Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/db787f-c27a-4f23-99b2-438acb72fc5b/1/v7sddxJjq3qKaBWAdXKnkLLzrc0.roa
File: v7sddxJjq3qKaBWAdXKnkLLzrc0.roa (raw, json)
Hash identifier: lKZS60p/rxd0A+1EgTcJbGD6ikjsCu25yzGvAvr7Trs=
Subject key identifier: BF:BB:1D:77:12:63:AB:7A:8A:68:15:80:75:72:A7:90:B2:F3:AD:CD
Certificate issuer: /CN=126c660b30f5692b2b16e289b24901c518fda520
Certificate serial: 019426D95CEC48BB8B0C1A6B061671769504
Authority key identifier: 12:6C:66:0B:30:F5:69:2B:2B:16:E2:89:B2:49:01:C5:18:FD:A5:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EmxmCzD1aSsrFuKJskkBxRj9pSA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/db787f-c27a-4f23-99b2-438acb72fc5b/1/v7sddxJjq3qKaBWAdXKnkLLzrc0.roa
Signing time: Thu 02 Jan 2025 11:49:26 +0000
ROA not before: Thu 02 Jan 2025 11:49:26 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202872
IP address blocks: 185.149.128.0/23 maxlen: 23
185.149.130.0/23 maxlen: 23
2a07:6880::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:5c:ec:48:bb:8b:0c:1a:6b:06:16:71:76:95:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=126c660b30f5692b2b16e289b24901c518fda520
Validity
Not Before: Jan 2 11:49:26 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bfbb1d771263ab7a8a6815807572a790b2f3adcd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:4a:0b:53:a5:8f:8a:1e:f4:c9:b4:42:21:dc:
f4:fd:9f:78:44:86:18:98:97:46:9f:0b:25:8f:ac:
54:d1:91:7c:3e:b0:65:49:ed:62:68:33:ae:e6:63:
d2:c3:52:db:32:d0:5d:51:d5:fd:fa:71:95:94:27:
dd:d3:e1:4d:fc:f5:2c:fe:de:2a:9e:f0:ce:cc:3a:
18:8d:3b:b7:41:5f:bd:03:d2:98:6e:a0:dd:1c:f6:
f0:2d:73:4a:bd:bb:6d:bc:31:e9:8d:8a:69:38:03:
e2:a7:46:c5:b6:e6:ce:28:8c:1d:4d:fc:a2:82:4b:
89:aa:0f:d4:d8:9b:39:b1:b4:3b:65:bd:f6:62:af:
54:c4:60:78:a9:e9:eb:0b:76:bd:53:56:9b:10:4c:
84:a3:59:0e:9a:52:e2:5f:c7:b0:76:53:c2:4a:4e:
42:88:45:39:92:57:af:19:6d:64:f9:73:7a:b5:a8:
3b:bf:d7:7d:de:ec:ad:fb:91:fd:f6:91:a5:23:7c:
17:e0:98:39:54:83:3a:3d:e5:a6:74:2b:b9:d5:c6:
cb:e5:8f:41:19:69:4e:25:7d:73:4c:0b:64:d9:81:
09:b9:7a:f0:cb:2e:5d:a5:86:81:af:e4:38:23:ee:
2e:19:6b:09:32:82:3c:2d:b2:5d:6b:2a:9e:79:be:
7c:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:BB:1D:77:12:63:AB:7A:8A:68:15:80:75:72:A7:90:B2:F3:AD:CD
X509v3 Authority Key Identifier:
keyid:12:6C:66:0B:30:F5:69:2B:2B:16:E2:89:B2:49:01:C5:18:FD:A5:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EmxmCzD1aSsrFuKJskkBxRj9pSA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/db787f-c27a-4f23-99b2-438acb72fc5b/1/v7sddxJjq3qKaBWAdXKnkLLzrc0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/db787f-c27a-4f23-99b2-438acb72fc5b/1/EmxmCzD1aSsrFuKJskkBxRj9pSA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.149.128.0/22
IPv6:
2a07:6880::/32
Signature Algorithm: sha256WithRSAEncryption
4e:4a:60:9e:f3:f5:51:29:6e:37:07:35:f4:b7:8a:2d:48:0e:
a3:e7:ec:1c:2b:b6:58:98:13:ca:7a:88:cb:38:f4:0e:5d:23:
19:c3:89:6a:9b:c8:60:69:e4:0d:20:c8:68:81:8a:f4:39:96:
f7:8d:3f:8a:f7:09:a4:0f:f3:bd:ae:93:62:b1:7f:fe:6b:cf:
ec:16:c6:c4:ba:e7:ab:88:66:9a:cc:64:a2:76:84:c1:57:07:
9c:ee:34:4f:87:d1:7a:86:6f:9b:d9:22:88:a1:9a:78:84:92:
f4:19:d7:5c:bf:d2:d1:64:55:fa:7e:de:65:4b:bc:7d:55:c6:
5a:70:74:2f:ca:11:ed:4b:85:83:dd:35:70:31:a6:8c:99:6f:
cc:16:c1:2a:8d:16:67:7e:98:fd:2d:4d:8d:68:63:3e:2b:61:
40:c1:61:3a:39:4b:f6:e1:25:3e:72:3b:70:7a:ac:38:b1:ed:
1c:8b:7d:73:99:cf:32:e3:f8:06:da:2f:0b:63:b8:d6:ac:70:
e8:6f:da:72:46:bf:4f:77:f0:43:30:fc:b2:b3:64:8f:3f:3b:
e4:05:f5:2b:13:fd:41:5e:8c:6e:a2:71:d4:c1:b3:0c:d5:51:
60:7f:2a:fa:31:d6:32:dd:b7:1e:6c:6c:24:34:d6:56:7c:7e:
94:66:5d:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 02:34:47 2025 by rpki-client