Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/5ddee9-c1c4-4b57-b6b8-d49916b5f2b4/1/ECy4hcsZKRfHoRJrX40zL9VgZlM.roa
File: ECy4hcsZKRfHoRJrX40zL9VgZlM.roa (raw, json)
Hash identifier: TIqTReRQQT5DAw+Fnvsbl2Gazl66yiKwPvTFj1mKh8s=
Subject key identifier: 10:2C:B8:85:CB:19:29:17:C7:A1:12:6B:5F:8D:33:2F:D5:60:66:53
Certificate issuer: /CN=3b0bf18d6bbdb33da82fe61a28624ba72e235040
Certificate serial: 0194258F4DDF0A8F9872EB6A55857EB7469C
Authority key identifier: 3B:0B:F1:8D:6B:BD:B3:3D:A8:2F:E6:1A:28:62:4B:A7:2E:23:50:40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OwvxjWu9sz2oL-YaKGJLpy4jUEA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/5ddee9-c1c4-4b57-b6b8-d49916b5f2b4/1/ECy4hcsZKRfHoRJrX40zL9VgZlM.roa
Signing time: Thu 02 Jan 2025 05:48:56 +0000
ROA not before: Thu 02 Jan 2025 05:48:56 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 63150
IP address blocks: 185.241.40.0/24 maxlen: 24
185.241.41.0/24 maxlen: 24
185.241.42.0/24 maxlen: 24
185.241.43.0/24 maxlen: 24
2a14:4900:2000::/36 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:4d:df:0a:8f:98:72:eb:6a:55:85:7e:b7:46:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b0bf18d6bbdb33da82fe61a28624ba72e235040
Validity
Not Before: Jan 2 05:48:56 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=102cb885cb192917c7a1126b5f8d332fd5606653
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:94:4a:32:f9:55:30:b2:87:1c:15:44:a6:cf:
6e:90:4e:67:50:56:74:b4:b4:08:29:3c:e5:07:db:
44:97:79:b8:6f:a7:88:c3:d3:ad:a6:96:df:95:83:
be:0a:08:4e:04:0a:f1:44:fb:48:11:ac:9e:3f:f0:
ae:8b:30:08:14:e9:9c:e3:0a:d3:6a:36:ad:7c:32:
21:b2:78:ef:83:c7:fe:72:4b:80:b8:2b:bf:b6:97:
9b:39:d6:32:83:82:7b:72:02:21:5f:54:8a:ab:dc:
a7:81:15:f4:63:81:b7:fd:ff:33:69:94:55:aa:d0:
48:28:71:61:db:fe:1e:b1:8f:51:4c:f9:8d:d3:dc:
36:be:07:c8:ae:27:d2:3a:26:6e:bb:07:f9:38:46:
db:ea:11:f5:23:65:fc:a0:5c:17:a3:63:28:48:9c:
01:94:65:e1:c2:59:4d:cf:41:38:60:7b:fe:1e:f8:
75:73:13:97:34:e5:d9:0c:db:53:35:53:6f:5a:b3:
92:92:64:42:b7:b8:9b:7a:81:4e:3c:d7:20:a4:52:
ba:fc:d4:a0:db:5b:9f:72:70:a5:61:9a:90:80:be:
6e:34:16:d0:14:4b:b0:f1:b0:73:61:98:7c:ff:8a:
d3:28:2c:05:7e:72:29:c2:e6:b2:f2:cf:e0:25:fa:
6e:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:2C:B8:85:CB:19:29:17:C7:A1:12:6B:5F:8D:33:2F:D5:60:66:53
X509v3 Authority Key Identifier:
keyid:3B:0B:F1:8D:6B:BD:B3:3D:A8:2F:E6:1A:28:62:4B:A7:2E:23:50:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OwvxjWu9sz2oL-YaKGJLpy4jUEA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/5ddee9-c1c4-4b57-b6b8-d49916b5f2b4/1/ECy4hcsZKRfHoRJrX40zL9VgZlM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/5ddee9-c1c4-4b57-b6b8-d49916b5f2b4/1/OwvxjWu9sz2oL-YaKGJLpy4jUEA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.241.40.0/22
IPv6:
2a14:4900:2000::/36
Signature Algorithm: sha256WithRSAEncryption
eb:97:3f:47:f1:97:76:0e:53:d0:8c:3d:72:b2:ba:6a:31:85:
23:af:52:26:cb:a7:01:ff:9f:98:5f:27:38:3f:a8:7b:3c:25:
7f:13:0d:5a:58:fe:b2:a3:f2:df:8b:2b:80:19:c8:21:e0:56:
8f:00:6a:7f:3e:95:e7:4b:98:ac:f2:da:f7:d8:dc:c8:8d:f2:
72:a6:5a:ac:f4:3f:ae:f2:7c:ec:77:3a:5b:0f:c0:43:31:1f:
8c:60:41:c3:9c:1b:f8:a8:a7:7e:48:4f:76:88:74:9e:5f:a4:
c9:c5:c7:fa:77:f3:98:0f:aa:e7:1c:04:e0:1c:05:d2:09:32:
a1:12:b4:7e:5c:f8:79:c4:0b:d0:92:7a:1e:08:ec:57:68:be:
fb:8e:02:2e:38:18:09:50:c6:41:44:da:69:f0:eb:51:00:c1:
d8:81:40:88:5a:d1:4f:cc:8e:b5:3a:57:4f:e9:76:96:b2:c8:
88:71:f9:10:e3:28:83:78:be:76:49:39:c1:86:c2:ef:1c:52:
e8:42:3e:65:e9:29:92:78:bd:73:05:60:c0:f2:34:ad:4f:2b:
89:9b:64:e6:c5:18:e2:bb:55:ba:f8:46:66:6a:4a:20:00:a2:
ef:5e:75:a3:f1:fb:e2:07:21:56:49:8d:84:a2:6a:8c:4e:41:
2a:76:65:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 18:36:41 2025 by rpki-client