Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/b8cc66-cc65-4dc2-ae86-61c1ecaab55f/1/f-egB3l-EDxvsW6G_3sHcV0KHX4.roa
File: f-egB3l-EDxvsW6G_3sHcV0KHX4.roa (raw, json)
Hash identifier: JtBE12d9bxExTSrRbQgShdNCUpSoJH+tA4uA0zrPLYQ=
Subject key identifier: 7F:E7:A0:07:79:7E:10:3C:6F:B1:6E:86:FF:7B:07:71:5D:0A:1D:7E
Certificate issuer: /CN=e283c4ad2fd8724a8c7d5eaf431814cb3d15127e
Certificate serial: 019424B381C3DEBEC4594ADBC7045B2945A3
Authority key identifier: E2:83:C4:AD:2F:D8:72:4A:8C:7D:5E:AF:43:18:14:CB:3D:15:12:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4oPErS_YckqMfV6vQxgUyz0VEn4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/b8cc66-cc65-4dc2-ae86-61c1ecaab55f/1/f-egB3l-EDxvsW6G_3sHcV0KHX4.roa
Signing time: Thu 02 Jan 2025 01:48:51 +0000
ROA not before: Thu 02 Jan 2025 01:48:51 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200849
IP address blocks: 185.92.200.0/24 maxlen: 24
185.92.201.0/24 maxlen: 24
185.92.202.0/24 maxlen: 24
185.92.203.0/24 maxlen: 24
2a03:8d20::/32 maxlen: 32
2a03:8d20:1186::/48 maxlen: 48
2a03:8d20:1188::/48 maxlen: 48
2a03:8d20:2282::/48 maxlen: 48
2a03:8d20:7286::/48 maxlen: 48
2a03:8d20:9000::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:81:c3:de:be:c4:59:4a:db:c7:04:5b:29:45:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e283c4ad2fd8724a8c7d5eaf431814cb3d15127e
Validity
Not Before: Jan 2 01:48:51 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7fe7a007797e103c6fb16e86ff7b07715d0a1d7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:bc:30:23:65:d1:bf:81:17:17:7f:3e:0d:88:
6c:6c:58:d0:c3:2b:b1:82:78:1e:63:29:2e:3a:00:
08:94:7d:29:2d:d6:ee:3c:40:fb:86:51:bc:de:3f:
35:ac:da:1f:20:c4:69:13:de:a6:5c:67:4d:22:49:
f2:0f:e0:a6:8f:bd:f4:78:03:08:09:e3:e3:9a:cf:
06:aa:9e:97:a3:df:52:a9:03:0a:88:08:53:86:ae:
df:71:0f:0d:68:08:1d:7d:d7:33:3a:70:35:6b:ab:
f4:0e:a5:c4:b1:5b:7f:49:d2:29:45:af:28:fa:58:
44:9f:32:b2:28:c8:1f:64:7d:7b:a4:db:77:92:96:
5a:b1:8e:2e:59:a8:ab:a2:a3:f5:cc:4c:46:e9:bc:
75:c4:cf:81:c5:24:d0:a9:46:49:62:9b:54:bd:6e:
d5:4a:70:82:66:13:e1:03:e4:f6:55:cc:88:4a:7b:
c8:0a:2f:e5:85:92:c9:e9:4e:4a:47:3b:e3:24:af:
81:d3:02:e1:31:8d:67:d5:16:bd:92:e9:78:62:0a:
ab:50:8d:33:0a:e9:60:a0:e3:a8:e7:20:c1:2b:e8:
04:5b:a3:fd:a7:a7:68:55:7b:76:f6:74:e7:12:07:
23:8e:0d:d9:89:00:ef:c0:2e:77:67:b1:6e:99:40:
c4:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:E7:A0:07:79:7E:10:3C:6F:B1:6E:86:FF:7B:07:71:5D:0A:1D:7E
X509v3 Authority Key Identifier:
keyid:E2:83:C4:AD:2F:D8:72:4A:8C:7D:5E:AF:43:18:14:CB:3D:15:12:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4oPErS_YckqMfV6vQxgUyz0VEn4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/b8cc66-cc65-4dc2-ae86-61c1ecaab55f/1/f-egB3l-EDxvsW6G_3sHcV0KHX4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/b8cc66-cc65-4dc2-ae86-61c1ecaab55f/1/4oPErS_YckqMfV6vQxgUyz0VEn4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.92.200.0/22
IPv6:
2a03:8d20::/32
Signature Algorithm: sha256WithRSAEncryption
90:5f:bf:a0:90:b0:81:a4:dc:ee:df:bc:9a:7e:05:b1:f8:0f:
1e:11:02:df:b7:52:17:02:71:30:57:e7:7a:dd:9b:7d:f3:4b:
fa:09:85:e5:81:2a:11:6f:9b:9d:47:ef:76:4c:75:09:f5:8a:
30:da:c3:db:0e:ed:d6:e7:34:0c:38:38:3e:89:29:88:f7:c9:
6d:ea:f7:4e:3a:99:07:0f:7a:a8:d1:d0:b2:a5:ce:7f:1d:65:
fc:62:15:ca:96:99:9d:dd:c8:b7:d8:5c:53:9f:c6:24:e8:0b:
b7:9f:34:f4:1f:20:e5:a4:74:8b:06:4e:62:ce:2a:4b:c1:cd:
c7:78:cc:ce:90:0e:43:7f:8c:d3:a5:b6:db:ca:89:c0:46:18:
01:e1:ee:8d:64:aa:b0:a3:c1:94:3b:a3:e0:8e:79:a0:5d:1b:
8f:96:a0:01:d7:11:42:aa:24:2a:49:25:4e:ff:cc:74:65:48:
b3:6a:92:77:8c:10:e4:58:8a:72:c2:a8:aa:2e:e6:4f:87:64:
48:2e:8f:62:83:0b:d2:6b:f4:d6:ca:68:ae:ca:7a:ac:54:e5:
5c:ac:5a:28:cd:e0:97:78:a0:d6:da:9b:d0:f9:a5:3f:ff:7e:
54:bd:98:da:1f:07:4c:63:f6:65:07:f2:d3:d8:59:df:53:d3:
94:9d:2c:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:55:35 2025 by rpki-client