Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/ec67db-c7a1-48a6-ab94-60b93595bac9/1/iM7SCQycar1nudDnDJd9cpfWE14.roa
File: iM7SCQycar1nudDnDJd9cpfWE14.roa (raw, json)
Hash identifier: 7fSKbbU/ayenSU9Vz0FeCegebZtfdQUaQXiUz4lT3zo=
Subject key identifier: 88:CE:D2:09:0C:9C:6A:BD:67:B9:D0:E7:0C:97:7D:72:97:D6:13:5E
Certificate issuer: /CN=854c0db0065844d9594dfe8dd8efd77ed1e493f8
Certificate serial: 019424B37FE2F23C7E5AA94CB93ABC3E5D08
Authority key identifier: 85:4C:0D:B0:06:58:44:D9:59:4D:FE:8D:D8:EF:D7:7E:D1:E4:93:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hUwNsAZYRNlZTf6N2O_XftHkk_g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/ec67db-c7a1-48a6-ab94-60b93595bac9/1/iM7SCQycar1nudDnDJd9cpfWE14.roa
Signing time: Thu 02 Jan 2025 01:48:50 +0000
ROA not before: Thu 02 Jan 2025 01:48:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 25091
IP address blocks: 185.247.196.0/22 maxlen: 24
193.135.156.0/24 maxlen: 24
2a0d:cb80::/29 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:7f:e2:f2:3c:7e:5a:a9:4c:b9:3a:bc:3e:5d:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=854c0db0065844d9594dfe8dd8efd77ed1e493f8
Validity
Not Before: Jan 2 01:48:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=88ced2090c9c6abd67b9d0e70c977d7297d6135e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:5e:e7:97:18:14:14:af:f3:1a:b4:99:0b:54:
f1:96:db:13:8b:af:51:2d:2d:2d:91:04:00:42:95:
26:59:87:93:f5:04:d7:df:25:f6:91:55:5b:77:a5:
9c:b4:c1:1c:4a:29:f0:42:05:2d:c7:fc:e9:14:08:
83:6f:5c:91:8f:80:cd:ec:6c:b6:91:d2:5e:8a:c5:
ed:87:e0:fa:30:42:8b:37:0e:0c:59:f4:90:78:94:
03:2d:c2:f3:de:e2:2b:d2:b7:d7:b0:0c:04:83:9d:
44:23:52:ab:60:b3:3e:93:8d:8a:6e:87:2e:1c:1b:
12:0f:43:4d:6a:b8:be:64:25:fb:c0:58:c5:59:ea:
aa:82:35:d1:85:5b:ad:61:b6:81:f7:59:54:98:02:
54:ac:be:36:f9:c2:d8:b3:2d:66:47:67:c3:91:8e:
a4:63:54:cd:8b:9e:f7:67:5d:f3:fe:76:91:c1:18:
c0:f8:eb:50:b8:3a:01:f2:b9:7b:dd:4c:94:9d:80:
f9:b7:a8:13:60:be:84:f3:e2:e6:8d:74:c7:ea:54:
c0:9a:87:52:75:f1:c3:e6:f9:70:39:62:2e:55:c0:
78:1a:af:ba:14:a7:34:68:0d:cf:b5:10:9b:b8:c9:
ad:30:55:3a:70:ff:e6:d7:91:ea:2b:23:f9:4c:a3:
8f:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:CE:D2:09:0C:9C:6A:BD:67:B9:D0:E7:0C:97:7D:72:97:D6:13:5E
X509v3 Authority Key Identifier:
keyid:85:4C:0D:B0:06:58:44:D9:59:4D:FE:8D:D8:EF:D7:7E:D1:E4:93:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hUwNsAZYRNlZTf6N2O_XftHkk_g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/ec67db-c7a1-48a6-ab94-60b93595bac9/1/iM7SCQycar1nudDnDJd9cpfWE14.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/ec67db-c7a1-48a6-ab94-60b93595bac9/1/hUwNsAZYRNlZTf6N2O_XftHkk_g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.247.196.0/22
193.135.156.0/24
IPv6:
2a0d:cb80::/29
Signature Algorithm: sha256WithRSAEncryption
77:2e:0e:05:f8:af:e7:70:7f:51:d0:da:43:c4:f4:a0:94:3c:
bc:03:4f:82:9c:cd:69:ce:08:58:59:d0:d2:6c:7e:e3:25:bf:
67:56:a5:29:12:3a:9f:e4:05:03:36:8f:69:75:3a:e8:ed:7e:
7e:88:b1:f1:7a:e7:42:82:22:4e:18:76:22:2b:ee:ce:9c:a3:
04:34:0a:29:e8:03:ed:68:8e:9a:58:c6:ab:87:43:14:49:af:
52:7e:40:9a:b1:3d:e3:ce:59:93:92:77:85:4c:6b:e8:f5:49:
61:e5:85:2a:d0:18:ec:5a:93:3c:31:d7:88:83:a3:9e:27:ef:
fe:93:e3:33:b6:52:73:ce:22:f5:7e:95:6c:8c:b0:ba:c8:82:
ab:f4:3d:79:f0:d8:fe:05:b7:13:8e:6a:2b:a9:ae:df:9e:c4:
8b:46:4e:e4:eb:65:d1:8f:17:6e:0c:44:b3:c5:6e:e9:b4:36:
df:f9:4a:60:4f:31:f1:93:6c:45:46:9a:3c:1a:4a:66:b4:fe:
1e:a2:db:fc:c0:9f:55:0f:71:b9:b9:56:cc:e8:e2:01:8d:39:
8f:42:f7:02:ed:cb:f0:2c:37:c2:6d:1c:38:f6:7e:88:6a:04:
f5:91:a1:23:75:1e:e1:39:fc:14:7c:94:75:7b:23:9d:86:4c:
3b:13:1e:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 03:17:33 2025 by rpki-client