Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/fc96a4-36d1-4c3d-850b-3cd417aee9ce/1/e0MNfuXlfvKgRvC9CopzDlR6QJs.roa
File: e0MNfuXlfvKgRvC9CopzDlR6QJs.roa (raw, json)
Hash identifier: EP4IKQWQkDtxiqLTMMk/RcDKJIiLy3Rh0R6YqC1qh6A=
Subject key identifier: 7B:43:0D:7E:E5:E5:7E:F2:A0:46:F0:BD:0A:8A:73:0E:54:7A:40:9B
Certificate issuer: /CN=580dddb511603e41c2b7abba3d249d5ef5ed4d11
Certificate serial: 01943C29C95591B43C1C4004117E069912F8
Authority key identifier: 58:0D:DD:B5:11:60:3E:41:C2:B7:AB:BA:3D:24:9D:5E:F5:ED:4D:11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WA3dtRFgPkHCt6u6PSSdXvXtTRE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/fc96a4-36d1-4c3d-850b-3cd417aee9ce/1/e0MNfuXlfvKgRvC9CopzDlR6QJs.roa
Signing time: Mon 06 Jan 2025 15:09:19 +0000
ROA not before: Mon 06 Jan 2025 15:09:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 201119
IP address blocks: 185.195.144.0/24 maxlen: 24
185.195.145.0/24 maxlen: 24
185.195.146.0/24 maxlen: 24
185.195.147.0/24 maxlen: 24
2a0a:5bc0::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:3c:29:c9:55:91:b4:3c:1c:40:04:11:7e:06:99:12:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=580dddb511603e41c2b7abba3d249d5ef5ed4d11
Validity
Not Before: Jan 6 15:09:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7b430d7ee5e57ef2a046f0bd0a8a730e547a409b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:08:25:08:d4:8f:cd:3f:1f:74:fb:4f:a6:32:
03:b3:39:44:c6:7c:c6:1c:50:ce:28:f0:1c:a3:07:
ff:2d:5a:e0:28:05:c4:05:d8:5e:b4:d8:50:be:67:
29:e9:c3:58:b9:d6:b1:19:4c:19:cd:08:dc:26:5c:
70:a4:f0:0a:05:89:a4:da:12:cc:90:76:13:f7:c4:
2d:50:96:a1:c3:67:3e:69:e8:d5:c3:4e:15:17:6d:
6d:32:83:ec:b6:4b:74:fe:39:75:50:b9:ab:5a:1e:
7c:84:e6:e1:3c:e5:84:1d:5c:58:2c:12:4e:48:c5:
72:3f:b5:57:62:72:81:97:3d:89:e7:5f:89:9d:84:
a0:14:fd:a5:d0:1e:60:6b:4b:06:aa:d2:a3:0c:0a:
4a:01:51:65:39:2d:82:0a:49:fe:e0:92:c6:73:0e:
14:3b:cf:f5:e2:07:9a:ab:39:e5:a6:d3:76:1d:9e:
69:13:3c:fd:bf:3d:21:32:82:74:a9:40:3b:a9:e8:
8c:be:ab:84:42:94:4c:d9:dd:0b:38:dc:78:26:41:
4a:3b:37:f2:71:0a:14:2f:0d:bd:dd:ce:fa:02:9b:
30:ff:46:73:6b:2b:f8:41:98:8b:81:e8:9d:b2:bd:
d0:66:62:86:89:bf:72:6d:3c:38:19:2f:81:4c:54:
4c:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:43:0D:7E:E5:E5:7E:F2:A0:46:F0:BD:0A:8A:73:0E:54:7A:40:9B
X509v3 Authority Key Identifier:
keyid:58:0D:DD:B5:11:60:3E:41:C2:B7:AB:BA:3D:24:9D:5E:F5:ED:4D:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WA3dtRFgPkHCt6u6PSSdXvXtTRE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/fc96a4-36d1-4c3d-850b-3cd417aee9ce/1/e0MNfuXlfvKgRvC9CopzDlR6QJs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/fc96a4-36d1-4c3d-850b-3cd417aee9ce/1/WA3dtRFgPkHCt6u6PSSdXvXtTRE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.195.144.0/22
IPv6:
2a0a:5bc0::/48
Signature Algorithm: sha256WithRSAEncryption
5d:0b:bb:9c:4c:f1:38:62:96:da:65:5c:58:77:14:99:63:cb:
ea:d4:12:8b:c3:41:f1:d3:77:23:62:b5:b9:8a:c6:23:3c:3f:
07:a5:53:a5:b4:2a:f5:b3:ce:ef:03:ca:1f:fc:83:e2:85:11:
4f:71:13:e3:5c:b6:bb:18:8f:8f:58:66:73:7a:35:d1:77:84:
89:00:9d:c9:44:da:91:73:d6:8b:9a:be:37:ec:d0:09:1f:c7:
ef:a4:70:75:8a:d0:b6:e7:f1:19:7a:72:8a:39:73:77:90:da:
3e:1b:a9:9a:a9:bf:0f:87:53:49:fd:91:df:32:2d:f2:7d:fa:
5f:c1:c1:b0:06:d9:ab:8b:07:05:15:a9:79:64:74:ba:63:80:
f2:8a:7f:8a:db:b9:f8:a8:10:98:0a:85:e6:16:93:5d:e4:a7:
fb:9a:5e:d1:ff:4f:cd:de:dd:5f:42:45:a7:c4:c8:d8:98:fb:
5d:79:60:7d:cf:65:02:af:a1:0e:ce:63:6e:99:09:62:e1:3e:
18:d2:04:7a:c6:65:14:b5:a9:26:e8:14:5a:36:7c:90:b5:19:
65:5e:81:d6:f7:bb:a7:53:81:9a:e6:94:0f:8e:61:af:5c:ec:
cf:54:05:1c:5d:83:51:ab:e4:b7:36:2f:ea:00:2a:18:37:1c:
a3:8c:7f:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 00:47:55 2025 by rpki-client