Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/efeccb-d35c-49a2-811a-c0b38212a65b/1/dlNHBBHMvG116w1b04PQ4H_Vdqc.roa
File: dlNHBBHMvG116w1b04PQ4H_Vdqc.roa (raw, json)
Hash identifier: DQaOzmiG1Z13BnaGiggddRnCs/Nor6dSR6DNK3CnaCM=
Subject key identifier: 76:53:47:04:11:CC:BC:6D:75:EB:0D:5B:D3:83:D0:E0:7F:D5:76:A7
Certificate issuer: /CN=7dd653d9d32c295da5b736a4aabe304e9fe1394f
Certificate serial: 7FAD19
Authority key identifier: 7D:D6:53:D9:D3:2C:29:5D:A5:B7:36:A4:AA:BE:30:4E:9F:E1:39:4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fdZT2dMsKV2ltzakqr4wTp_hOU8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/efeccb-d35c-49a2-811a-c0b38212a65b/1/dlNHBBHMvG116w1b04PQ4H_Vdqc.roa
Signing time: Mon 14 Feb 2022 14:57:26 +0000
ROA not before: Mon 14 Feb 2022 14:57:26 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 200845
IP address blocks: 185.249.210.0/24 maxlen: 24
185.249.209.0/24 maxlen: 24
185.249.208.0/22 maxlen: 24
185.249.211.0/24 maxlen: 24
185.249.208.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8367385 (0x7fad19)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7dd653d9d32c295da5b736a4aabe304e9fe1394f
Validity
Not Before: Feb 14 14:57:26 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7653470411ccbc6d75eb0d5bd383d0e07fd576a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:c1:bf:32:73:68:c6:77:09:4c:f8:38:da:90:
6c:0d:ea:86:ba:c3:75:b1:33:0c:3f:ed:33:10:3b:
35:04:38:2c:a3:95:19:17:ae:16:a2:31:45:57:02:
89:2c:a6:c9:6f:13:a1:be:48:56:19:a8:8d:d9:a9:
77:e5:c8:02:8a:e6:bb:2b:e8:48:e5:0c:d1:c5:95:
49:a3:b0:2a:22:b8:04:b3:4e:bc:73:b6:e7:b6:e7:
b7:63:11:2c:d9:dc:60:90:a6:09:73:a5:29:a9:8e:
14:f6:84:a2:89:e2:a2:60:11:29:59:16:6b:32:3d:
a2:a7:58:28:38:24:bc:53:d1:1f:55:2e:18:f9:ad:
4f:b0:74:e1:a3:30:e4:82:2d:7f:13:ae:79:a3:0c:
99:22:76:35:f1:d3:50:10:0c:19:05:ee:28:52:47:
d9:0f:cc:25:a2:37:1e:fd:e9:4e:58:01:bb:3d:4d:
1b:9f:06:2e:eb:d8:be:97:9f:fb:95:6c:52:3d:3d:
da:8f:58:0c:1d:72:dd:30:86:5f:b4:14:87:d4:bf:
f7:8c:8d:b5:e3:a9:62:d8:8c:28:61:d8:59:66:10:
e2:03:32:32:ea:73:ce:dc:9b:7a:21:07:53:d1:58:
1a:01:d2:1b:11:70:56:b5:0d:b9:fc:66:91:6a:21:
43:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:53:47:04:11:CC:BC:6D:75:EB:0D:5B:D3:83:D0:E0:7F:D5:76:A7
X509v3 Authority Key Identifier:
keyid:7D:D6:53:D9:D3:2C:29:5D:A5:B7:36:A4:AA:BE:30:4E:9F:E1:39:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fdZT2dMsKV2ltzakqr4wTp_hOU8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/efeccb-d35c-49a2-811a-c0b38212a65b/1/dlNHBBHMvG116w1b04PQ4H_Vdqc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/efeccb-d35c-49a2-811a-c0b38212a65b/1/fdZT2dMsKV2ltzakqr4wTp_hOU8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.249.208.0/22
Signature Algorithm: sha256WithRSAEncryption
b1:0f:da:04:26:46:dc:9f:13:4f:48:d9:21:98:2f:41:c9:e8:
8f:3e:bd:f9:cb:1a:2d:a4:3c:29:2d:c2:09:46:36:6e:6f:6d:
af:c9:b1:f0:b0:23:aa:b4:e9:a0:a0:54:a1:ee:e1:8d:0e:15:
cd:f3:cd:bd:61:24:c1:32:1a:ed:22:d3:02:55:bd:2f:05:fa:
0c:69:06:73:ee:fb:5c:48:46:d9:9c:51:c6:56:33:2c:98:c0:
d6:18:12:89:36:b8:a6:c6:a7:cd:0a:48:51:22:60:ed:de:58:
6a:39:da:b3:4a:b2:bc:cd:b8:78:b1:f6:05:06:85:23:4c:54:
13:ee:d6:81:e9:17:f3:32:79:1a:f7:80:61:90:b4:16:38:64:
22:19:e3:22:a3:6f:9a:d9:63:d2:8b:b4:da:8e:7c:d3:ed:58:
76:76:a2:7f:96:28:fd:57:3a:27:bd:08:b7:91:bf:c7:f2:1d:
9f:f2:ad:d7:bc:61:ba:17:12:da:5d:a1:1b:e0:7c:42:9a:23:
59:ae:56:bf:82:ac:2c:3e:89:46:78:6c:18:69:55:20:5f:bc:
7a:0f:de:38:4e:70:3e:c1:8d:eb:8c:33:84:a4:dc:14:e1:b6:
28:a4:c4:99:5f:a4:e1:38:ed:06:ea:af:7e:d3:b4:98:e2:07:
c0:37:4e:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:52:31 2025 by rpki-client