Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/2c4110-eaee-440b-820e-95cae09ff563/1/1qgt4GAyW_3c-IECItJTlUngLgw.roa
File: 1qgt4GAyW_3c-IECItJTlUngLgw.roa (raw, json)
Hash identifier: JMxnB6RQt5YXqrAyQkabjodjhDTimqSiK2ILClsZiRA=
Subject key identifier: D6:A8:2D:E0:60:32:5B:FD:DC:F8:81:02:22:D2:53:95:49:E0:2E:0C
Certificate issuer: /CN=790dc8145755101acc0888aa00bb28b995b9c4f1
Certificate serial: 0194274827955FC03A7A366A569DE4F4D721
Authority key identifier: 79:0D:C8:14:57:55:10:1A:CC:08:88:AA:00:BB:28:B9:95:B9:C4:F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eQ3IFFdVEBrMCIiqALsouZW5xPE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/2c4110-eaee-440b-820e-95cae09ff563/1/1qgt4GAyW_3c-IECItJTlUngLgw.roa
Signing time: Thu 02 Jan 2025 13:50:27 +0000
ROA not before: Thu 02 Jan 2025 13:50:27 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205787
IP address blocks: 185.206.180.0/24 maxlen: 24
185.206.181.0/24 maxlen: 24
185.206.182.0/24 maxlen: 24
185.206.183.0/24 maxlen: 24
2a0b:1640:1::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:27:95:5f:c0:3a:7a:36:6a:56:9d:e4:f4:d7:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=790dc8145755101acc0888aa00bb28b995b9c4f1
Validity
Not Before: Jan 2 13:50:27 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d6a82de060325bfddcf8810222d2539549e02e0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:6d:47:a8:b2:ae:87:8e:46:dc:e3:15:f6:0f:
14:c1:9a:4d:ee:99:36:01:97:59:14:7e:bc:f1:03:
27:bb:5a:31:8f:f3:ca:2d:d6:2d:6a:5d:2b:34:e7:
60:09:c3:8c:2d:f4:fe:0a:47:f6:da:87:cb:4c:07:
9c:e7:7a:dd:e1:1f:e6:94:1a:e6:a1:e6:93:a6:d2:
3c:be:c9:03:42:0e:79:bb:a9:84:72:53:04:87:19:
1a:0c:a9:5c:33:03:03:39:7e:a7:5c:76:88:ad:07:
8e:7b:a9:90:33:bd:dc:63:04:cb:9a:cd:0f:e0:c6:
fd:7c:7f:40:d8:06:93:c6:bf:92:85:f9:75:fc:8b:
4b:b2:61:6a:ae:31:b0:1e:41:4b:06:27:72:4c:24:
36:e9:f7:28:fb:75:87:f6:67:e7:a9:d2:d3:8d:3e:
23:e0:34:7b:ea:1e:ff:86:ca:cc:59:46:ac:bc:b4:
aa:59:a3:5d:e1:18:77:1b:27:d8:ed:80:fe:d3:d0:
ee:6c:9c:d2:fa:26:37:c5:5b:89:8b:e1:66:e4:f6:
39:25:de:3e:48:0a:6c:aa:cd:3f:66:55:c7:6b:79:
3f:e1:bf:f2:07:00:5d:79:35:d5:24:b4:d7:06:3f:
81:2d:7a:56:f8:f7:a5:63:61:5e:f5:cf:53:2c:e1:
44:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:A8:2D:E0:60:32:5B:FD:DC:F8:81:02:22:D2:53:95:49:E0:2E:0C
X509v3 Authority Key Identifier:
keyid:79:0D:C8:14:57:55:10:1A:CC:08:88:AA:00:BB:28:B9:95:B9:C4:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eQ3IFFdVEBrMCIiqALsouZW5xPE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/2c4110-eaee-440b-820e-95cae09ff563/1/1qgt4GAyW_3c-IECItJTlUngLgw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/2c4110-eaee-440b-820e-95cae09ff563/1/eQ3IFFdVEBrMCIiqALsouZW5xPE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.206.180.0/22
IPv6:
2a0b:1640:1::/48
Signature Algorithm: sha256WithRSAEncryption
00:c6:5c:0d:ad:f5:67:42:63:c2:99:a6:7c:79:5e:3c:1e:0e:
ad:e4:2f:78:e2:32:aa:1d:cc:7c:91:d9:a4:f8:2c:36:63:1f:
df:28:74:a3:0a:be:a6:a9:1d:9d:95:cd:63:0b:11:b2:e6:70:
39:d3:43:cf:04:b7:a1:1f:9b:e7:38:a1:5b:e9:f4:fc:62:52:
94:08:09:9d:8f:6e:53:15:d3:de:f5:e8:0b:39:33:cc:66:34:
05:b9:0a:71:ff:65:32:8c:f4:a5:ea:5a:c2:19:3c:5d:b2:8c:
21:98:c0:b4:81:7e:dd:ba:7a:7d:5f:09:83:96:ec:58:66:f7:
92:85:a4:a1:b9:87:38:2a:d8:a8:65:d8:b1:36:fa:cc:90:7e:
94:27:2d:b7:aa:5e:ba:8c:75:f3:dc:a1:ca:b9:e8:79:17:93:
44:00:f4:43:ef:ff:b4:c8:69:b3:08:d2:6c:08:0b:d4:62:4b:
75:21:9a:2d:17:06:72:4d:2b:a0:d9:e8:d8:f8:0c:65:52:1a:
76:ff:f6:ad:5b:1a:19:74:c0:72:3a:81:9b:6c:72:1c:bc:0c:
fc:9c:b0:89:f0:39:b4:e3:b4:37:cc:6c:52:3c:91:24:44:fd:
69:14:4b:52:f8:dd:10:e0:bd:8e:88:19:16:8a:6a:84:17:61:
1a:fb:4f:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:47:31 2025 by rpki-client