Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/9PbkvZ4ol2yeRfGaoDftkNRF4EM.roa
File: 9PbkvZ4ol2yeRfGaoDftkNRF4EM.roa (raw, json)
Hash identifier: ZO5449lHjcawIHB7jnV7qvkZUlVwVElkUGzx+T6uypQ=
Subject key identifier: F4:F6:E4:BD:9E:28:97:6C:9E:45:F1:9A:A0:37:ED:90:D4:45:E0:43
Certificate issuer: /CN=7c3d022a240ce71e0a6e1e9aae0112da840cc34b
Certificate serial: 0195B39D107B1D85BCF3DC5E6C37E2046D12
Authority key identifier: 7C:3D:02:2A:24:0C:E7:1E:0A:6E:1E:9A:AE:01:12:DA:84:0C:C3:4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/9PbkvZ4ol2yeRfGaoDftkNRF4EM.roa
Signing time: Thu 20 Mar 2025 12:52:49 +0000
ROA not before: Thu 20 Mar 2025 12:52:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 203916
IP address blocks: 185.135.47.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:b3:9d:10:7b:1d:85:bc:f3:dc:5e:6c:37:e2:04:6d:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c3d022a240ce71e0a6e1e9aae0112da840cc34b
Validity
Not Before: Mar 20 12:52:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f4f6e4bd9e28976c9e45f19aa037ed90d445e043
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:f7:46:67:2e:1e:5e:2c:7a:bc:ae:f6:cc:4b:
14:f0:c3:bf:e1:a5:ef:6b:50:8f:2c:e8:38:8b:4f:
6a:8e:96:ee:d8:1a:ae:ca:29:a0:fe:ed:75:dd:f2:
a5:67:32:df:9a:6f:d7:bc:9f:b8:fa:9d:ea:30:f5:
87:90:33:79:64:6c:90:28:df:95:d7:53:6c:82:35:
68:ba:25:3a:38:64:e0:e7:71:d8:d2:90:2b:b6:86:
2c:29:70:ed:08:7e:3e:8d:45:a5:78:2c:d1:fa:61:
40:30:e0:4a:48:b7:c8:65:09:25:c4:ca:9e:60:c1:
44:a7:d7:07:17:71:1d:5b:d7:5b:f1:44:e7:1d:86:
8a:b9:c2:e0:d4:c4:78:32:6c:be:8f:10:53:cf:25:
cf:16:49:5e:00:52:31:d7:d5:ba:58:3b:0a:85:bd:
c9:c5:a0:2e:82:56:04:0c:8e:db:85:87:44:2b:63:
2b:37:87:c6:d4:c0:ea:25:4b:91:a1:7a:2b:13:3a:
19:a8:60:ac:bd:03:47:92:c9:c2:a8:29:39:e2:e1:
9b:cc:60:10:72:fd:e7:19:e5:45:44:0a:df:58:79:
f8:28:13:da:4b:74:cb:94:5f:0a:c9:2f:d6:c4:a0:
48:7f:7a:22:cc:bd:65:37:47:17:ae:2a:35:c6:7e:
93:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:F6:E4:BD:9E:28:97:6C:9E:45:F1:9A:A0:37:ED:90:D4:45:E0:43
X509v3 Authority Key Identifier:
keyid:7C:3D:02:2A:24:0C:E7:1E:0A:6E:1E:9A:AE:01:12:DA:84:0C:C3:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/9PbkvZ4ol2yeRfGaoDftkNRF4EM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.135.47.0/24
Signature Algorithm: sha256WithRSAEncryption
87:93:5c:44:ac:75:5b:e9:77:0e:56:ce:c1:7e:98:2a:15:80:
b7:f1:d2:78:63:fb:54:3d:ca:9e:db:14:ac:2c:13:2b:d8:87:
d1:fa:8c:ac:d1:67:75:26:ec:45:7b:c4:f7:a7:d1:8e:24:50:
a8:99:0d:03:97:80:80:f0:1a:c0:50:f0:0a:cb:6c:b6:3b:ce:
40:e6:1a:db:e3:3f:4a:2f:a6:31:0c:b0:29:cd:ea:aa:72:cf:
98:d7:ca:73:76:97:c5:65:63:4b:35:a7:4a:e3:a7:de:ea:8b:
19:42:ef:92:6d:5c:e0:99:de:0c:c4:03:39:88:da:58:a9:0e:
aa:55:14:3d:53:9e:6b:f0:ed:25:00:40:cc:97:a6:58:c4:31:
e2:df:7c:a0:ef:c4:d3:d6:f9:aa:cc:b2:e2:34:e6:9e:b0:e1:
0c:3d:35:7c:57:f3:a5:e2:3f:d1:70:dd:3b:f7:71:ab:93:15:
7e:83:66:3b:72:12:b2:9a:41:43:24:dc:5e:58:22:f2:4d:81:
6b:e1:8c:54:18:a3:2d:39:dd:15:42:f9:a4:d5:80:29:32:32:
2c:cd:4f:59:22:59:63:59:9d:d8:69:55:76:96:55:77:23:91:
f1:bb:cb:f4:e4:b8:77:17:41:5e:af:23:46:5a:7f:7e:6a:e4:
5a:00:1a:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:11 2025 by rpki-client on console.sobornost.net