Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/b416a5-ee4f-4cc7-b0c4-7475f70df9fa/1/7a7WUL8xvDPo2P-5omM4jYtGU5Y.roa
File: 7a7WUL8xvDPo2P-5omM4jYtGU5Y.roa (raw, json)
Hash identifier: UostfHkB3oR0Iku8D5pESC2eAmHKknmIvGYXu5RiVk8=
Subject key identifier: ED:AE:D6:50:BF:31:BC:33:E8:D8:FF:B9:A2:63:38:8D:8B:46:53:96
Certificate issuer: /CN=ff1f615b91839f51ed3a5b53753b27b02c76da95
Certificate serial: 019425FC3784104FC143C5AE2CB082039589
Authority key identifier: FF:1F:61:5B:91:83:9F:51:ED:3A:5B:53:75:3B:27:B0:2C:76:DA:95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_x9hW5GDn1HtOltTdTsnsCx22pU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/b416a5-ee4f-4cc7-b0c4-7475f70df9fa/1/7a7WUL8xvDPo2P-5omM4jYtGU5Y.roa
Signing time: Thu 02 Jan 2025 07:47:53 +0000
ROA not before: Thu 02 Jan 2025 07:47:53 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 56567
IP address blocks: 185.114.148.0/22 maxlen: 22
185.220.192.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fc:37:84:10:4f:c1:43:c5:ae:2c:b0:82:03:95:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff1f615b91839f51ed3a5b53753b27b02c76da95
Validity
Not Before: Jan 2 07:47:53 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=edaed650bf31bc33e8d8ffb9a263388d8b465396
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:78:db:e2:df:40:ae:d6:27:99:26:75:fe:c0:
fd:ce:84:a6:98:f4:8e:20:71:c2:5a:4c:60:4a:0e:
ef:af:44:8d:1a:00:31:65:ad:d3:2c:d4:45:40:da:
79:92:64:c3:0b:75:cd:4f:4f:85:10:c8:7b:a4:5e:
3b:5e:e9:1a:41:87:78:d4:9f:76:dc:00:a5:e0:19:
ff:15:45:9a:bf:a1:27:13:f5:83:9d:94:46:8b:d6:
01:72:c4:58:d9:75:d4:d1:ab:cf:10:c3:78:3e:e8:
c7:9f:89:53:a9:37:d7:a6:20:f2:9b:6c:cd:66:39:
44:42:c9:17:33:09:41:a8:a2:d0:37:b4:9f:10:e6:
9a:23:eb:03:03:d9:2d:ad:d2:82:25:4e:3b:f7:1d:
79:22:55:55:28:17:e2:5b:72:b4:81:cd:61:32:43:
99:e7:dd:ef:4a:04:7b:97:6a:ac:95:25:3f:50:d1:
d2:c0:1f:c0:74:37:ac:a3:92:b6:a4:20:7a:9c:47:
c9:67:39:6c:a7:e0:66:84:f0:16:1e:08:80:34:5f:
05:f4:3d:7a:5f:b1:60:8d:40:6c:36:2a:0a:db:a7:
82:ff:ac:a4:4e:f0:d8:40:bf:59:19:94:fc:34:c4:
d6:55:fd:62:89:3b:1a:84:db:3e:33:14:22:0d:b9:
9d:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:AE:D6:50:BF:31:BC:33:E8:D8:FF:B9:A2:63:38:8D:8B:46:53:96
X509v3 Authority Key Identifier:
keyid:FF:1F:61:5B:91:83:9F:51:ED:3A:5B:53:75:3B:27:B0:2C:76:DA:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_x9hW5GDn1HtOltTdTsnsCx22pU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/b416a5-ee4f-4cc7-b0c4-7475f70df9fa/1/7a7WUL8xvDPo2P-5omM4jYtGU5Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/b416a5-ee4f-4cc7-b0c4-7475f70df9fa/1/_x9hW5GDn1HtOltTdTsnsCx22pU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.114.148.0/22
185.220.192.0/22
Signature Algorithm: sha256WithRSAEncryption
cd:df:95:e6:25:5c:32:b8:f0:17:bc:57:20:81:39:12:e2:e7:
ab:cc:e3:8f:41:7f:a9:27:a4:81:32:95:a6:57:cc:4e:a3:d3:
f1:09:ab:04:c6:ce:7b:75:5c:32:5e:2c:d3:14:c8:ed:2c:48:
ff:77:9e:6b:95:53:e9:c8:e2:90:4d:1d:0b:6c:a3:b5:2d:75:
0f:bb:ff:8b:3a:43:95:3a:b5:77:e9:62:ff:95:fc:bd:24:d2:
35:a1:01:44:16:44:76:03:27:30:de:20:c1:26:7c:2f:35:c2:
81:33:a5:6c:6c:8c:aa:23:ab:da:ba:42:ae:71:a9:50:e3:63:
cf:ba:75:cc:c7:4b:04:e7:4f:7d:f7:61:5f:e8:23:41:7a:e7:
fb:12:de:17:29:b0:29:e6:4f:7a:10:c7:e3:92:29:fa:46:e6:
eb:c6:44:34:96:c0:9b:46:3f:dc:c3:01:17:7e:9b:4a:38:ad:
fb:6a:41:3a:51:03:30:37:6b:12:14:6a:40:34:fa:21:d4:0f:
ac:ba:01:b9:3b:54:74:08:71:d3:8b:b1:a0:d0:6d:d9:d8:b8:
34:45:79:a9:3a:c0:ba:22:23:f5:27:93:16:cf:16:e6:5c:9a:
43:a6:5e:98:b8:13:3a:ac:87:9d:98:8e:1c:db:7b:bb:4e:0a:
a5:45:50:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:54 2025 by rpki-client on console.sobornost.net