Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/d4a89c-54b2-445b-bb7c-609a48b2b14d/1/u50dx3Lab1g7VZDVh4T56LPcn_0.roa
File: u50dx3Lab1g7VZDVh4T56LPcn_0.roa (raw, json)
Hash identifier: jDquIHZmp2NFyWqEfhpXVj8qaJ2TUhubdI3kfdM2qms=
Subject key identifier: BB:9D:1D:C7:72:DA:6F:58:3B:55:90:D5:87:84:F9:E8:B3:DC:9F:FD
Certificate issuer: /CN=387d6df7eb7542e0333aeedd14adff8f51f8cbd8
Certificate serial: 019425FD62299C10EA9A7E9CD242B4D93F33
Authority key identifier: 38:7D:6D:F7:EB:75:42:E0:33:3A:EE:DD:14:AD:FF:8F:51:F8:CB:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OH1t9-t1QuAzOu7dFK3_j1H4y9g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/d4a89c-54b2-445b-bb7c-609a48b2b14d/1/u50dx3Lab1g7VZDVh4T56LPcn_0.roa
Signing time: Thu 02 Jan 2025 07:49:10 +0000
ROA not before: Thu 02 Jan 2025 07:49:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 216097
IP address blocks: 185.188.18.0/24 maxlen: 24
2a0a:d6c0:185::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:62:29:9c:10:ea:9a:7e:9c:d2:42:b4:d9:3f:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=387d6df7eb7542e0333aeedd14adff8f51f8cbd8
Validity
Not Before: Jan 2 07:49:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bb9d1dc772da6f583b5590d58784f9e8b3dc9ffd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:42:16:83:6e:50:ae:f8:a6:21:1e:3d:5e:8d:
ee:1b:75:91:d8:70:1e:16:3f:0a:bf:b6:04:44:58:
dd:eb:0b:dd:b1:7f:34:78:15:4f:fc:ee:03:d7:19:
b5:1f:42:b8:07:5e:cd:13:98:aa:ff:c7:34:26:3a:
e8:0f:88:49:37:0e:cd:3c:0d:d6:44:f1:94:07:df:
90:74:be:7f:31:c8:16:f5:d2:be:48:6a:3e:21:49:
1b:8b:cb:c0:0e:b9:c9:57:1b:aa:ae:98:a8:7e:f5:
23:0a:74:b1:19:10:c3:fa:a7:80:55:0e:23:65:de:
fc:5c:f8:9a:d0:dd:6f:29:b1:40:30:8a:1e:b3:58:
ee:b5:6f:ff:54:89:bd:90:ed:70:8a:9b:c3:39:30:
5d:e7:f0:79:24:f9:53:ef:3c:37:59:a0:c1:b0:ee:
06:03:c5:e6:5f:cd:ae:e3:32:39:61:3c:7f:fb:03:
80:83:70:ea:ad:ed:a1:99:94:e1:80:3d:e8:b3:b3:
46:62:8b:43:bd:22:72:21:af:bf:59:92:f4:c3:9c:
c7:67:19:ad:93:30:67:fb:d7:21:71:f5:fe:58:ca:
d8:2c:58:e1:ce:e9:08:90:fd:4c:82:ac:26:e6:c2:
07:ad:f7:0e:27:d9:f5:df:c2:d7:29:3d:71:47:44:
a2:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:9D:1D:C7:72:DA:6F:58:3B:55:90:D5:87:84:F9:E8:B3:DC:9F:FD
X509v3 Authority Key Identifier:
keyid:38:7D:6D:F7:EB:75:42:E0:33:3A:EE:DD:14:AD:FF:8F:51:F8:CB:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OH1t9-t1QuAzOu7dFK3_j1H4y9g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/d4a89c-54b2-445b-bb7c-609a48b2b14d/1/u50dx3Lab1g7VZDVh4T56LPcn_0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/d4a89c-54b2-445b-bb7c-609a48b2b14d/1/OH1t9-t1QuAzOu7dFK3_j1H4y9g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.188.18.0/24
IPv6:
2a0a:d6c0:185::/48
Signature Algorithm: sha256WithRSAEncryption
71:5d:59:db:32:13:c9:da:e6:8e:6e:ed:4a:ec:6c:fb:03:a4:
1d:e7:45:d2:6d:df:69:1a:49:41:68:67:ee:1e:70:25:40:5a:
3d:cd:c9:2e:f1:74:59:84:4a:50:56:cd:42:e3:17:c5:84:44:
e2:93:f5:3a:d0:56:2a:72:6d:0d:8c:c1:ba:59:c6:bb:37:47:
81:9d:dc:4f:30:78:fc:49:23:b0:24:dd:26:fd:80:d0:0e:55:
3c:fe:f9:5c:70:2b:2d:19:40:75:24:12:2b:21:26:5c:9e:6e:
51:bf:3e:46:03:ff:69:fa:a7:03:5f:27:c9:f5:bd:36:17:38:
dc:95:2a:92:4a:f7:59:97:cf:3b:6e:b3:06:5f:5b:95:ef:04:
ab:92:31:b3:68:be:35:8e:ee:41:af:a7:3d:e4:0c:f5:a7:54:
61:9a:e0:93:2f:54:89:56:2d:18:ca:3e:25:56:67:7e:98:61:
05:12:ee:59:6f:50:7d:52:80:f5:47:5b:9a:30:d3:90:49:63:
a7:cd:54:69:cf:ca:67:aa:0b:9d:77:60:4f:ed:46:d1:a4:0b:
12:38:cd:d2:f2:9f:c2:66:fd:85:19:5d:9d:a2:25:81:73:1a:
04:67:6b:88:9c:12:51:2b:d9:38:bf:b0:e7:0c:1d:c4:eb:a3:
ff:9f:d9:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 22:02:24 2025 by rpki-client