Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/99ae2f-39cc-43f3-941d-51920373353c/1/8K2jldbK1iYNQ1Ra-_Om8e2LCQ4.roa
File: 8K2jldbK1iYNQ1Ra-_Om8e2LCQ4.roa (raw, json)
Hash identifier: 98fTyNouseFGgQWlfvt1DsugmaNe7Ehtwez4hn9fSDU=
Subject key identifier: F0:AD:A3:95:D6:CA:D6:26:0D:43:54:5A:FB:F3:A6:F1:ED:8B:09:0E
Certificate issuer: /CN=89056fa9625b6c87404267c6dc219924ac160045
Certificate serial: 019424B25FE0C67FBAFEFB1199799AD90476
Authority key identifier: 89:05:6F:A9:62:5B:6C:87:40:42:67:C6:DC:21:99:24:AC:16:00:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iQVvqWJbbIdAQmfG3CGZJKwWAEU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/99ae2f-39cc-43f3-941d-51920373353c/1/8K2jldbK1iYNQ1Ra-_Om8e2LCQ4.roa
Signing time: Thu 02 Jan 2025 01:47:37 +0000
ROA not before: Thu 02 Jan 2025 01:47:37 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9009
IP address blocks: 185.126.236.0/24 maxlen: 24
185.213.22.0/24 maxlen: 24
2a11:840:1::/48 maxlen: 48
2a11:840:2::/48 maxlen: 48
2a11:840:4::/48 maxlen: 48
2a11:840:5::/48 maxlen: 48
2a11:840:9::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b2:5f:e0:c6:7f:ba:fe:fb:11:99:79:9a:d9:04:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89056fa9625b6c87404267c6dc219924ac160045
Validity
Not Before: Jan 2 01:47:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f0ada395d6cad6260d43545afbf3a6f1ed8b090e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:28:62:d9:bf:95:6c:37:53:35:42:bf:ee:a9:
a2:d0:ff:b7:1b:fb:a9:4b:2c:4f:d3:63:21:8f:e3:
f7:7b:13:38:c5:94:d4:8d:bf:33:be:0b:17:f1:dd:
a4:a0:52:68:22:7c:77:7b:28:27:26:50:fc:61:ba:
5b:b7:65:99:e5:cd:d5:15:fc:ca:22:59:cb:cd:0d:
db:c1:d4:41:0b:89:79:9f:6a:07:f7:d6:b5:07:44:
c7:ec:cd:81:66:e4:a0:a7:bf:51:72:e8:11:d9:6f:
92:a0:e5:a0:6a:d7:31:74:3e:bb:61:ff:37:7c:ee:
d2:6b:2f:4d:fa:11:00:90:ca:d7:af:83:09:90:d0:
a6:74:8c:1a:7c:8e:6e:0f:3c:18:d9:d1:81:5c:9a:
75:6d:a8:c2:bc:c8:bf:b4:bf:0e:5e:19:c8:e3:71:
77:2d:2b:0e:fc:86:02:3e:bf:28:31:81:6b:05:3b:
ad:cb:04:70:48:72:cc:06:84:d9:ec:2f:32:38:16:
12:7b:de:d7:3f:98:97:d8:1b:b0:38:6c:d8:b6:07:
6c:25:59:04:05:dd:ab:dd:1a:d8:63:7c:e7:ba:f3:
17:ad:a7:d2:ff:1d:84:40:70:f7:64:c5:23:ec:a8:
0d:7f:80:7c:06:82:fa:9a:6f:06:da:6a:ce:4a:b0:
3a:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:AD:A3:95:D6:CA:D6:26:0D:43:54:5A:FB:F3:A6:F1:ED:8B:09:0E
X509v3 Authority Key Identifier:
keyid:89:05:6F:A9:62:5B:6C:87:40:42:67:C6:DC:21:99:24:AC:16:00:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iQVvqWJbbIdAQmfG3CGZJKwWAEU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/99ae2f-39cc-43f3-941d-51920373353c/1/8K2jldbK1iYNQ1Ra-_Om8e2LCQ4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/99ae2f-39cc-43f3-941d-51920373353c/1/iQVvqWJbbIdAQmfG3CGZJKwWAEU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.126.236.0/24
185.213.22.0/24
IPv6:
2a11:840:1::-2a11:840:2:ffff:ffff:ffff:ffff:ffff
2a11:840:4::/47
2a11:840:9::/48
Signature Algorithm: sha256WithRSAEncryption
6e:0a:16:02:44:1d:d8:41:52:06:ce:01:45:19:e7:04:0d:b2:
8e:9c:4c:76:4a:43:e0:bc:e2:a3:0d:8a:0f:5b:1c:4e:bd:e6:
41:c6:cd:1e:d9:6f:13:7f:eb:af:aa:3f:a7:23:d8:b6:0f:46:
48:a6:78:2b:19:a7:3c:a6:40:8e:e7:a7:f7:8e:67:d5:0c:2c:
82:e9:c2:62:03:e8:31:39:1b:7e:14:93:fa:c0:18:d2:90:d2:
63:55:1c:ed:90:83:3c:83:a4:77:c7:f5:57:38:49:97:24:f8:
50:4c:eb:95:3a:bd:77:6c:0a:51:74:7f:77:ba:3a:6a:21:4e:
1b:14:a8:fd:35:46:db:f2:f7:5e:07:e5:e4:b4:3b:06:e1:69:
59:6a:8a:88:e5:8e:5e:07:53:24:bf:17:ac:61:09:47:be:13:
b4:12:0d:e0:be:91:99:d4:1e:f5:ab:b5:36:44:dd:92:d5:4d:
36:8b:12:62:14:a6:ce:f2:79:cc:e6:d6:2c:cf:f2:ce:2d:2c:
fa:64:cf:39:70:f9:63:45:c7:5d:37:13:39:43:17:68:5f:bd:
f6:6e:b8:e8:e8:06:37:0e:8c:e2:25:23:c5:f1:0b:a3:30:40:
4b:01:db:b4:a8:17:c4:85:db:4d:db:65:7d:58:4a:c9:c1:8e:
42:c6:56:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 12:46:40 2025 by rpki-client