Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/9d5910-9f5e-446c-8d3c-bc007f2dac24/1/nPqQJ8UdAmrtJ7wnCHA2pKVVJes.roa
File: nPqQJ8UdAmrtJ7wnCHA2pKVVJes.roa (raw, json)
Hash identifier: p7N+6uK/8Ti49SS+XA+rd9G9693lX55uDyXJFuafXJA=
Subject key identifier: 9C:FA:90:27:C5:1D:02:6A:ED:27:BC:27:08:70:36:A4:A5:55:25:EB
Certificate issuer: /CN=6ba3186597742a926cd26504e1ed76f8543fdb26
Certificate serial: 0194282543918EA087CA58947F7FD901849F
Authority key identifier: 6B:A3:18:65:97:74:2A:92:6C:D2:65:04:E1:ED:76:F8:54:3F:DB:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a6MYZZd0KpJs0mUE4e12-FQ_2yY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/9d5910-9f5e-446c-8d3c-bc007f2dac24/1/nPqQJ8UdAmrtJ7wnCHA2pKVVJes.roa
Signing time: Thu 02 Jan 2025 17:51:58 +0000
ROA not before: Thu 02 Jan 2025 17:51:58 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212988
IP address blocks: 185.194.26.0/24 maxlen: 24
185.194.27.0/24 maxlen: 24
185.219.218.0/24 maxlen: 24
185.221.188.0/24 maxlen: 24
185.221.189.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:25:43:91:8e:a0:87:ca:58:94:7f:7f:d9:01:84:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ba3186597742a926cd26504e1ed76f8543fdb26
Validity
Not Before: Jan 2 17:51:58 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9cfa9027c51d026aed27bc27087036a4a55525eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:51:e1:74:24:73:0b:40:1a:81:29:cf:3b:76:
89:3d:81:68:65:6b:ae:c5:80:26:bf:b7:ed:0f:36:
0c:e3:fb:6a:2a:bd:fc:6f:3a:db:8a:dd:ac:94:77:
e2:e5:aa:bf:cc:bb:19:28:ab:65:ae:c1:e5:e3:66:
f8:8a:88:f3:09:62:bc:4a:30:5d:f8:69:e8:a8:42:
ce:1d:4c:f3:b9:76:89:dc:53:6f:58:d4:25:35:da:
66:d6:9a:1c:48:30:89:18:00:b7:7a:1b:e3:34:ae:
66:ed:c0:9a:a1:14:ab:93:92:18:fa:3d:67:74:60:
ea:0c:d5:90:87:9c:53:c8:80:b8:e2:de:21:cc:fd:
6d:da:4a:c0:73:ee:c4:61:96:a8:45:c0:77:61:5e:
c3:a7:46:26:e8:cb:bc:f0:4c:12:df:dd:ff:5e:82:
17:50:27:27:11:d4:fb:8a:1c:42:c3:59:51:3a:3e:
00:d3:5d:39:60:c2:31:fc:f1:7c:ae:c4:28:13:77:
7d:83:72:0e:aa:44:92:7b:14:d1:23:d8:ae:d3:df:
60:ca:37:15:b1:65:aa:7d:91:eb:9c:f7:f4:04:eb:
42:51:5b:9a:03:39:5d:10:37:c2:b7:ed:ef:78:1d:
bc:36:99:2a:e3:5a:24:a1:54:2c:80:1f:12:3e:1d:
77:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:FA:90:27:C5:1D:02:6A:ED:27:BC:27:08:70:36:A4:A5:55:25:EB
X509v3 Authority Key Identifier:
keyid:6B:A3:18:65:97:74:2A:92:6C:D2:65:04:E1:ED:76:F8:54:3F:DB:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6MYZZd0KpJs0mUE4e12-FQ_2yY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/9d5910-9f5e-446c-8d3c-bc007f2dac24/1/nPqQJ8UdAmrtJ7wnCHA2pKVVJes.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/9d5910-9f5e-446c-8d3c-bc007f2dac24/1/a6MYZZd0KpJs0mUE4e12-FQ_2yY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.194.26.0/23
185.219.218.0/24
185.221.188.0/23
Signature Algorithm: sha256WithRSAEncryption
76:f4:93:f0:f3:31:a8:ef:3b:9c:44:13:ee:2d:05:ce:38:7c:
83:6e:39:fd:b8:3d:bb:cc:42:da:c1:7b:6b:0c:82:74:54:3e:
65:c9:3d:96:37:99:c0:85:8b:01:0c:66:57:1f:17:51:99:11:
c1:3f:f3:44:c5:eb:bf:71:10:7d:5b:0f:4c:9c:5b:b1:0e:bd:
c1:d4:43:0e:66:60:99:65:87:48:88:80:08:78:5b:21:1a:04:
5e:d4:f2:bf:1e:06:01:43:25:82:97:7a:cc:de:96:6e:44:1c:
a4:96:9a:54:9f:fc:f7:f3:26:b6:c7:64:c9:b0:b1:f4:43:fe:
23:fc:c1:71:dd:4f:9a:61:79:99:d9:01:19:1f:ec:b6:e3:e1:
12:d4:3b:2e:6b:f6:0b:53:39:b3:83:ac:a1:0a:0c:43:a0:38:
25:b4:c2:60:ba:fc:fd:86:1b:9a:2f:4f:86:d3:77:14:d8:07:
d2:1f:89:57:93:d6:67:74:20:b4:71:f8:e4:dc:5f:b1:39:bf:
c2:69:ed:4d:46:51:43:61:b0:2c:5f:5a:e6:67:18:f9:f2:3c:
d8:7d:97:78:0a:08:8e:7e:ef:2b:e0:9a:78:6d:e0:99:ff:3c:
e2:35:c5:6b:d1:16:63:c2:1c:67:52:ce:61:6b:28:8f:85:fb:
c8:7a:43:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:40:08 2025 by rpki-client