Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/17f769-5833-4f26-93f8-ea7f218fdb50/1/lTisVzPeiPslXlhHYnIYv10zoj8.roa
File: lTisVzPeiPslXlhHYnIYv10zoj8.roa (raw, json)
Hash identifier: nI5Tne3/W5S4/3jqutx+PLa3bngqaYEDH1hjjV/uGx8=
Subject key identifier: 95:38:AC:57:33:DE:88:FB:25:5E:58:47:62:72:18:BF:5D:33:A2:3F
Certificate issuer: /CN=047ee74ac490e31f1d40764f092411ee25eb1665
Certificate serial: 0194258F53AEC01DAF25A78E71A491584ABC
Authority key identifier: 04:7E:E7:4A:C4:90:E3:1F:1D:40:76:4F:09:24:11:EE:25:EB:16:65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BH7nSsSQ4x8dQHZPCSQR7iXrFmU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/17f769-5833-4f26-93f8-ea7f218fdb50/1/lTisVzPeiPslXlhHYnIYv10zoj8.roa
Signing time: Thu 02 Jan 2025 05:48:57 +0000
ROA not before: Thu 02 Jan 2025 05:48:57 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200770
IP address blocks: 185.96.212.0/22 maxlen: 24
2a06:200::/29 maxlen: 64
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:53:ae:c0:1d:af:25:a7:8e:71:a4:91:58:4a:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=047ee74ac490e31f1d40764f092411ee25eb1665
Validity
Not Before: Jan 2 05:48:57 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9538ac5733de88fb255e5847627218bf5d33a23f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:b3:c2:cf:af:53:09:95:34:f0:d0:c0:ad:a5:
21:a9:41:71:4d:e3:bf:91:fc:47:fd:f8:79:cf:f9:
2d:17:87:ea:0e:6f:05:55:f8:cf:6c:45:aa:74:0a:
3e:7c:40:24:fc:f5:da:3a:94:b3:62:44:03:0b:f9:
3b:af:90:69:5a:4a:eb:60:ca:34:7a:31:95:72:57:
b6:69:7d:ad:e3:91:29:13:16:4b:5f:02:ae:6a:b4:
8b:59:e5:fc:ae:42:29:7b:e2:70:98:60:72:e7:59:
4a:00:7e:7c:fb:5b:5d:93:48:d1:81:84:58:1c:dc:
00:e7:5f:7d:9a:02:82:b2:a3:c8:5f:6a:6e:f1:7b:
c7:a2:86:cc:8e:e0:5c:9d:bc:be:5f:81:13:3c:12:
0c:18:7f:c4:1e:5f:36:6d:6e:3b:a0:c5:fc:cf:f9:
c3:5c:fd:53:c0:bf:5a:97:9e:b4:ce:25:0a:e6:b7:
77:a6:d1:27:2a:0d:30:31:48:1e:18:66:a8:52:33:
23:32:64:fa:5f:ab:50:56:90:d2:48:ee:72:64:0e:
b0:dd:55:5a:b8:27:8a:2f:88:61:9c:82:da:32:7f:
12:7a:61:bf:f0:61:1c:0b:a3:46:f6:56:f4:05:49:
e6:9a:a7:9e:39:cc:eb:dd:5e:59:69:9a:85:fa:7b:
5c:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:38:AC:57:33:DE:88:FB:25:5E:58:47:62:72:18:BF:5D:33:A2:3F
X509v3 Authority Key Identifier:
keyid:04:7E:E7:4A:C4:90:E3:1F:1D:40:76:4F:09:24:11:EE:25:EB:16:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BH7nSsSQ4x8dQHZPCSQR7iXrFmU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/17f769-5833-4f26-93f8-ea7f218fdb50/1/lTisVzPeiPslXlhHYnIYv10zoj8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/17f769-5833-4f26-93f8-ea7f218fdb50/1/BH7nSsSQ4x8dQHZPCSQR7iXrFmU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.96.212.0/22
IPv6:
2a06:200::/29
Signature Algorithm: sha256WithRSAEncryption
ad:38:4a:be:b9:90:48:ba:be:47:55:36:27:7c:eb:08:3c:1b:
20:77:6f:3e:ab:4c:e9:fa:a9:e5:09:5c:06:66:f9:0f:82:3d:
cc:9a:c9:89:97:89:25:9d:f9:bc:5b:8c:64:c9:d3:68:a8:b3:
55:50:73:c7:c6:64:61:fb:a1:38:8b:1f:1b:12:19:53:e8:b8:
52:18:63:6c:e4:86:4b:55:10:a8:b3:1c:24:2a:40:b4:7d:39:
90:1a:9a:e5:5b:a9:d0:6a:23:36:90:55:62:d4:2f:eb:33:50:
54:bd:ba:50:ad:aa:fd:93:55:bb:1a:02:76:59:09:01:b6:5c:
01:de:e4:f0:52:3f:97:fe:f3:d9:30:a8:82:a8:c1:6f:3a:7d:
12:0c:46:b7:1c:1c:bf:ea:19:9c:33:32:d4:77:07:ef:71:f4:
c8:d6:03:47:f8:bc:6b:fd:9b:2c:1a:e4:df:76:56:43:49:7a:
5c:59:6c:e4:90:70:e0:19:8a:e9:59:b2:cf:cb:a0:3e:ed:26:
d3:43:ec:89:c0:af:d6:0b:3b:8f:69:9b:78:b6:97:c2:52:a5:
98:57:af:57:47:ec:10:32:87:b7:4c:87:3b:ce:74:c4:6d:bd:
4d:8e:5d:f2:9c:5f:6b:32:c4:a7:e7:08:43:3e:d8:1c:38:b6:
7a:ec:83:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:02:54 2025 by rpki-client