Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/70f8bb-9a37-4f3e-a581-3ea8194fb446/1/f516EGaO9yNnpKCtINgDdW37z6Y.roa
File: f516EGaO9yNnpKCtINgDdW37z6Y.roa (raw, json)
Hash identifier: ED6BLlxCP1AdH6cMJc87FGQDnI7Gyi9C1L6MTbKzt54=
Subject key identifier: 7F:9D:7A:10:66:8E:F7:23:67:A4:A0:AD:20:D8:03:75:6D:FB:CF:A6
Certificate issuer: /CN=74f1059c273c50edcf3dcedfc5800152ec91dba2
Certificate serial: 0195C1D7F21B7DEB0770B95EE972B31062CD
Authority key identifier: 74:F1:05:9C:27:3C:50:ED:CF:3D:CE:DF:C5:80:01:52:EC:91:DB:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dPEFnCc8UO3PPc7fxYABUuyR26I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/70f8bb-9a37-4f3e-a581-3ea8194fb446/1/f516EGaO9yNnpKCtINgDdW37z6Y.roa
Signing time: Sun 23 Mar 2025 07:11:49 +0000
ROA not before: Sun 23 Mar 2025 07:11:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202395
IP address blocks: 185.254.80.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:c1:d7:f2:1b:7d:eb:07:70:b9:5e:e9:72:b3:10:62:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74f1059c273c50edcf3dcedfc5800152ec91dba2
Validity
Not Before: Mar 23 07:11:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7f9d7a10668ef72367a4a0ad20d803756dfbcfa6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:53:b9:45:61:05:e4:bc:16:3f:09:89:90:90:
48:fe:2f:cc:72:90:d0:a0:bc:b8:cf:f2:ca:0e:26:
e7:76:3d:58:32:06:32:8c:b5:66:39:d9:62:44:d2:
5d:c6:be:36:8b:59:6d:fc:61:56:c4:48:4f:54:e5:
ed:7e:54:96:c8:b0:c9:9d:20:d3:25:82:66:e4:cd:
23:31:8a:1d:66:36:55:2c:9f:3c:ee:1d:98:b7:a8:
2a:a0:d6:49:4f:09:3b:90:26:cf:62:93:a6:7d:05:
e7:99:8f:f0:14:ff:69:e9:2a:c0:ed:23:dd:0e:67:
d8:ee:b1:d1:4e:08:43:3e:19:9f:b0:01:af:db:2f:
b0:11:7e:4e:40:a2:2e:de:ec:6f:03:c1:a2:7e:aa:
38:86:4f:fc:18:0d:d2:72:e2:d2:96:25:70:a7:7d:
b5:05:b5:c8:ef:51:a7:59:c9:82:04:3c:76:96:ef:
45:39:c2:98:94:bf:8a:b3:20:3c:9e:42:23:43:29:
78:47:af:53:68:64:5f:4f:e5:04:0f:a6:64:4d:75:
88:6d:9f:4c:69:67:c7:66:db:e1:49:22:80:7b:77:
78:16:f9:41:01:47:e2:6f:96:91:fe:65:40:8f:03:
07:ad:da:b5:a4:5b:90:27:62:be:0f:82:d9:cb:c2:
8e:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:9D:7A:10:66:8E:F7:23:67:A4:A0:AD:20:D8:03:75:6D:FB:CF:A6
X509v3 Authority Key Identifier:
keyid:74:F1:05:9C:27:3C:50:ED:CF:3D:CE:DF:C5:80:01:52:EC:91:DB:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dPEFnCc8UO3PPc7fxYABUuyR26I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/70f8bb-9a37-4f3e-a581-3ea8194fb446/1/f516EGaO9yNnpKCtINgDdW37z6Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/70f8bb-9a37-4f3e-a581-3ea8194fb446/1/dPEFnCc8UO3PPc7fxYABUuyR26I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.254.80.0/22
Signature Algorithm: sha256WithRSAEncryption
9f:a4:f2:3a:e6:bb:1d:ce:d7:c1:00:7d:32:37:02:98:92:af:
62:99:a8:bc:14:b4:6d:7e:08:f9:4d:71:70:40:84:44:1b:c4:
fb:66:b0:b1:8e:33:73:85:a7:d6:6c:1a:81:93:cc:7f:dd:59:
3e:b6:6c:ba:d9:c4:e0:ce:3e:28:45:76:68:69:b2:ee:20:38:
4d:a1:1a:f6:87:cf:d6:50:7b:c9:68:b8:aa:34:44:cb:25:7a:
b9:38:5c:f1:26:0c:fa:b7:63:69:6e:74:15:bf:54:67:39:86:
38:82:4c:24:14:27:bf:35:d3:06:f8:14:da:26:54:8e:c2:be:
3b:bf:93:6f:59:78:98:70:bb:c5:df:bf:6e:77:b9:ca:5e:07:
c9:ca:1a:f6:cb:ac:36:7b:64:1c:85:85:87:22:88:38:1b:44:
00:1b:e0:0b:9b:e3:3c:6f:ab:56:56:38:86:4c:a0:f7:8b:5a:
d6:45:3d:32:10:eb:05:31:68:7f:ca:ff:a2:58:38:4b:50:f3:
00:36:7b:c8:2f:0c:42:ff:cb:02:25:b6:2d:8f:0a:87:93:27:
f3:bf:8b:f1:67:ac:f0:f0:65:0f:7c:d4:b8:68:29:ee:47:ac:
42:83:c7:6e:3d:fb:00:ce:3b:b7:5f:78:29:44:6b:54:15:ea:
99:11:41:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:33:08 2025 by rpki-client on console.sobornost.net