Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/1d5b0b-4b05-402c-8265-efcfba9907dc/1/7qj_io6GZjtuvcm2767a6DzG45o.roa
File: 7qj_io6GZjtuvcm2767a6DzG45o.roa (raw, json)
Hash identifier: uZEERrMTIFBh2BP5JXnes2utziAB8smvbZALk+ET43E=
Subject key identifier: EE:A8:FF:8A:8E:86:66:3B:6E:BD:C9:B6:EF:AE:DA:E8:3C:C6:E3:9A
Certificate issuer: /CN=39f7c7498fd9c9f28680495162b9eb76ad47c603
Certificate serial: 019420D662D2ED1AB000188CE965D8F34B9D
Authority key identifier: 39:F7:C7:49:8F:D9:C9:F2:86:80:49:51:62:B9:EB:76:AD:47:C6:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OffHSY_ZyfKGgElRYrnrdq1HxgM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/1d5b0b-4b05-402c-8265-efcfba9907dc/1/7qj_io6GZjtuvcm2767a6DzG45o.roa
Signing time: Wed 01 Jan 2025 07:48:28 +0000
ROA not before: Wed 01 Jan 2025 07:48:28 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 12337
IP address blocks: 185.250.108.0/24 maxlen: 24
185.250.109.0/24 maxlen: 24
185.250.110.0/24 maxlen: 24
185.250.111.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d6:62:d2:ed:1a:b0:00:18:8c:e9:65:d8:f3:4b:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39f7c7498fd9c9f28680495162b9eb76ad47c603
Validity
Not Before: Jan 1 07:48:28 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=eea8ff8a8e86663b6ebdc9b6efaedae83cc6e39a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:be:90:72:60:2b:9f:79:09:5c:60:40:17:ca:
0c:d8:d3:f7:91:36:ff:f5:c5:69:5a:49:f2:51:a2:
f5:2e:e4:2f:8b:fb:f6:2b:aa:d1:86:86:43:b5:fe:
fb:da:cb:47:88:65:b9:ad:30:08:67:c5:82:98:6b:
ba:27:2e:1f:03:01:80:2e:6c:e1:e4:08:e9:fc:f8:
e0:e4:d0:c4:93:56:99:00:e4:7b:52:89:69:1d:ca:
ab:a6:c4:99:a0:7c:bc:a1:ee:a3:4f:43:b7:5b:e6:
57:a7:30:e6:00:c7:39:bb:7c:0e:36:19:b2:1e:94:
98:65:d6:9b:97:da:37:06:bb:2a:f1:7e:e5:8c:28:
48:5c:f5:2a:28:6f:f3:77:9b:c1:31:a8:f3:ec:20:
cc:a7:18:ee:7c:d6:57:5e:ad:ac:79:ec:cb:b3:79:
19:9a:16:1c:44:0d:6b:ad:50:8d:c8:e3:f9:bb:a3:
5a:fa:3e:fc:66:44:cc:75:69:9b:65:43:35:36:4d:
19:53:c9:ee:d6:09:9a:15:f6:38:8e:77:d3:0a:16:
0e:a0:e4:47:ba:69:38:d2:9f:3d:e8:cc:89:b5:45:
ad:df:17:f6:4e:8c:ea:d0:17:77:96:d4:d4:ff:d7:
3d:1a:f6:5b:48:2d:c4:ae:cc:fc:7e:09:4f:58:6b:
ab:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:A8:FF:8A:8E:86:66:3B:6E:BD:C9:B6:EF:AE:DA:E8:3C:C6:E3:9A
X509v3 Authority Key Identifier:
keyid:39:F7:C7:49:8F:D9:C9:F2:86:80:49:51:62:B9:EB:76:AD:47:C6:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OffHSY_ZyfKGgElRYrnrdq1HxgM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/1d5b0b-4b05-402c-8265-efcfba9907dc/1/7qj_io6GZjtuvcm2767a6DzG45o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/1d5b0b-4b05-402c-8265-efcfba9907dc/1/OffHSY_ZyfKGgElRYrnrdq1HxgM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.250.108.0/22
Signature Algorithm: sha256WithRSAEncryption
5b:35:fb:d3:d8:f1:c9:1d:e9:80:1c:b4:16:9d:f4:af:b7:dd:
0a:41:38:04:d8:c4:95:4b:04:e0:1b:99:3b:c1:d1:89:ec:38:
cf:fa:d1:7e:12:28:09:57:64:06:85:20:84:d5:2c:e4:ac:af:
17:d8:81:42:ae:4d:b9:53:c7:da:e2:1b:db:f7:f9:4a:f0:b9:
eb:97:33:53:1f:69:fd:12:20:c9:84:93:8b:ca:88:28:4d:e3:
0c:68:f4:0b:85:3b:bb:43:07:f4:13:2c:70:24:69:dc:6e:1c:
ee:a0:9a:7e:59:c5:5d:bd:14:74:8d:ce:07:92:b1:1d:26:41:
a2:3b:cc:af:28:dc:ea:c0:07:19:9f:ce:56:ba:69:d5:be:98:
82:4e:65:c4:50:5a:2e:19:ae:0f:a7:5c:e3:68:53:92:45:6d:
9f:96:4a:fc:d4:98:06:3f:32:91:75:b2:4a:61:5b:77:3e:61:
97:ce:e8:2c:cf:eb:a8:8d:60:b8:54:ea:73:75:5d:a4:8d:45:
9d:f4:60:26:f7:62:a1:0a:7a:a8:97:f5:27:6b:b4:8e:17:fe:
3c:9b:fc:12:d9:10:79:ff:d2:17:82:b2:a1:65:47:1d:23:e3:
ea:f4:0c:a9:08:1f:86:1e:29:b0:50:2f:9f:20:a7:6f:a8:24:
f3:c1:fc:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 16:14:14 2025 by rpki-client