Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/f75c7d-e5b3-442f-a084-fd49eb3f19b1/1/fO5bykwkTB3KiAZuWcyGEBGhJE8.roa
File: fO5bykwkTB3KiAZuWcyGEBGhJE8.roa (raw, json)
Hash identifier: 3HfGLaMktk6F2ghb5LrLG+rGBzaC5K9KjLNpttW6IrQ=
Subject key identifier: 7C:EE:5B:CA:4C:24:4C:1D:CA:88:06:6E:59:CC:86:10:11:A1:24:4F
Certificate issuer: /CN=e0691dbafa3a8de070b07022de9adf74341fb4f2
Certificate serial: 019458CF0B4E3C4DC50B36B9E091BA6650BC
Authority key identifier: E0:69:1D:BA:FA:3A:8D:E0:70:B0:70:22:DE:9A:DF:74:34:1F:B4:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4Gkduvo6jeBwsHAi3prfdDQftPI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/f75c7d-e5b3-442f-a084-fd49eb3f19b1/1/fO5bykwkTB3KiAZuWcyGEBGhJE8.roa
Signing time: Sun 12 Jan 2025 04:39:11 +0000
ROA not before: Sun 12 Jan 2025 04:39:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212036
IP address blocks: 185.226.97.0/24 maxlen: 24
2a10:a780::/29 maxlen: 29
2a12:2e00::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:58:cf:0b:4e:3c:4d:c5:0b:36:b9:e0:91:ba:66:50:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0691dbafa3a8de070b07022de9adf74341fb4f2
Validity
Not Before: Jan 12 04:39:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7cee5bca4c244c1dca88066e59cc861011a1244f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:a8:0a:9c:fe:df:5c:37:b1:e0:1b:52:c9:54:
4e:7a:4e:46:ef:65:08:58:10:7b:65:7f:e5:15:26:
e6:d0:5f:7c:1e:5d:91:81:18:0b:e2:7c:90:56:73:
e4:eb:c4:f4:7e:9b:69:11:70:22:75:8d:26:a0:b1:
ab:28:4c:e5:65:82:61:f4:53:d2:ed:62:5a:b5:fd:
61:5f:c4:b4:8e:ea:7b:ac:03:3d:2a:03:7b:ad:4a:
7f:af:5f:ea:25:26:55:c4:54:5e:32:b9:91:98:f2:
81:cd:11:b7:a0:64:5b:de:55:21:c2:45:01:7a:98:
d7:24:8f:6e:14:79:e1:dd:d8:6c:57:22:1d:b4:e9:
1b:f8:0f:ad:32:cd:62:4a:94:a7:d1:45:14:e6:fa:
ea:67:79:9b:35:d0:51:72:68:70:98:01:fc:e4:fa:
31:91:3b:9f:c9:c7:20:bb:90:29:0c:86:e0:22:43:
74:75:62:42:6c:d2:54:4d:f4:42:72:7d:02:14:a4:
08:71:15:6a:cc:99:1c:08:b7:7d:0b:cc:8b:99:cd:
6e:29:48:d6:ce:54:54:2f:0a:f9:fd:cd:81:62:6d:
b7:01:79:93:75:e6:47:81:0b:7e:c0:0c:08:cc:34:
a7:20:31:b1:2c:08:3a:bf:82:bf:63:15:74:48:1e:
85:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:EE:5B:CA:4C:24:4C:1D:CA:88:06:6E:59:CC:86:10:11:A1:24:4F
X509v3 Authority Key Identifier:
keyid:E0:69:1D:BA:FA:3A:8D:E0:70:B0:70:22:DE:9A:DF:74:34:1F:B4:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Gkduvo6jeBwsHAi3prfdDQftPI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/f75c7d-e5b3-442f-a084-fd49eb3f19b1/1/fO5bykwkTB3KiAZuWcyGEBGhJE8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/f75c7d-e5b3-442f-a084-fd49eb3f19b1/1/4Gkduvo6jeBwsHAi3prfdDQftPI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.226.97.0/24
IPv6:
2a10:a780::/29
2a12:2e00::/29
Signature Algorithm: sha256WithRSAEncryption
37:12:57:99:cf:5b:b9:ed:5c:95:da:52:ac:68:71:17:9d:ca:
09:94:51:34:67:2e:28:f9:f6:cc:e4:d6:2a:0d:fd:3f:9c:80:
2e:e3:6e:95:85:e4:82:97:d1:9a:30:74:a2:b8:1a:90:8f:a6:
df:47:e0:1a:a5:73:37:3a:4e:9f:5b:fe:1e:cf:a2:00:1b:0d:
ae:a7:22:c0:34:ac:ca:53:93:e6:35:57:e5:29:23:c0:e3:ae:
cb:3e:d6:c9:2f:4c:2a:55:0a:fa:44:da:53:9a:c4:5c:8b:a8:
f3:a5:3f:03:72:ed:1b:3f:86:5a:ae:7b:33:80:2d:4b:28:a5:
9e:1e:1e:a9:17:86:42:d1:cb:60:55:aa:63:9d:19:3b:b5:78:
91:84:f6:4b:0b:a6:37:39:e7:09:2a:a7:cf:5a:e5:cf:5a:bd:
1d:e7:5b:c7:d4:fa:31:8b:07:a3:8b:d4:8d:9e:03:24:5f:71:
41:61:90:25:f8:98:7e:25:19:69:f9:bf:56:be:21:40:03:29:
c0:86:43:60:75:69:21:54:6b:e5:10:1d:af:14:35:2c:c8:97:
8c:46:00:8d:b0:d1:10:2f:fd:6c:8b:85:ae:8b:79:a3:fd:c3:
a1:fa:29:c2:84:9b:d6:a8:44:75:25:bb:94:bf:8e:5a:38:7b:
a1:0a:48:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 05:07:14 2025 by rpki-client