Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/16b8e4-1253-4d9e-bd49-fc37fb0cd43b/1/t8J6z3tO2f2jI-WXfX5Z7ghB42Y.roa
File: t8J6z3tO2f2jI-WXfX5Z7ghB42Y.roa (raw, json)
Hash identifier: CJg1Zg1dR2GxxLuD5y1ebgKx9+kGLch5/dW0dbkm29Y=
Subject key identifier: B7:C2:7A:CF:7B:4E:D9:FD:A3:23:E5:97:7D:7E:59:EE:08:41:E3:66
Certificate issuer: /CN=6c03a2caf298019fbd668621516c8c6e1d10e83c
Certificate serial: 01942067E75FE4DE12AFE9CA48CE3DC78A58
Authority key identifier: 6C:03:A2:CA:F2:98:01:9F:BD:66:86:21:51:6C:8C:6E:1D:10:E8:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bAOiyvKYAZ-9ZoYhUWyMbh0Q6Dw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/16b8e4-1253-4d9e-bd49-fc37fb0cd43b/1/t8J6z3tO2f2jI-WXfX5Z7ghB42Y.roa
Signing time: Wed 01 Jan 2025 05:47:47 +0000
ROA not before: Wed 01 Jan 2025 05:47:47 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 203061
IP address blocks: 185.25.107.0/24 maxlen: 32
185.144.13.0/24 maxlen: 32
185.222.213.0/24 maxlen: 32
193.104.96.0/24 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:67:e7:5f:e4:de:12:af:e9:ca:48:ce:3d:c7:8a:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c03a2caf298019fbd668621516c8c6e1d10e83c
Validity
Not Before: Jan 1 05:47:47 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b7c27acf7b4ed9fda323e5977d7e59ee0841e366
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:45:a9:b1:44:af:4e:4e:3e:7e:b0:e2:40:0b:
f7:3a:8a:83:fa:c7:f1:c1:2c:ad:99:dc:e7:db:89:
09:7b:0d:ae:57:90:44:cc:e2:24:cc:5c:41:a2:8a:
76:4d:72:de:41:8a:38:30:46:8e:ab:54:c4:8a:6f:
e2:7d:60:75:d5:22:c0:4f:9c:d0:c9:5d:ba:91:04:
4d:f9:83:cc:ff:5d:34:c1:fd:ba:bd:0b:dc:64:a5:
fe:b9:a2:71:35:31:32:ae:b0:65:a8:1b:61:28:b1:
28:4c:a6:9e:13:37:b5:87:eb:53:f4:77:e1:1f:54:
0f:79:10:da:6e:06:1e:30:4b:d2:d6:bb:4f:d7:85:
b0:70:84:5f:f2:46:e7:c4:0e:ad:e0:36:ff:ab:d1:
dd:6f:b5:06:2c:6d:d9:b1:ca:1e:e1:40:33:35:4b:
b2:13:40:12:3f:06:50:da:26:c7:a8:f4:ff:e0:3b:
91:66:fa:97:bb:04:dc:43:dd:eb:b8:ef:a3:40:3c:
51:a0:39:4f:a1:9e:c7:2f:62:23:47:32:0b:b5:85:
e3:46:7d:e4:aa:d7:92:45:03:e8:9e:3b:59:b2:47:
59:be:50:46:c8:ca:fc:00:98:5c:58:d4:a3:cc:9c:
f9:35:7c:e9:a9:f9:e6:05:67:4e:dd:d4:ed:a5:bf:
f6:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:C2:7A:CF:7B:4E:D9:FD:A3:23:E5:97:7D:7E:59:EE:08:41:E3:66
X509v3 Authority Key Identifier:
keyid:6C:03:A2:CA:F2:98:01:9F:BD:66:86:21:51:6C:8C:6E:1D:10:E8:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bAOiyvKYAZ-9ZoYhUWyMbh0Q6Dw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/16b8e4-1253-4d9e-bd49-fc37fb0cd43b/1/t8J6z3tO2f2jI-WXfX5Z7ghB42Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/16b8e4-1253-4d9e-bd49-fc37fb0cd43b/1/bAOiyvKYAZ-9ZoYhUWyMbh0Q6Dw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.25.107.0/24
185.144.13.0/24
185.222.213.0/24
193.104.96.0/24
Signature Algorithm: sha256WithRSAEncryption
9e:49:99:37:5e:20:cb:8f:35:6c:cb:f6:39:56:1b:82:6c:40:
2b:92:ef:7a:3a:07:3c:c8:d9:c3:eb:ae:45:7f:c6:f3:65:da:
68:2c:63:b4:e2:ef:c8:80:a7:88:6c:22:ca:f0:46:dc:7a:d4:
31:a9:f9:d3:1e:66:ef:d1:01:1f:cb:b3:eb:9b:eb:1d:fc:75:
e4:12:24:a6:dd:29:75:8c:15:41:5a:d7:20:42:28:7e:e8:b8:
18:ef:eb:87:0c:60:eb:ca:60:1b:2e:80:4b:93:ad:25:fe:6b:
5d:30:2a:0e:ee:1a:99:9c:97:fd:b9:3d:19:3a:47:f2:1e:3a:
4d:3b:b0:fe:90:c2:e5:32:6d:01:35:c3:23:c6:13:59:83:49:
01:14:fe:1d:5d:2d:ba:7b:27:b1:0f:78:fd:53:e2:33:b5:bc:
c7:97:7e:33:c7:30:27:03:39:fc:fc:b0:40:af:57:ad:a8:43:
ac:b0:59:bd:17:98:ea:8e:5f:7a:b3:81:e8:11:7f:9f:0d:28:
06:b1:63:c1:91:49:35:60:13:69:e0:c6:71:a3:d6:b9:87:c1:
de:89:68:92:1d:ce:31:08:0a:66:29:46:c1:7f:2e:91:07:04:
49:74:3e:d1:99:bc:c8:01:c1:8b:15:8e:84:d1:24:e7:c0:89:
0f:3a:de:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 13:37:49 2025 by rpki-client