Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/ad6954-af32-4996-bb69-2ed9f1cc2b0d/1/IDDlMwm9-5ZOz6KG-dVFSUnj-U8.roa
File: IDDlMwm9-5ZOz6KG-dVFSUnj-U8.roa (raw, json)
Hash identifier: 1Nd8bcLLvnAmE61D+G0tQnrMjss8Eoxbsm1iIYgXgB4=
Subject key identifier: 20:30:E5:33:09:BD:FB:96:4E:CF:A2:86:F9:D5:45:49:49:E3:F9:4F
Certificate issuer: /CN=2fbe2ad7cc69a95e3a8071fb33df9af7a379928b
Certificate serial: 019423D6E9BD68FBA839A30A11A7B0F9A9F8
Authority key identifier: 2F:BE:2A:D7:CC:69:A9:5E:3A:80:71:FB:33:DF:9A:F7:A3:79:92:8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L74q18xpqV46gHH7M9-a96N5kos.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/ad6954-af32-4996-bb69-2ed9f1cc2b0d/1/IDDlMwm9-5ZOz6KG-dVFSUnj-U8.roa
Signing time: Wed 01 Jan 2025 21:47:54 +0000
ROA not before: Wed 01 Jan 2025 21:47:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42605
IP address blocks: 185.243.200.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d6:e9:bd:68:fb:a8:39:a3:0a:11:a7:b0:f9:a9:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2fbe2ad7cc69a95e3a8071fb33df9af7a379928b
Validity
Not Before: Jan 1 21:47:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2030e53309bdfb964ecfa286f9d5454949e3f94f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:42:99:1a:04:93:17:2b:6d:52:95:ed:8c:6e:
54:33:60:f6:b0:45:1c:ff:fd:79:69:0d:6c:5f:35:
4c:ba:a8:a2:e9:26:a6:e3:76:d9:da:a6:41:1b:4d:
1e:8f:23:19:ea:2f:76:ca:2f:b7:12:97:8c:5a:6a:
f9:c0:87:9c:0c:61:88:dc:85:85:0e:c4:67:48:cd:
73:8a:49:9e:02:16:bc:86:1a:24:89:67:79:37:67:
54:cc:3d:5b:40:01:51:4a:09:21:bf:67:97:03:90:
e8:cf:1c:14:69:42:50:6b:10:e0:84:7d:7c:9a:45:
a5:4b:46:cd:92:2e:70:35:97:cc:89:33:97:21:ca:
81:55:b7:69:f3:3f:37:ba:3d:2a:29:95:04:02:45:
7d:84:f2:06:79:b3:cf:12:f1:4f:ac:14:d1:75:cc:
d5:9d:4c:31:99:1a:6d:8e:98:20:fb:b6:b9:83:85:
39:33:70:46:b9:77:78:22:f5:85:11:f9:5a:15:5e:
30:b4:39:de:3b:f4:dc:8f:39:4b:7b:70:10:0e:ee:
db:a2:68:5d:99:f6:bc:85:b2:e1:06:d7:3a:ab:92:
53:01:ee:12:b0:51:bb:46:74:bf:eb:9e:d6:a2:82:
6f:18:50:ca:74:f3:a4:9c:4f:71:85:c3:30:c7:2d:
0a:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:30:E5:33:09:BD:FB:96:4E:CF:A2:86:F9:D5:45:49:49:E3:F9:4F
X509v3 Authority Key Identifier:
keyid:2F:BE:2A:D7:CC:69:A9:5E:3A:80:71:FB:33:DF:9A:F7:A3:79:92:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L74q18xpqV46gHH7M9-a96N5kos.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/ad6954-af32-4996-bb69-2ed9f1cc2b0d/1/IDDlMwm9-5ZOz6KG-dVFSUnj-U8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/ad6954-af32-4996-bb69-2ed9f1cc2b0d/1/L74q18xpqV46gHH7M9-a96N5kos.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.243.200.0/24
Signature Algorithm: sha256WithRSAEncryption
47:21:5e:62:23:92:88:12:af:53:69:9c:41:54:5c:2b:c5:65:
05:09:db:bd:11:5f:bc:d8:64:01:c3:4f:26:b2:05:d5:66:af:
7d:43:a9:5b:98:49:de:8d:6e:1f:82:b6:9c:23:3e:df:9c:73:
b3:5d:b4:d7:d3:9d:8c:68:0b:52:42:56:48:f6:5a:ea:3d:f9:
82:41:f8:26:1c:fd:c7:e4:d4:e1:a3:56:32:59:8b:b1:60:b7:
eb:84:3e:df:14:1e:d5:d9:ed:30:55:b9:d1:27:e7:0e:62:12:
41:26:07:3e:f3:e0:89:84:39:d8:91:32:01:1e:3c:bf:cd:a2:
65:ee:55:72:a7:02:a7:a9:0e:6f:7c:91:f1:d8:ef:b7:b1:b5:
af:ec:1f:c8:68:d1:23:e2:3c:dd:17:91:5a:79:22:24:a0:7b:
62:6e:03:4d:f8:21:d4:88:b8:3b:99:b9:93:ac:8d:28:58:78:
a7:0e:b5:ed:52:a7:3e:3d:e0:7c:11:e1:c6:39:c5:3e:41:7f:
4c:8c:80:29:d9:f6:39:a8:ba:40:a0:eb:46:b2:5c:ec:ba:87:
30:1c:64:99:18:cc:90:60:c9:ea:a5:f3:e1:1c:c8:98:75:bb:
a0:d0:cf:36:ba:e4:d6:2a:7e:ff:c1:01:78:34:d7:84:9a:4b:
03:76:6b:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:29:14 2025 by rpki-client on console.sobornost.net