Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/7f3cc9-6be9-40b2-8a14-130698a5959c/1/8xuwdhGvmNX9MjR3WUx0PqC9jUc.roa
File: 8xuwdhGvmNX9MjR3WUx0PqC9jUc.roa (raw, json)
Hash identifier: p+ehqHvmDvZknC0O2O+zo8Q1VoLVTXJKDz/p25JgCzc=
Subject key identifier: F3:1B:B0:76:11:AF:98:D5:FD:32:34:77:59:4C:74:3E:A0:BD:8D:47
Certificate issuer: /CN=01ec50cb33ae1860d4cc5fb67e43d39304224b4f
Certificate serial: 01942143862219A34A34AC556EC87CCC27FD
Authority key identifier: 01:EC:50:CB:33:AE:18:60:D4:CC:5F:B6:7E:43:D3:93:04:22:4B:4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AexQyzOuGGDUzF-2fkPTkwQiS08.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/7f3cc9-6be9-40b2-8a14-130698a5959c/1/8xuwdhGvmNX9MjR3WUx0PqC9jUc.roa
Signing time: Wed 01 Jan 2025 09:47:40 +0000
ROA not before: Wed 01 Jan 2025 09:47:40 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49436
IP address blocks: 185.248.188.0/22 maxlen: 22
185.248.188.0/23 maxlen: 23
185.248.190.0/24 maxlen: 24
185.248.191.0/24 maxlen: 24
2a0e:1b00::/32 maxlen: 32
2a0e:1b01::/32 maxlen: 32
2a0e:1b07::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:43:86:22:19:a3:4a:34:ac:55:6e:c8:7c:cc:27:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01ec50cb33ae1860d4cc5fb67e43d39304224b4f
Validity
Not Before: Jan 1 09:47:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f31bb07611af98d5fd323477594c743ea0bd8d47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:fd:bd:f5:35:7c:a5:e1:58:99:d8:65:23:41:
87:08:ca:44:e1:6e:6b:53:81:38:52:11:9e:a6:9e:
42:1b:94:0d:94:1a:7e:40:4f:29:bc:d0:1d:5d:8e:
93:e5:6a:43:03:10:24:1d:6d:01:57:16:c3:fc:3f:
d5:f1:5d:cb:f4:7d:ae:4a:b3:9b:f7:67:6b:e3:9a:
f0:86:85:08:63:24:17:79:c6:88:0d:bd:f4:e0:27:
ea:bb:15:16:99:62:16:c6:98:d9:9a:f0:ca:9b:23:
c3:dc:c8:31:73:fd:04:16:a3:69:09:d3:d4:7b:54:
b4:0a:1a:af:9d:7c:04:87:ba:93:87:c0:94:01:e6:
aa:1f:f9:29:e6:b0:f7:17:6c:fd:71:4c:6a:ea:04:
3e:e3:ed:fa:ab:66:35:6c:7e:3c:af:d3:5c:3f:56:
24:2b:2a:3e:49:5c:b9:07:5f:fb:19:13:ed:95:49:
49:b5:36:5f:28:d7:5a:23:1f:e9:99:70:a6:ea:b9:
17:e4:c3:7b:4a:ee:c4:06:74:f1:25:be:6a:fe:99:
27:23:42:97:f3:ef:e4:1d:a1:e0:ae:3e:0a:5f:ad:
ab:7c:1c:e7:79:1b:ab:ec:b4:6a:c2:de:9e:63:71:
b3:1b:b4:25:88:03:e9:26:bf:d6:c2:ca:5a:de:2e:
6d:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:1B:B0:76:11:AF:98:D5:FD:32:34:77:59:4C:74:3E:A0:BD:8D:47
X509v3 Authority Key Identifier:
keyid:01:EC:50:CB:33:AE:18:60:D4:CC:5F:B6:7E:43:D3:93:04:22:4B:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AexQyzOuGGDUzF-2fkPTkwQiS08.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/7f3cc9-6be9-40b2-8a14-130698a5959c/1/8xuwdhGvmNX9MjR3WUx0PqC9jUc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/7f3cc9-6be9-40b2-8a14-130698a5959c/1/AexQyzOuGGDUzF-2fkPTkwQiS08.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.248.188.0/22
IPv6:
2a0e:1b00::/31
2a0e:1b07::/32
Signature Algorithm: sha256WithRSAEncryption
7d:a4:3e:d9:ed:bd:ee:c6:7f:19:64:a1:c5:9b:07:8e:22:8c:
6f:85:94:1c:76:3f:69:c7:b2:6b:26:f6:be:8f:8a:b0:05:36:
f7:d5:ad:f9:07:0b:10:80:ac:ca:a2:17:c4:48:d4:f9:52:2e:
8e:d5:f9:15:89:53:28:3c:53:95:1c:f8:48:ed:73:c8:0a:5b:
45:ef:56:9e:ca:99:f5:67:af:e8:64:fa:3f:93:75:9c:24:c3:
fd:a4:e5:93:d8:10:cf:dc:0d:6f:e5:28:58:24:67:07:11:da:
f0:09:6b:af:1e:ed:7a:94:19:25:a2:31:26:75:8f:5a:6f:9f:
12:65:d3:05:91:39:44:05:a0:40:30:0a:67:da:c8:94:76:df:
b9:2c:15:96:7f:b0:b9:7a:9f:43:ec:e1:6a:18:d8:8b:2b:da:
ac:8e:e4:78:39:9e:e7:93:c5:36:62:c2:3f:5a:6b:ac:67:43:
7a:cc:ba:35:d2:e2:02:9a:98:28:69:90:17:1d:b3:84:80:46:
12:ff:17:bc:af:53:9d:0c:48:b9:a6:58:84:61:92:a2:c5:f7:
48:86:b3:b4:02:cf:2f:69:9b:51:52:83:04:fb:56:3f:72:a1:
b3:62:f6:81:4c:0d:98:e9:4d:52:01:d4:a2:bb:e6:c7:d8:3f:
b3:00:d3:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:45:21 2025 by rpki-client