Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/962fb1-3df0-4ec2-b50a-b36a24d39427/1/e8sw3NSVdW7RuwBxKGlVO3o7vs4.roa
File: e8sw3NSVdW7RuwBxKGlVO3o7vs4.roa (raw, json)
Hash identifier: vas7IbvKA+23Qxw1IFtJvSTpfV6psv5Y/rS0T6Oox/Y=
Subject key identifier: 7B:CB:30:DC:D4:95:75:6E:D1:BB:00:71:28:69:55:3B:7A:3B:BE:CE
Certificate issuer: /CN=835bc9bb547e27788d221bc8bbd5fb02e024480f
Certificate serial: 0194244543130F599C1E66229AB719AF01CA
Authority key identifier: 83:5B:C9:BB:54:7E:27:78:8D:22:1B:C8:BB:D5:FB:02:E0:24:48:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g1vJu1R-J3iNIhvIu9X7AuAkSA8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/962fb1-3df0-4ec2-b50a-b36a24d39427/1/e8sw3NSVdW7RuwBxKGlVO3o7vs4.roa
Signing time: Wed 01 Jan 2025 23:48:26 +0000
ROA not before: Wed 01 Jan 2025 23:48:26 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202562
IP address blocks: 185.186.10.0/24 maxlen: 24
2a0b:6b83::/32 maxlen: 48
2a0b:6b86:300::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:45:43:13:0f:59:9c:1e:66:22:9a:b7:19:af:01:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=835bc9bb547e27788d221bc8bbd5fb02e024480f
Validity
Not Before: Jan 1 23:48:26 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7bcb30dcd495756ed1bb00712869553b7a3bbece
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:57:1d:3f:26:94:51:2e:3d:67:22:a2:e9:2e:
4e:6a:7a:b4:58:79:7e:50:c2:b8:e7:47:f4:08:47:
32:fb:07:e6:79:93:3d:02:57:05:21:31:c0:97:94:
07:09:eb:a6:46:6e:7d:ba:f1:25:39:2c:01:df:aa:
90:c8:64:e2:23:0d:48:aa:ae:d1:a7:b1:bb:4b:5c:
27:95:d6:6f:4a:10:55:f8:d9:b2:aa:e1:ab:e1:6b:
3e:47:a0:2a:59:05:71:cd:9c:7d:e8:3a:23:ee:36:
ba:c5:b7:1d:d3:1b:68:65:70:c5:bc:c7:5a:3a:87:
fa:34:33:8d:14:40:b6:7d:15:c6:7a:96:c9:87:ca:
57:e2:6f:bb:03:8c:b3:aa:db:23:ff:fb:b1:d4:f5:
18:f1:ec:19:83:ca:92:64:0e:04:aa:c7:9f:04:c8:
73:6f:4a:6b:a3:cc:76:2d:0e:d9:21:8e:5e:05:55:
d1:1e:3f:bb:be:dc:bb:4a:24:fe:3e:8c:e3:d7:0a:
78:51:0e:13:08:32:6c:9a:86:af:ad:e5:fc:bb:68:
9d:86:33:78:5e:9e:04:ca:2b:ec:8c:94:ef:a8:89:
8d:e2:a0:f8:ce:fc:4f:06:58:38:95:26:c3:52:3a:
c8:b7:ec:37:9a:f0:fc:72:d7:b4:6f:42:f4:ac:a5:
75:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:CB:30:DC:D4:95:75:6E:D1:BB:00:71:28:69:55:3B:7A:3B:BE:CE
X509v3 Authority Key Identifier:
keyid:83:5B:C9:BB:54:7E:27:78:8D:22:1B:C8:BB:D5:FB:02:E0:24:48:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g1vJu1R-J3iNIhvIu9X7AuAkSA8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/962fb1-3df0-4ec2-b50a-b36a24d39427/1/e8sw3NSVdW7RuwBxKGlVO3o7vs4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/962fb1-3df0-4ec2-b50a-b36a24d39427/1/g1vJu1R-J3iNIhvIu9X7AuAkSA8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.186.10.0/24
IPv6:
2a0b:6b83::/32
2a0b:6b86:300::/40
Signature Algorithm: sha256WithRSAEncryption
b0:35:f8:f1:dc:aa:30:cb:a8:73:30:37:34:4b:11:fb:0e:c4:
e4:ac:e0:db:15:4d:47:e0:46:2b:4d:d1:8d:01:99:90:c2:e8:
67:9c:40:de:59:38:83:b2:dd:e5:71:ad:0c:ad:7a:af:10:52:
f8:b1:ea:ea:9d:96:79:3a:89:aa:5d:b0:41:bd:30:ca:99:3a:
d6:42:de:ff:ba:58:a1:12:7a:0f:c6:20:09:15:ad:b6:7f:1a:
7e:30:e4:1b:fb:35:3a:fc:3c:1c:94:97:13:c9:73:e0:ca:73:
9f:a8:ea:2b:1b:42:85:ff:75:7c:f6:85:e2:27:07:35:d0:46:
e7:28:0d:1a:43:f0:b7:14:4d:97:21:f8:45:ac:b0:50:69:49:
e5:94:1b:34:87:6e:8b:9d:07:6b:76:e7:72:4b:7d:d4:68:11:
e5:d6:8c:d6:de:7c:bf:88:a2:db:86:44:8f:08:bd:45:ec:a1:
d1:cd:45:13:a4:dc:fb:12:39:50:7b:c1:81:5b:13:c9:e5:eb:
2f:94:13:2c:b3:e4:40:33:1d:82:04:92:fe:9b:fd:d9:95:4a:
ab:08:cf:93:0d:09:70:5b:e1:8c:05:23:44:c8:ff:ad:14:17:
4e:36:eb:65:03:db:49:d2:b4:2e:9c:f3:18:7b:d0:57:96:21:
6f:97:8d:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 17:50:56 2025 by rpki-client