Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/d6ae54-ed67-401a-88f3-7f8c983f14a4/1/T71-lLx_IRd0xdRoRiuKn01ramI.roa
File: T71-lLx_IRd0xdRoRiuKn01ramI.roa (raw, json)
Hash identifier: NdMh7OdN9MHFrjt5MDBsZ76I4BvEZisy0vA5gq92uHA=
Subject key identifier: 4F:BD:7E:94:BC:7F:21:17:74:C5:D4:68:46:2B:8A:9F:4D:6B:6A:62
Certificate issuer: /CN=eb5da1da1fa1d425cf1dc9e826d65edaed6cd898
Certificate serial: 0194228DC3AF0F5828EB5986E774E656DAA3
Authority key identifier: EB:5D:A1:DA:1F:A1:D4:25:CF:1D:C9:E8:26:D6:5E:DA:ED:6C:D8:98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/612h2h-h1CXPHcnoJtZe2u1s2Jg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/d6ae54-ed67-401a-88f3-7f8c983f14a4/1/T71-lLx_IRd0xdRoRiuKn01ramI.roa
Signing time: Wed 01 Jan 2025 15:48:23 +0000
ROA not before: Wed 01 Jan 2025 15:48:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 197869
IP address blocks: 185.194.92.0/22 maxlen: 22
2a00:5980::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:c3:af:0f:58:28:eb:59:86:e7:74:e6:56:da:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eb5da1da1fa1d425cf1dc9e826d65edaed6cd898
Validity
Not Before: Jan 1 15:48:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4fbd7e94bc7f211774c5d468462b8a9f4d6b6a62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:34:c2:15:d7:2d:ae:1a:cf:7a:33:90:ac:f9:
02:78:df:2d:e2:ac:e7:57:69:26:c4:dc:08:0a:a7:
cc:07:c1:25:26:53:fa:7e:89:a1:ea:ce:59:b6:91:
7c:6c:ad:99:14:16:0c:81:55:d9:16:a7:72:94:c3:
5d:f8:22:a5:44:e2:8b:67:98:77:aa:a3:b4:25:f8:
e5:86:f4:df:f3:09:44:57:7b:82:6d:dc:25:df:be:
0d:15:ab:65:aa:25:d6:6d:eb:3e:ce:fd:af:8a:e5:
8f:c8:cd:fb:fc:c2:82:d4:e9:04:b6:e1:de:41:f4:
f1:f4:aa:ae:77:7b:77:2c:37:94:28:60:e8:ed:f1:
aa:5b:45:d9:bf:cf:f1:53:1e:f4:67:bf:35:c0:19:
e1:6c:e9:4c:9d:e9:cc:8d:8b:e3:c7:f1:d8:eb:bd:
1d:5a:7b:7b:23:a4:5b:8c:f1:21:f6:a8:4e:72:91:
2a:24:5e:c3:f5:ba:74:c7:d0:38:eb:13:a4:e5:e0:
e3:14:b1:f8:ab:2a:16:d2:38:b3:7a:72:3a:e1:7d:
5c:98:51:9f:26:48:4a:7a:a1:a4:69:07:75:ad:ce:
cb:9d:d5:be:24:64:90:c3:dd:b0:83:95:c4:1f:fb:
61:0e:47:f4:7e:ad:8e:29:b3:d3:a2:5c:a5:6a:d3:
0e:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:BD:7E:94:BC:7F:21:17:74:C5:D4:68:46:2B:8A:9F:4D:6B:6A:62
X509v3 Authority Key Identifier:
keyid:EB:5D:A1:DA:1F:A1:D4:25:CF:1D:C9:E8:26:D6:5E:DA:ED:6C:D8:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/612h2h-h1CXPHcnoJtZe2u1s2Jg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/d6ae54-ed67-401a-88f3-7f8c983f14a4/1/T71-lLx_IRd0xdRoRiuKn01ramI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/d6ae54-ed67-401a-88f3-7f8c983f14a4/1/612h2h-h1CXPHcnoJtZe2u1s2Jg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.194.92.0/22
IPv6:
2a00:5980::/32
Signature Algorithm: sha256WithRSAEncryption
45:4d:73:43:2d:27:2a:ef:b3:69:c5:1e:06:98:66:cc:75:b1:
60:a9:3b:63:58:ff:6a:96:d1:a8:9d:20:47:45:29:fd:f8:1a:
b9:9e:32:c7:e7:2f:1a:50:7b:99:0e:01:4b:33:20:f2:17:88:
53:2d:89:4a:dd:e5:7f:f8:dd:7b:95:fe:1d:43:4b:bb:1d:ce:
f3:36:c9:c1:b5:05:ac:d8:61:9a:fa:67:42:36:50:90:1d:96:
3f:2f:b9:f3:1f:0b:4b:f6:ff:a2:18:1f:c0:2f:07:8d:bf:06:
6e:37:79:cd:be:b4:b3:29:16:b4:99:9e:02:a1:2f:6f:23:3d:
b9:8c:e8:4d:3b:57:a1:95:67:d7:6a:1a:c9:3a:62:ad:c8:17:
70:12:58:bb:da:8a:91:72:82:2d:ee:c2:03:38:76:35:39:8f:
42:79:06:f3:02:90:5c:46:72:8b:bf:4b:46:6c:8b:da:8e:a2:
77:46:72:29:38:f8:a2:e4:f1:c0:a2:0c:fe:f5:b5:ae:a4:a1:
f9:29:38:bf:a6:ac:3d:36:51:27:60:f3:78:aa:74:5d:1c:70:
0e:13:f1:a1:9a:6c:db:a2:8b:96:da:a6:25:f9:1e:83:87:c0:
ee:91:6e:da:d7:42:89:d5:df:0e:c0:1a:e4:da:04:5d:37:21:
4a:2b:d4:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:53:39 2025 by rpki-client