:f7:54:0b:b4:a7:6d:f3:a4:37:08:4f:
1b:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:77:72:1D:08:D9:DB:68:04:94:C6:34:F5:BF:54:20:7F:7B:15:DD
X509v3 Authority Key Identifier:
keyid:29:89:64:78:51:EF:CD:19:89:72:ED:3D:14:9C:CB:BD:E9:C5:5C:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KYlkeFHvzRmJcu09FJzLvenFXAA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/ab5e88-d2f9-487b-bb92-a4cb1cfd00b8/1/1ndyHQjZ22gElMY09b9UIH97Fd0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/ab5e88-d2f9-487b-bb92-a4cb1cfd00b8/1/KYlkeFHvzRmJcu09FJzLvenFXAA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.82.144.0/22
IPv6:
2a05:9100::/29
Signature Algorithm: sha256WithRSAEncryption
72:8c:53:ad:c0:3a:00:64:f0:b0:ee:4a:d1:e3:a5:6b:01:0e:
e5:c9:98:e5:39:36:90:ce:3e:06:bb:29:58:a6:30:01:31:9b:
82:07:39:d8:b0:cb:38:0a:4b:d7:88:38:e4:c5:31:ff:ca:a6:
c2:72:2d:c0:6a:3a:d6:a8:50:3c:a8:d7:f5:92:d4:60:e4:73:
6f:e1:b2:36:79:7d:5e:43:62:a1:68:93:34:54:08:7c:98:f2:
a7:40:02:c2:b5:75:e0:b9:78:1f:17:b4:d4:5e:52:5a:dc:ad:
56:34:75:42:2f:06:15:00:8d:ab:75:8c:6e:94:2d:0d:85:9b:
e9:55:4e:ba:ed:01:1e:7b:10:79:be:73:fd:f2:43:4e:aa:a2:
2e:db:0f:f7:aa:40:2f:9c:17:cd:d5:15:45:e7:ca:4a:7c:bc:
82:4b:ef:93:bd:72:95:a5:c0:99:cd:9d:46:f5:db:49:4c:0b:
c0:63:19:b6:3d:2a:59:41:2c:50:a1:e7:de:49:cc:4f:e4:10:
68:cd:47:d8:ec:3c:b4:69:27:98:d4:d8:27:86:c4:2a:b3:e1:
d6:91:63:28:f0:9f:45:c4:ef:f2:e8:e6:de:c4:1b:8f:ee:6b:
3e:6a:09:d3:2c:b5:b8:44:32:20:c5:93:ff:c8:70:4c:34:f1:
43:76:bf:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:20:57 2025 by rpki-client