Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/eb877c-929e-41b6-b9cb-fc64bfc3d2f9/1/7Ns-2cBnKCoAvvMfhajIUsqOfRM.roa
File: 7Ns-2cBnKCoAvvMfhajIUsqOfRM.roa (raw, json)
Hash identifier: xGbT8/8kQTWGMRGlRdu/Jth3qb8PIWWDn9MA5RF+54k=
Subject key identifier: EC:DB:3E:D9:C0:67:28:2A:00:BE:F3:1F:85:A8:C8:52:CA:8E:7D:13
Certificate issuer: /CN=02339402c42b3f84995c4d58ef670e8d16c2afe2
Certificate serial: 019426D9A52FDFA1A2E5421B346F297670E6
Authority key identifier: 02:33:94:02:C4:2B:3F:84:99:5C:4D:58:EF:67:0E:8D:16:C2:AF:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AjOUAsQrP4SZXE1Y72cOjRbCr-I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/eb877c-929e-41b6-b9cb-fc64bfc3d2f9/1/7Ns-2cBnKCoAvvMfhajIUsqOfRM.roa
Signing time: Thu 02 Jan 2025 11:49:45 +0000
ROA not before: Thu 02 Jan 2025 11:49:45 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 2611
IP address blocks: 185.122.248.0/22 maxlen: 22
193.190.0.0/15 maxlen: 24
193.191.192.0/19 maxlen: 19
193.191.240.0/20 maxlen: 20
2001:6a8::/29 maxlen: 48
2001:6a8:8a00::/48 maxlen: 48
2001:6a8:9200::/48 maxlen: 48
2001:6a8:a001::/48 maxlen: 48
2001:6a8:be00::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:a5:2f:df:a1:a2:e5:42:1b:34:6f:29:76:70:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02339402c42b3f84995c4d58ef670e8d16c2afe2
Validity
Not Before: Jan 2 11:49:45 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ecdb3ed9c067282a00bef31f85a8c852ca8e7d13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:3a:ce:d3:a1:73:79:ae:cd:f1:98:58:86:38:
8f:9a:fb:1c:da:dc:06:c8:66:4f:2d:4b:af:ec:44:
4f:19:0c:d6:bd:59:37:d4:49:d3:5c:b8:13:e9:af:
36:3c:14:31:0a:88:43:2e:dc:3f:94:a9:4a:b1:b1:
f0:e1:55:f8:13:31:55:fd:f9:80:f2:fb:18:55:f2:
8f:d2:c9:ba:9d:09:b8:7d:cf:8c:07:8c:74:b2:95:
4f:52:97:fb:90:d3:7e:bb:ea:f9:72:a3:a0:c5:cd:
cf:1e:74:26:e9:3c:04:24:5e:3a:8f:14:e0:3c:8e:
ed:c6:67:37:c0:c4:71:95:cf:6e:86:bf:0e:68:35:
bf:1e:e0:17:62:f1:08:b1:f6:3c:29:8f:19:30:5b:
ef:bf:7d:58:c0:65:29:bb:12:23:28:99:16:07:61:
cd:c9:4d:53:48:2e:2d:d4:2c:c6:e2:b0:b3:5f:7a:
f8:1c:13:e7:aa:d3:c2:d1:46:ef:e5:38:e8:61:47:
0e:a0:78:7e:4d:c3:2c:8f:85:89:63:e3:ed:5e:34:
91:95:0b:5b:e1:29:03:5f:29:62:0e:1f:a2:0b:cd:
32:85:c2:4d:01:d0:0a:fe:d1:7e:fd:32:f3:70:16:
85:0e:46:19:fd:e6:ca:fc:5b:a6:33:4a:44:bc:3f:
9a:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:DB:3E:D9:C0:67:28:2A:00:BE:F3:1F:85:A8:C8:52:CA:8E:7D:13
X509v3 Authority Key Identifier:
keyid:02:33:94:02:C4:2B:3F:84:99:5C:4D:58:EF:67:0E:8D:16:C2:AF:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AjOUAsQrP4SZXE1Y72cOjRbCr-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/eb877c-929e-41b6-b9cb-fc64bfc3d2f9/1/7Ns-2cBnKCoAvvMfhajIUsqOfRM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/eb877c-929e-41b6-b9cb-fc64bfc3d2f9/1/AjOUAsQrP4SZXE1Y72cOjRbCr-I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.122.248.0/22
193.190.0.0/15
IPv6:
2001:6a8::/29
Signature Algorithm: sha256WithRSAEncryption
78:41:e8:e6:c1:01:e7:76:e4:3a:fb:37:4c:6f:29:b9:f9:57:
66:bc:97:a8:f5:17:dc:76:2a:6c:2d:94:49:88:ad:4f:88:8f:
21:78:db:c0:da:52:2f:7e:de:9b:10:e9:0d:85:c8:54:f7:f8:
05:5a:68:45:d2:94:5b:4c:32:6f:00:10:04:f9:30:4e:11:d2:
75:a3:cd:bc:5a:29:63:22:3f:68:e0:48:6f:c1:6b:da:0d:3e:
e7:49:28:08:c4:85:53:c9:d6:b0:2d:40:b0:15:65:55:ec:ba:
11:45:cb:fa:80:f0:88:9b:a9:e5:2e:15:e9:e6:55:8f:2b:0f:
18:7b:ef:06:33:94:41:b6:52:a0:da:ed:4a:19:7e:92:54:4b:
20:cd:bf:7e:ac:06:50:51:f0:83:02:c8:50:74:b6:f6:c2:2d:
a7:0c:3b:ae:ce:c8:0f:9c:70:3a:62:39:98:ab:d9:63:a9:21:
79:36:cf:27:d4:b3:65:dc:cc:84:49:61:fa:33:d2:05:c3:21:
82:e3:21:99:64:c6:3f:89:f9:7c:88:74:38:c2:a3:cf:34:93:
62:35:a7:90:16:63:03:2f:df:f7:54:73:ef:60:35:df:da:47:
85:38:e9:7e:59:0a:f7:bd:c4:aa:b2:7d:3e:ec:22:3d:c3:95:
a7:86:34:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 05:05:42 2025 by rpki-client