Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/9c130b-e15e-4b6d-b5fb-719b0497e7cc/1/7JWKgvAHAa8B28vXNz3LbsvM1_0.roa
File: 7JWKgvAHAa8B28vXNz3LbsvM1_0.roa (raw, json)
Hash identifier: aiThNQ8MveF/powu4k+TgcUEIjwVdj4V/Vhk6YBFQDA=
Subject key identifier: EC:95:8A:82:F0:07:01:AF:01:DB:CB:D7:37:3D:CB:6E:CB:CC:D7:FD
Certificate issuer: /CN=15ab3e72f7340da856e93d62ee8d023f1d7c8ee7
Certificate serial: 019424B3FE64772FE2B82EAEE971C9C79FE1
Authority key identifier: 15:AB:3E:72:F7:34:0D:A8:56:E9:3D:62:EE:8D:02:3F:1D:7C:8E:E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fas-cvc0DahW6T1i7o0CPx18juc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/9c130b-e15e-4b6d-b5fb-719b0497e7cc/1/7JWKgvAHAa8B28vXNz3LbsvM1_0.roa
Signing time: Thu 02 Jan 2025 01:49:23 +0000
ROA not before: Thu 02 Jan 2025 01:49:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209549
IP address blocks: 185.149.36.0/22 maxlen: 22
185.149.36.0/24 maxlen: 24
185.149.37.0/24 maxlen: 24
185.149.38.0/24 maxlen: 24
2a0d:b780::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:fe:64:77:2f:e2:b8:2e:ae:e9:71:c9:c7:9f:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15ab3e72f7340da856e93d62ee8d023f1d7c8ee7
Validity
Not Before: Jan 2 01:49:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ec958a82f00701af01dbcbd7373dcb6ecbccd7fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:6e:23:52:4a:1a:08:cf:32:61:72:57:14:49:
55:ab:fe:bc:cd:9d:d3:66:4c:81:04:44:aa:89:09:
67:46:2c:9b:65:a9:a1:da:f1:46:57:33:4e:f8:09:
12:7d:a0:89:ca:99:1c:5f:95:38:c3:5a:f9:e7:e5:
e1:8b:bf:7d:c0:f2:1a:01:da:26:3d:7e:34:d1:52:
dc:15:9a:68:82:e2:7b:05:4e:83:60:9c:a2:bf:15:
fc:b3:75:9f:74:0e:26:57:71:b4:c2:59:da:67:9b:
b6:4e:52:fc:ef:91:08:ef:0d:68:57:93:09:d1:9b:
7d:ab:05:64:fd:9d:c3:4d:92:bd:c8:33:97:f6:99:
54:89:6e:6b:37:2f:b4:e2:1d:06:be:f6:61:73:e4:
f8:80:c4:5d:59:42:c9:a0:d0:5e:c9:a0:6b:3d:f1:
d8:5c:10:b5:42:57:29:de:11:84:ee:b4:a4:6f:29:
12:51:63:62:d6:91:55:26:a3:43:93:de:d2:a3:fb:
68:15:80:e9:fd:5f:db:8b:59:e5:8d:ff:e4:60:b6:
bc:a6:2f:e0:42:ee:41:21:7f:24:29:15:21:b1:e9:
ac:cf:07:ab:9e:d4:5b:c6:6f:2c:a0:71:88:c8:bd:
3b:58:07:cc:a4:75:a3:a8:2e:2d:e2:de:38:65:87:
e3:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:95:8A:82:F0:07:01:AF:01:DB:CB:D7:37:3D:CB:6E:CB:CC:D7:FD
X509v3 Authority Key Identifier:
keyid:15:AB:3E:72:F7:34:0D:A8:56:E9:3D:62:EE:8D:02:3F:1D:7C:8E:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fas-cvc0DahW6T1i7o0CPx18juc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/9c130b-e15e-4b6d-b5fb-719b0497e7cc/1/7JWKgvAHAa8B28vXNz3LbsvM1_0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/9c130b-e15e-4b6d-b5fb-719b0497e7cc/1/Fas-cvc0DahW6T1i7o0CPx18juc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.149.36.0/22
IPv6:
2a0d:b780::/29
Signature Algorithm: sha256WithRSAEncryption
59:fc:a5:f8:2e:7e:a4:6b:ae:4a:72:f7:74:d6:e7:20:16:60:
4a:de:25:ed:d3:04:5b:e0:77:af:a5:a8:31:67:e3:e4:83:d1:
6a:3a:1a:68:15:6c:56:a3:3c:56:8a:d9:e9:18:fa:ed:d1:77:
16:55:5d:19:83:75:75:23:69:50:c2:23:65:6a:5e:70:be:45:
70:84:fd:9c:0e:af:bf:3b:5a:a0:bc:a9:a9:2e:19:85:49:26:
55:07:f6:a2:2e:cc:ad:c1:d7:4c:32:0d:31:14:83:42:31:aa:
2e:2e:f0:3e:10:04:d5:4a:31:84:97:95:ff:94:e5:82:66:46:
f8:c7:87:cd:0f:51:61:62:b8:f4:28:9a:be:38:ca:89:8c:f5:
37:43:a5:cc:3e:9f:3b:a6:0f:d7:cf:44:6b:68:84:a7:60:82:
79:1a:cb:bb:38:12:a0:0c:e3:ee:ae:78:d0:26:f2:c1:33:0a:
35:a7:16:63:6a:db:ff:44:dc:70:e0:a2:52:d5:c0:71:ba:7f:
31:81:0a:13:d2:0f:58:9f:5f:5a:26:c9:b2:10:b3:43:2e:8e:
b8:c8:6b:a8:cb:9e:9b:02:7b:0a:05:82:75:8c:48:4a:ff:12:
e6:34:35:df:bb:e0:0f:1a:14:d7:e6:f0:43:30:0a:11:34:d9:
f2:bd:ed:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:53:23 2025 by rpki-client