Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/c27300-fb95-49d4-8657-099bf7343e2c/1/7BGirnEkwzmDaMHYb7_OyeObZ-o.roa
File: 7BGirnEkwzmDaMHYb7_OyeObZ-o.roa (raw, json)
Hash identifier: Mqe4eHaFftNeUPq4ztkhypVdBvRsFekv3LwUY3g3YP4=
Subject key identifier: EC:11:A2:AE:71:24:C3:39:83:68:C1:D8:6F:BF:CE:C9:E3:9B:67:EA
Certificate issuer: /CN=2445ef0cf2e297489d197370f885d59f89e95aab
Certificate serial: 0194228D32B1DF96A236856B8501D800E37C
Authority key identifier: 24:45:EF:0C:F2:E2:97:48:9D:19:73:70:F8:85:D5:9F:89:E9:5A:AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JEXvDPLil0idGXNw-IXVn4npWqs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/c27300-fb95-49d4-8657-099bf7343e2c/1/7BGirnEkwzmDaMHYb7_OyeObZ-o.roa
Signing time: Wed 01 Jan 2025 15:47:46 +0000
ROA not before: Wed 01 Jan 2025 15:47:46 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206596
IP address blocks: 185.181.180.0/22 maxlen: 22
185.181.180.0/23 maxlen: 23
185.181.180.0/24 maxlen: 24
185.181.180.0/25 maxlen: 25
185.181.180.128/25 maxlen: 25
185.181.181.0/24 maxlen: 24
185.181.182.0/23 maxlen: 23
185.181.182.0/24 maxlen: 24
185.181.183.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:32:b1:df:96:a2:36:85:6b:85:01:d8:00:e3:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2445ef0cf2e297489d197370f885d59f89e95aab
Validity
Not Before: Jan 1 15:47:46 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ec11a2ae7124c3398368c1d86fbfcec9e39b67ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:62:81:12:40:11:85:fe:aa:f4:5f:8a:27:04:
b2:51:e7:7e:f3:89:82:86:00:f3:14:2c:c7:15:c5:
d7:d0:a4:50:19:a8:a1:57:f4:71:af:e6:c4:d3:88:
34:31:2c:50:a1:44:e7:fa:c9:8f:31:00:f3:47:aa:
27:ea:b8:cf:f0:73:4d:22:50:52:45:80:0f:2c:66:
bf:d8:d9:e3:c3:2d:85:dd:a5:bb:01:d5:81:b1:4e:
8d:d6:69:80:ca:71:60:a4:3b:8a:f7:8a:4c:47:39:
ce:75:19:fb:9c:2c:56:1c:25:33:85:c6:dc:d9:d6:
11:4f:30:ab:5c:98:39:ed:cf:77:fe:cb:19:03:d0:
ed:2f:6f:a1:43:92:b2:6b:33:9f:8b:eb:b9:3f:9d:
31:d3:bb:0b:b7:d6:a6:9e:4e:f5:64:9d:43:54:ef:
a7:fe:72:f4:38:a4:75:e3:14:d1:e5:17:f4:35:0a:
70:1c:87:9a:63:9b:80:45:47:60:09:bf:6c:5b:5b:
19:ec:bd:64:40:f9:c9:e2:ea:3d:a1:2f:ef:cd:24:
82:58:37:e8:1a:93:f4:24:c4:fc:bf:69:c7:c6:de:
f5:e7:28:42:ce:62:c2:15:d4:0c:96:9a:38:e5:87:
42:f8:21:59:f1:9e:f0:3e:a6:b6:07:7f:b2:b2:76:
65:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:11:A2:AE:71:24:C3:39:83:68:C1:D8:6F:BF:CE:C9:E3:9B:67:EA
X509v3 Authority Key Identifier:
keyid:24:45:EF:0C:F2:E2:97:48:9D:19:73:70:F8:85:D5:9F:89:E9:5A:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JEXvDPLil0idGXNw-IXVn4npWqs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/c27300-fb95-49d4-8657-099bf7343e2c/1/7BGirnEkwzmDaMHYb7_OyeObZ-o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/c27300-fb95-49d4-8657-099bf7343e2c/1/JEXvDPLil0idGXNw-IXVn4npWqs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.181.180.0/22
Signature Algorithm: sha256WithRSAEncryption
35:a4:61:48:5e:82:00:c8:8d:86:50:a0:94:67:db:e0:34:3d:
0b:ab:c6:1b:f4:2f:62:0c:cb:87:8d:99:55:07:f0:1c:81:67:
61:b0:73:0e:ae:24:74:55:3f:41:3a:d5:e9:12:83:5e:06:2e:
23:94:26:f0:75:2b:bf:41:dc:72:f8:20:17:5d:01:0f:8d:54:
a7:2b:e0:a8:ab:7d:d1:c1:9b:82:fc:6a:8f:cb:9a:53:69:f2:
40:ff:b7:6c:73:d4:7e:22:1b:84:fe:a2:0e:da:26:44:4b:e8:
2d:7a:7c:0b:fd:58:5f:50:7f:49:7c:25:e5:bc:5c:22:12:1f:
de:db:32:4d:db:8a:0c:7d:af:98:a6:ae:80:01:c7:56:17:70:
55:cf:fb:ab:52:f9:8c:ac:74:28:e7:da:c3:59:83:11:15:e1:
04:dc:92:63:37:f8:d6:e0:56:2b:59:96:d2:27:74:60:59:c8:
c3:7a:76:91:27:7e:5b:c1:30:5c:35:f6:5d:98:31:32:7d:40:
77:20:f5:a7:5a:14:b1:0e:e1:80:72:01:ef:04:6f:79:03:59:
78:14:81:30:66:78:33:01:01:42:8d:fb:7e:3d:b0:64:c7:e9:
63:ea:d4:1d:e7:6b:44:e8:89:7f:d4:63:9e:da:59:d3:d0:cb:
e6:b6:84:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:45:43 2025 by rpki-client