Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/39a5fc-d26e-4d53-91e3-493d774aa1ff/1/u7jBF_TQnJz9mTpZhXYq5nggn8c.roa
File: u7jBF_TQnJz9mTpZhXYq5nggn8c.roa (raw, json)
Hash identifier: wreTMB6pW+vrdjrRc+OCyHOCrMzU/JZ3/7CTFhlab7A=
Subject key identifier: BB:B8:C1:17:F4:D0:9C:9C:FD:99:3A:59:85:76:2A:E6:78:20:9F:C7
Certificate issuer: /CN=3e24c7ecfa37d2487152fb9bbbab50be79de2619
Certificate serial: 0194206850A952E1AEC5A3757C4DE615F231
Authority key identifier: 3E:24:C7:EC:FA:37:D2:48:71:52:FB:9B:BB:AB:50:BE:79:DE:26:19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PiTH7Po30khxUvubu6tQvnneJhk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/39a5fc-d26e-4d53-91e3-493d774aa1ff/1/u7jBF_TQnJz9mTpZhXYq5nggn8c.roa
Signing time: Wed 01 Jan 2025 05:48:14 +0000
ROA not before: Wed 01 Jan 2025 05:48:14 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 36351
IP address blocks: 185.71.228.0/24 maxlen: 24
185.71.229.0/24 maxlen: 24
185.71.231.0/24 maxlen: 24
185.125.84.0/24 maxlen: 24
185.125.85.0/24 maxlen: 24
185.125.87.0/24 maxlen: 24
193.0.180.0/24 maxlen: 24
193.0.181.0/24 maxlen: 24
2a05:3343::/42 maxlen: 42
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:68:50:a9:52:e1:ae:c5:a3:75:7c:4d:e6:15:f2:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e24c7ecfa37d2487152fb9bbbab50be79de2619
Validity
Not Before: Jan 1 05:48:14 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bbb8c117f4d09c9cfd993a5985762ae678209fc7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:b9:43:92:7f:83:13:4e:e8:5a:5a:78:c3:a8:
89:73:e8:a6:b8:e2:f0:59:ac:f0:74:d0:5d:52:da:
ed:41:c3:cb:9d:da:a8:de:f3:8c:7a:ed:6c:ff:b1:
01:ba:df:b3:a2:82:93:93:3b:18:40:be:ee:3d:67:
e3:65:22:0d:92:ba:ee:94:3d:ab:9f:f9:d8:bf:93:
0a:43:4f:19:49:4c:0f:cd:a0:07:ba:aa:63:e1:0d:
99:4d:ea:18:fb:ee:8f:ec:08:eb:6c:c2:d2:d8:15:
b1:9e:6b:c2:a4:1a:e4:d5:27:62:4d:ee:9d:4b:d7:
73:95:03:5f:9d:98:b1:44:68:09:32:e1:52:ad:a3:
ab:ef:05:46:1f:fe:c6:f9:5e:0d:bb:35:2d:a1:f2:
b6:1d:88:1a:d8:da:da:8a:89:53:63:5d:01:fe:99:
34:ce:d9:46:a6:87:ee:92:05:8d:2f:d9:2e:20:a9:
79:40:0b:28:35:38:f1:11:be:c6:38:43:37:69:5f:
ad:a1:34:8a:f6:49:ec:6c:a8:ea:72:fd:e1:5c:4c:
01:0b:4c:eb:a0:b9:25:62:8e:aa:fd:ba:e9:b1:41:
47:9f:b8:ce:06:d1:36:e2:cb:0d:ab:86:08:61:1c:
76:aa:29:2e:b5:6c:88:b0:a9:21:3e:ec:3e:06:8f:
45:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:B8:C1:17:F4:D0:9C:9C:FD:99:3A:59:85:76:2A:E6:78:20:9F:C7
X509v3 Authority Key Identifier:
keyid:3E:24:C7:EC:FA:37:D2:48:71:52:FB:9B:BB:AB:50:BE:79:DE:26:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PiTH7Po30khxUvubu6tQvnneJhk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/39a5fc-d26e-4d53-91e3-493d774aa1ff/1/u7jBF_TQnJz9mTpZhXYq5nggn8c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/39a5fc-d26e-4d53-91e3-493d774aa1ff/1/PiTH7Po30khxUvubu6tQvnneJhk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.71.228.0/23
185.71.231.0/24
185.125.84.0/23
185.125.87.0/24
193.0.180.0/23
IPv6:
2a05:3343::/42
Signature Algorithm: sha256WithRSAEncryption
44:bf:7e:d4:2a:f8:8a:51:4f:5d:47:f1:2b:a6:cb:7c:ab:b8:
ad:4e:53:ae:cc:96:d3:e5:3d:38:eb:88:27:36:e1:8f:4f:61:
7e:96:99:f8:86:5d:41:5d:b0:79:56:3a:81:19:57:77:51:e6:
96:31:a6:7a:e1:ed:4d:de:2e:c7:71:1c:48:28:f3:68:73:a8:
16:56:79:f2:7d:1b:6c:01:78:2d:22:8f:5b:6d:82:94:53:cc:
17:f1:b4:6f:9f:aa:9d:dc:5d:45:58:8d:b9:8c:26:f8:53:2c:
24:d0:3d:5c:6f:75:85:c0:df:b5:d9:70:55:52:1c:65:02:d6:
46:7b:06:f7:56:18:52:1e:bc:45:95:62:c8:e6:ea:4f:21:90:
86:ed:de:35:e3:7b:0d:31:4a:91:3e:3c:c1:79:ae:f6:7f:79:
ff:d1:82:69:40:d1:d9:d0:9f:d8:d0:38:7f:77:ae:73:9c:f7:
64:d0:13:7b:14:db:3b:73:db:96:28:b9:c6:17:31:a7:03:fe:
7d:a0:69:f1:da:4b:bf:8d:09:d2:12:50:6e:c7:c2:c5:df:01:
11:91:a9:f7:a5:2a:90:75:dd:f3:86:c5:ca:3f:35:fb:0d:3c:
ad:38:d4:76:8c:f4:bf:1a:d3:1c:72:0d:af:2e:f8:74:99:62:
22:52:4e:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:47:10 2025 by rpki-client