Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/9002e2-dc04-4c39-9235-54d5d04e346d/1/ZH9eOQBS3yZ2mNrRcAi8MSmUqK0.roa
File: ZH9eOQBS3yZ2mNrRcAi8MSmUqK0.roa (raw, json)
Hash identifier: FuScQMcfDGwx602mjPNY0OCTclXZkY7f5k+RJSk2RAU=
Subject key identifier: 64:7F:5E:39:00:52:DF:26:76:98:DA:D1:70:08:BC:31:29:94:A8:AD
Certificate issuer: /CN=d922d8d45f985dc3896c9176a7d48d7658cb4f68
Certificate serial: 01942745BE7A3589193837929F5CAFDAA573
Authority key identifier: D9:22:D8:D4:5F:98:5D:C3:89:6C:91:76:A7:D4:8D:76:58:CB:4F:68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2SLY1F-YXcOJbJF2p9SNdljLT2g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/9002e2-dc04-4c39-9235-54d5d04e346d/1/ZH9eOQBS3yZ2mNrRcAi8MSmUqK0.roa
Signing time: Thu 02 Jan 2025 13:47:49 +0000
ROA not before: Thu 02 Jan 2025 13:47:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43790
IP address blocks: 185.154.71.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:45:be:7a:35:89:19:38:37:92:9f:5c:af:da:a5:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d922d8d45f985dc3896c9176a7d48d7658cb4f68
Validity
Not Before: Jan 2 13:47:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=647f5e390052df267698dad17008bc312994a8ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:ca:10:bb:e6:53:6e:67:31:7e:99:20:f9:c9:
ba:3a:6b:21:6a:f2:e6:80:0a:e6:1f:6c:8d:3b:64:
3d:dd:c0:25:e1:e8:62:37:e2:27:a3:b1:25:a7:61:
c9:2f:5a:39:9a:0a:0a:a6:93:77:eb:7c:9c:f5:f2:
72:fb:12:7c:c0:15:e8:c8:1c:4b:3c:75:d1:6c:d2:
2a:bd:46:53:cf:9c:d5:9f:eb:bf:66:70:35:9f:52:
59:55:0c:19:69:9b:35:73:51:99:3f:2a:5b:ed:e8:
84:73:1c:db:5d:b2:fe:81:ba:00:b3:dc:8a:45:4f:
4d:ef:64:55:ed:60:c5:f3:c7:50:86:15:37:fb:ed:
74:cf:0c:af:c7:3a:87:04:62:80:3d:a4:3c:e6:0f:
e6:b2:cd:c5:e0:40:b6:28:3d:07:cd:e6:89:3e:a6:
a6:e7:e7:2b:22:18:0c:2c:94:b7:4c:48:91:7a:e1:
e7:ef:ba:ab:11:c2:c5:d8:ac:bb:6b:0e:20:e9:ea:
1b:29:43:71:94:d6:8b:da:b4:66:7a:8e:5e:b9:e7:
33:04:27:a4:1c:70:9d:8c:a7:cb:7a:84:16:78:5f:
af:1b:94:83:f6:20:e4:22:21:0d:af:11:14:9e:8d:
87:53:1b:05:48:a2:5a:b0:a5:16:33:fc:3f:e0:b7:
65:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:7F:5E:39:00:52:DF:26:76:98:DA:D1:70:08:BC:31:29:94:A8:AD
X509v3 Authority Key Identifier:
keyid:D9:22:D8:D4:5F:98:5D:C3:89:6C:91:76:A7:D4:8D:76:58:CB:4F:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2SLY1F-YXcOJbJF2p9SNdljLT2g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/9002e2-dc04-4c39-9235-54d5d04e346d/1/ZH9eOQBS3yZ2mNrRcAi8MSmUqK0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/9002e2-dc04-4c39-9235-54d5d04e346d/1/2SLY1F-YXcOJbJF2p9SNdljLT2g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.154.71.0/24
Signature Algorithm: sha256WithRSAEncryption
84:92:d1:05:af:94:80:f8:69:b2:b3:58:84:ac:ed:83:1c:4a:
9d:2c:56:eb:ec:19:38:01:35:55:3d:8a:66:55:92:d0:60:b9:
d3:e4:1c:bd:d7:fc:b3:55:b9:d5:6b:3a:8d:4e:ed:d5:7e:f1:
0c:33:2f:88:c2:68:cd:6f:59:45:38:e2:d9:f5:98:3c:63:ec:
32:d0:ef:c9:13:4d:da:8a:56:d7:c5:d4:e8:de:66:cc:cf:04:
7f:9a:95:1a:1d:01:4c:22:28:cc:f1:5b:54:9d:51:39:03:a2:
b9:06:6d:f5:25:7a:c6:72:0b:59:40:2b:c1:5d:fb:f4:70:c7:
49:85:07:f6:b5:a2:c5:f2:04:38:6e:8e:a3:e0:93:df:9e:7a:
6b:5a:8a:af:32:98:75:df:a6:70:c6:70:f8:8d:54:a5:06:1d:
ea:94:fe:99:d2:ac:ac:35:8a:3b:cd:1a:4a:db:45:3f:ff:17:
fc:af:4f:dd:e0:59:75:85:df:5d:df:3f:8f:e8:5d:e2:db:54:
0e:40:27:76:33:59:95:d2:6f:41:8c:d7:20:f2:43:2b:ee:79:
61:64:0b:fd:e0:bf:04:b6:ae:10:0c:33:fc:ba:44:da:75:27:
b6:53:64:44:f7:a3:09:3a:d1:9e:b7:a4:27:8c:37:c3:41:80:
ad:73:08:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:31:41 2025 by rpki-client on console.sobornost.net