Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/e44ce7-8989-4a86-9737-75eff3a63f03/1/7FTC6a3--OZfZh5qVLjy7x1h5x4.roa
File: 7FTC6a3--OZfZh5qVLjy7x1h5x4.roa (raw, json)
Hash identifier: TeYFqL9MiUBaEUuo320K02Us9UwSQ93i2ZZkkkX57PA=
Subject key identifier: EC:54:C2:E9:AD:FE:F8:E6:5F:66:1E:6A:54:B8:F2:EF:1D:61:E7:1E
Certificate issuer: /CN=e4113268246b0bfe3b8328688004edfe1dd880af
Certificate serial: 02EC056D
Authority key identifier: E4:11:32:68:24:6B:0B:FE:3B:83:28:68:80:04:ED:FE:1D:D8:80:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5BEyaCRrC_47gyhogATt_h3YgK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/e44ce7-8989-4a86-9737-75eff3a63f03/1/7FTC6a3--OZfZh5qVLjy7x1h5x4.roa
Signing time: Sat 01 Jan 2022 10:54:49 +0000
ROA not before: Sat 01 Jan 2022 10:54:49 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 203534
IP address blocks: 185.246.176.0/22 maxlen: 22
185.246.177.0/24 maxlen: 24
185.246.176.0/23 maxlen: 23
185.246.176.0/24 maxlen: 24
185.246.179.0/24 maxlen: 24
185.246.178.0/24 maxlen: 24
185.246.178.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 49022317 (0x2ec056d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4113268246b0bfe3b8328688004edfe1dd880af
Validity
Not Before: Jan 1 10:54:49 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ec54c2e9adfef8e65f661e6a54b8f2ef1d61e71e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:85:1e:8c:25:4b:ba:b7:d1:21:7b:a5:7c:38:
8f:24:0b:f0:1e:57:53:ed:25:1f:b8:99:c5:59:aa:
10:73:ac:f2:da:b6:58:ad:2f:46:31:98:95:e5:72:
04:2b:42:c7:2a:1b:8e:75:d7:77:af:7b:fd:68:54:
11:e3:ac:89:17:84:58:88:fb:44:f5:f1:b4:f3:b8:
f4:46:14:85:5f:fa:b8:e0:bd:4a:b7:65:47:e2:5b:
76:06:13:01:5d:06:02:28:9a:d8:e5:85:1c:f1:45:
c0:a3:60:3c:1f:15:73:83:4b:35:8e:95:c5:f5:08:
d3:b8:cb:60:98:9c:c4:0e:d6:aa:f7:12:8c:49:54:
56:16:bf:bb:fd:8a:5d:0a:66:0d:9e:e5:91:c3:13:
3f:de:19:cf:f4:d1:75:a1:65:8b:53:91:90:b1:28:
b1:6f:43:59:45:c8:55:b0:8e:d7:d0:dc:d5:dd:2a:
be:e7:b0:46:74:93:b6:e7:3f:59:cd:f7:2a:a4:c8:
04:9b:7b:4e:62:c8:3f:6a:22:0b:71:24:d6:27:68:
67:d2:9a:90:be:ac:04:cc:6b:6c:ae:d1:b9:8a:4a:
7d:57:01:22:5c:e3:7a:ee:97:e1:49:0d:9e:f0:ae:
62:26:26:44:ae:3f:10:d8:e7:b5:ca:59:0e:48:1a:
bd:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:54:C2:E9:AD:FE:F8:E6:5F:66:1E:6A:54:B8:F2:EF:1D:61:E7:1E
X509v3 Authority Key Identifier:
keyid:E4:11:32:68:24:6B:0B:FE:3B:83:28:68:80:04:ED:FE:1D:D8:80:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5BEyaCRrC_47gyhogATt_h3YgK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/e44ce7-8989-4a86-9737-75eff3a63f03/1/7FTC6a3--OZfZh5qVLjy7x1h5x4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/e44ce7-8989-4a86-9737-75eff3a63f03/1/5BEyaCRrC_47gyhogATt_h3YgK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.246.176.0/22
Signature Algorithm: sha256WithRSAEncryption
09:a1:c7:be:35:07:4f:34:81:49:c8:f7:39:a3:24:f1:9c:25:
a0:bf:84:f3:47:f4:8c:e0:07:18:84:f0:a6:84:ef:3a:b2:9e:
b8:25:90:6e:5b:70:3d:db:2f:60:e7:1b:01:50:05:b1:7f:0f:
f2:e6:96:e4:bf:10:9d:f3:90:a3:84:31:10:83:13:0b:f1:51:
34:20:22:f0:9d:b4:ea:29:5c:77:fa:14:06:95:23:64:ec:d4:
36:a4:f3:95:1f:ae:f2:50:9c:22:3d:11:93:b2:74:da:83:dc:
94:78:80:b4:0f:c9:93:07:32:7a:e0:72:33:70:f8:f7:bb:58:
47:92:02:b0:c7:ed:2a:a4:7f:9a:af:57:c6:3f:6a:a5:b4:24:
ab:d3:8b:de:66:45:83:24:bc:d9:8d:27:dd:38:62:9c:9a:48:
ef:40:66:c1:ac:fb:a8:51:ed:a7:b0:e6:8d:f5:62:c7:88:9b:
ad:86:2e:b0:2b:2c:bc:75:cf:b4:49:ba:64:2c:97:d8:63:c1:
c5:e5:fa:6b:09:2b:c7:fa:1c:13:a2:d2:1f:fc:98:86:1d:35:
0b:52:fe:db:d4:48:cd:c8:41:a4:46:5f:80:c8:f8:1d:6b:3a:
d6:2a:85:70:17:16:96:9f:d3:1f:36:e8:bb:35:4d:07:99:b1:
5b:0e:e3:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 22:04:35 2025 by rpki-client