Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/d4d411-9966-4291-aa59-f90850e74296/1/_Yxsd0eiDHHGuFhmQURGYrs_Tng.roa
File: _Yxsd0eiDHHGuFhmQURGYrs_Tng.roa (raw, json)
Hash identifier: nE0pyzNZgsvFiQ/2XuRBIkiIZVx/tCbJehUAtaFFq7I=
Subject key identifier: FD:8C:6C:77:47:A2:0C:71:C6:B8:58:66:41:44:46:62:BB:3F:4E:78
Certificate issuer: /CN=e2a75ef9036f5c143e57dfafbc92c0255c3159ba
Certificate serial: 01941FFA335110B8F81F1A67066778338416
Authority key identifier: E2:A7:5E:F9:03:6F:5C:14:3E:57:DF:AF:BC:92:C0:25:5C:31:59:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4qde-QNvXBQ-V9-vvJLAJVwxWbo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/d4d411-9966-4291-aa59-f90850e74296/1/_Yxsd0eiDHHGuFhmQURGYrs_Tng.roa
Signing time: Wed 01 Jan 2025 03:47:58 +0000
ROA not before: Wed 01 Jan 2025 03:47:58 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209197
IP address blocks: 185.207.30.0/23 maxlen: 23
185.207.31.0/25 maxlen: 25
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:33:51:10:b8:f8:1f:1a:67:06:67:78:33:84:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2a75ef9036f5c143e57dfafbc92c0255c3159ba
Validity
Not Before: Jan 1 03:47:58 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fd8c6c7747a20c71c6b8586641444662bb3f4e78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:c8:e7:b7:f9:54:2e:d8:ad:21:b4:ed:23:42:
22:12:cb:14:44:6d:8e:28:0b:12:72:9c:18:e3:54:
b2:52:24:3c:cd:3e:6a:a4:0e:e4:31:ae:78:f8:1b:
e1:4b:73:ec:4f:cc:59:e7:07:e1:85:1c:ec:3b:4b:
7a:98:c4:9d:b6:ae:97:f1:91:03:9d:b2:93:50:0d:
d6:8a:9f:aa:69:8e:24:98:cc:7d:38:82:77:ca:3b:
57:18:15:66:08:1e:3c:f0:fa:80:d0:0b:e6:7d:a3:
85:a7:10:8f:e1:30:a1:24:ab:4a:4c:4f:19:b3:cf:
78:af:53:07:86:f3:c9:a4:57:d5:8b:f2:3c:65:e3:
d0:aa:81:1a:5b:b9:f3:58:7f:e4:b2:bf:8b:83:f1:
7e:ba:30:72:dd:8a:9c:40:d2:a4:4a:ea:7e:7d:44:
1e:cd:bb:a3:ea:38:9f:3a:86:33:42:18:2f:34:2e:
16:35:24:76:e8:68:0d:86:0b:f4:44:ce:af:8d:67:
21:13:e3:c3:08:c7:81:07:3c:f1:70:31:02:67:d7:
35:40:b8:7f:4b:15:3e:a9:3f:2c:a6:cd:8d:58:ef:
b6:07:4a:4d:86:dd:1f:9a:96:f6:be:4d:9b:ed:eb:
70:e8:08:66:d4:6e:2c:a9:4d:3f:f9:30:4f:c2:86:
7e:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:8C:6C:77:47:A2:0C:71:C6:B8:58:66:41:44:46:62:BB:3F:4E:78
X509v3 Authority Key Identifier:
keyid:E2:A7:5E:F9:03:6F:5C:14:3E:57:DF:AF:BC:92:C0:25:5C:31:59:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4qde-QNvXBQ-V9-vvJLAJVwxWbo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/d4d411-9966-4291-aa59-f90850e74296/1/_Yxsd0eiDHHGuFhmQURGYrs_Tng.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/d4d411-9966-4291-aa59-f90850e74296/1/4qde-QNvXBQ-V9-vvJLAJVwxWbo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.207.30.0/23
Signature Algorithm: sha256WithRSAEncryption
8e:d9:9e:f2:30:b7:a4:96:8c:75:82:51:54:a8:82:48:74:83:
bd:40:d7:74:a5:0f:27:a6:ac:84:83:eb:a0:94:61:36:cd:fa:
d3:2f:1d:1b:c2:37:9e:7a:11:93:ee:c9:35:ca:d3:dd:69:0c:
d9:b8:43:e0:bd:62:56:bc:90:d0:2a:01:9e:db:be:28:46:8f:
4a:0a:8f:5c:93:74:d4:87:0d:0c:5b:fe:05:47:35:03:ab:ef:
30:46:0d:36:8b:c4:87:fd:cc:83:d0:9b:62:4e:aa:19:e5:93:
63:53:f7:1b:f2:ba:f8:cc:c3:e1:f9:3a:85:2b:b7:69:4c:5a:
83:e8:47:ba:6e:c9:52:1e:73:8d:7d:d5:d5:09:46:45:08:f4:
ba:69:d5:19:78:00:14:60:6d:f0:91:e2:09:49:9e:7b:c3:ca:
27:0e:59:10:f3:67:df:7e:20:88:6b:03:26:ab:28:05:e3:9c:
c7:38:3d:78:16:29:8c:23:e0:dc:b8:f6:04:f1:21:00:2a:aa:
13:6b:e8:13:c8:1f:0e:c2:9b:95:37:71:9c:1f:b8:25:13:bd:
96:43:91:49:a5:be:94:96:9f:fe:bc:11:8a:ff:e0:bb:cd:3f:
21:5b:da:6a:b3:10:64:cf:2d:99:d4:0c:57:b3:49:10:59:51:
d5:78:89:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 03:18:31 2025 by rpki-client