Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/5e6a8f-0b79-4894-b91c-eecee893c527/1/7KdPfqVurJOVSaLkWXWzq4mZ7Os.roa
File: 7KdPfqVurJOVSaLkWXWzq4mZ7Os.roa (raw, json)
Hash identifier: CnhNzliMzR9DjKY7bB4cIzxuolcrDSTEIuqKcSnIIzw=
Subject key identifier: EC:A7:4F:7E:A5:6E:AC:93:95:49:A2:E4:59:75:B3:AB:89:99:EC:EB
Certificate issuer: /CN=1b0bb51a7b532be4d44ba604ae6e063f063f37d4
Certificate serial: 01856CE60C2D9C7A13A28EBD9A41865545AB
Authority key identifier: 1B:0B:B5:1A:7B:53:2B:E4:D4:4B:A6:04:AE:6E:06:3F:06:3F:37:D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gwu1GntTK-TUS6YErm4GPwY_N9Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/5e6a8f-0b79-4894-b91c-eecee893c527/1/7KdPfqVurJOVSaLkWXWzq4mZ7Os.roa
Signing time: Sun 01 Jan 2023 10:34:53 +0000
ROA not before: Sun 01 Jan 2023 10:34:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 206429
IP address blocks: 185.186.196.0/22 maxlen: 22
2a0b:8580::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:e6:0c:2d:9c:7a:13:a2:8e:bd:9a:41:86:55:45:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b0bb51a7b532be4d44ba604ae6e063f063f37d4
Validity
Not Before: Jan 1 10:34:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=eca74f7ea56eac939549a2e45975b3ab8999eceb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:bb:09:25:ed:47:a4:49:44:1a:ef:0b:dc:8f:
98:cb:68:cf:95:51:e4:a2:46:2d:44:23:d1:21:df:
0c:5e:4f:c3:0b:e3:74:c4:eb:d5:ae:1d:6f:21:6a:
ad:74:0a:bd:9c:2e:68:49:e5:72:60:2c:55:07:30:
13:bc:84:43:ca:07:6e:f9:e5:68:53:2f:ec:f9:33:
71:71:8d:c1:16:89:d9:a1:69:97:af:7f:98:47:ad:
04:3e:d4:42:7d:25:06:71:ff:5e:cc:08:b3:92:c4:
ce:78:40:70:e9:e0:84:47:02:0e:d0:1b:30:e7:da:
a6:73:8b:7b:9f:c7:d3:6c:d9:52:5d:8b:34:86:1d:
1b:6d:4e:10:8a:f1:10:34:fc:f1:57:27:b6:62:68:
0c:a3:16:3f:4d:7e:c6:e1:ce:68:d6:f6:f9:4d:4e:
2d:9a:52:14:be:eb:1e:a5:76:24:53:a5:05:d7:8e:
cb:b6:15:86:49:ad:ae:b5:f7:ee:c7:f6:35:63:5b:
03:ff:52:56:20:76:53:a2:5b:3e:62:b0:cf:73:d8:
75:be:29:df:92:19:74:44:18:9b:51:01:a8:18:b7:
1b:67:26:98:84:be:93:f3:46:62:21:23:ba:e0:6d:
1b:88:d6:db:c8:bc:ff:6c:eb:99:7d:88:aa:1d:2b:
6c:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:A7:4F:7E:A5:6E:AC:93:95:49:A2:E4:59:75:B3:AB:89:99:EC:EB
X509v3 Authority Key Identifier:
keyid:1B:0B:B5:1A:7B:53:2B:E4:D4:4B:A6:04:AE:6E:06:3F:06:3F:37:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gwu1GntTK-TUS6YErm4GPwY_N9Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/5e6a8f-0b79-4894-b91c-eecee893c527/1/7KdPfqVurJOVSaLkWXWzq4mZ7Os.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/5e6a8f-0b79-4894-b91c-eecee893c527/1/Gwu1GntTK-TUS6YErm4GPwY_N9Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.186.196.0/22
IPv6:
2a0b:8580::/29
Signature Algorithm: sha256WithRSAEncryption
0d:3a:61:00:bf:f8:15:17:c9:1b:8d:50:9e:f6:f6:9e:eb:47:
45:e9:c3:81:2c:b3:28:01:0c:c3:72:8f:c0:1c:14:a7:f8:1a:
1b:7f:4b:e3:33:fe:f9:e3:8f:19:6d:67:5f:20:bf:0c:35:4f:
f1:ab:89:2e:6f:fe:cf:d7:30:b5:b3:52:8e:72:25:04:07:32:
d6:54:04:9c:d9:a9:98:18:1a:bc:a3:9b:b5:af:48:6b:3a:43:
bc:e6:70:d3:8b:71:25:c2:27:4c:04:41:4e:60:3f:f2:50:69:
8f:53:29:a2:fb:3f:81:00:26:ad:56:54:d3:fb:23:3a:5b:2d:
e3:af:a9:f0:93:34:3e:de:0d:a2:78:e5:0f:8b:76:5f:77:16:
ad:ef:57:e2:e5:a9:78:65:f1:08:9c:33:1a:a0:b5:79:8f:47:
9c:d5:bc:ba:37:61:93:ee:4e:1c:ef:79:43:c3:5e:7d:59:ff:
52:11:9f:a1:86:7a:0d:cb:48:74:a8:76:90:03:b9:bf:5f:d6:
4c:01:40:3f:1c:81:cd:ce:2f:58:b3:ab:7c:9a:b2:e8:4c:88:
dd:c2:1b:84:d6:5f:3f:61:4d:9b:97:16:51:ec:8d:b4:25:de:
94:83:26:6a:40:10:46:e2:2a:e7:e8:15:0f:42:fa:e6:76:7c:
27:67:0e:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:51:55 2025 by rpki-client