Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/af1f64-c35f-47e8-87c9-8a11b4719d82/1/EhPeC3UNOmpfPSQgK1eZa6cxhM0.roa
File: EhPeC3UNOmpfPSQgK1eZa6cxhM0.roa (raw, json)
Hash identifier: Y+ISTlgHCWr+pylrvEHQiq7akKNEsEpXQTEEAN0nMmk=
Subject key identifier: 12:13:DE:0B:75:0D:3A:6A:5F:3D:24:20:2B:57:99:6B:A7:31:84:CD
Certificate issuer: /CN=f8ad543624f8d3281ec970458ee752f10a424529
Certificate serial: 0195BF3449D7CF485D6B8AB247906D74AD77
Authority key identifier: F8:AD:54:36:24:F8:D3:28:1E:C9:70:45:8E:E7:52:F1:0A:42:45:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-K1UNiT40ygeyXBFjudS8QpCRSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/af1f64-c35f-47e8-87c9-8a11b4719d82/1/EhPeC3UNOmpfPSQgK1eZa6cxhM0.roa
Signing time: Sat 22 Mar 2025 18:53:49 +0000
ROA not before: Sat 22 Mar 2025 18:53:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 204666
IP address blocks: 185.87.142.0/23 maxlen: 23
185.243.172.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:bf:34:49:d7:cf:48:5d:6b:8a:b2:47:90:6d:74:ad:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8ad543624f8d3281ec970458ee752f10a424529
Validity
Not Before: Mar 22 18:53:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1213de0b750d3a6a5f3d24202b57996ba73184cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:95:b0:1a:92:76:ac:76:78:77:ab:50:8b:57:
6c:6b:cc:b8:87:ec:2b:c3:0e:3e:92:2f:f4:68:80:
b5:bb:14:d6:de:18:ad:c3:a1:0f:e7:77:f8:56:0b:
bb:c2:1f:d7:2d:32:d4:d8:7d:cf:71:50:a5:58:c5:
9c:a5:a8:b6:5b:e0:dc:ba:10:f5:9d:0f:1d:61:99:
e8:6d:33:70:26:f6:d2:c9:42:ac:16:d4:52:d7:8f:
23:f9:f2:5c:6a:7b:87:48:bf:9e:47:9a:f1:0d:31:
70:89:26:bc:e3:86:03:d1:e0:53:1b:ce:a7:a6:aa:
75:8d:b6:e7:1d:d3:0b:0b:de:d9:ca:9c:35:66:ce:
ae:45:9f:2a:e4:6e:eb:10:2a:4b:c5:9e:4c:07:27:
49:6d:4c:33:9f:9d:c3:e8:0c:61:7e:ea:4b:c5:3f:
38:9b:a4:4e:e6:ed:7e:33:7b:f3:3f:ca:b0:59:85:
01:9f:d2:25:5d:c2:67:22:25:1c:cb:be:ba:e0:a6:
b4:d4:d0:c5:aa:22:70:52:38:d3:18:ed:70:0c:32:
6a:d1:8d:0f:c1:11:b3:50:e8:f0:03:70:99:74:bb:
bb:13:0e:c5:5f:c4:5b:47:a4:89:21:f4:3b:e1:8e:
4c:a6:00:ed:d5:fe:d3:ac:90:b3:05:2e:d0:e4:7f:
77:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:13:DE:0B:75:0D:3A:6A:5F:3D:24:20:2B:57:99:6B:A7:31:84:CD
X509v3 Authority Key Identifier:
keyid:F8:AD:54:36:24:F8:D3:28:1E:C9:70:45:8E:E7:52:F1:0A:42:45:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-K1UNiT40ygeyXBFjudS8QpCRSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/af1f64-c35f-47e8-87c9-8a11b4719d82/1/EhPeC3UNOmpfPSQgK1eZa6cxhM0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/af1f64-c35f-47e8-87c9-8a11b4719d82/1/1-K1UNiT40ygeyXBFjudS8QpCRSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.87.142.0/23
185.243.172.0/22
Signature Algorithm: sha256WithRSAEncryption
4b:11:35:10:a7:59:f8:69:de:b9:af:05:7d:fc:fe:27:1e:5b:
64:64:f0:dc:e4:d2:ac:f6:ab:00:6d:b8:51:1f:87:64:57:bf:
2f:26:58:40:86:7d:27:ce:20:67:f3:63:49:6c:63:51:7d:c5:
f4:5b:0c:92:18:09:43:3f:97:e4:d7:fd:35:62:06:17:af:95:
ca:d8:62:a3:fe:0e:91:45:60:5c:21:55:39:47:5e:6d:72:8d:
40:90:96:2c:a7:83:f9:60:c9:62:95:d0:69:25:78:2b:97:b3:
de:7d:c7:59:9c:0f:f8:0a:db:37:06:10:e5:31:1b:09:f3:08:
77:78:d7:d9:76:df:e6:3d:c8:81:5d:f6:33:45:87:85:c2:23:
7e:1e:4f:a8:24:49:e4:3d:05:95:2c:a5:c0:ad:8b:0d:e9:5b:
df:75:af:cb:85:4f:b2:63:41:4d:92:70:bc:b9:04:53:56:a2:
b5:f1:1f:bc:1d:6b:f4:4e:8f:d5:c6:24:60:d7:59:35:04:82:
7d:e0:a4:e6:d6:04:ed:50:e8:77:16:be:db:60:70:15:b9:e6:
5b:cc:23:ac:4a:57:ed:48:91:b0:f1:63:44:4b:2b:dd:42:1b:
5b:52:bd:65:f1:56:2b:47:1c:40:3d:2d:05:e6:a9:c1:1e:2d:
cd:f7:0e:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:18 2025 by rpki-client on console.sobornost.net