Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/710934-304b-4f5f-950e-12e8276fdac4/1/VlN03NzU22VqBJjuuSiWL-bZBd4.roa
File: VlN03NzU22VqBJjuuSiWL-bZBd4.roa (raw, json)
Hash identifier: zL/CNitpQTOFbWlPrnFZSimJtQPUsRcwGyao+n9vr6I=
Subject key identifier: 56:53:74:DC:DC:D4:DB:65:6A:04:98:EE:B9:28:96:2F:E6:D9:05:DE
Certificate issuer: /CN=987277fc47d848fa5634ce8031a174fc249fa673
Certificate serial: 01946A6B0773AEC3C5C81760CB93662D0BA4
Authority key identifier: 98:72:77:FC:47:D8:48:FA:56:34:CE:80:31:A1:74:FC:24:9F:A6:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mHJ3_EfYSPpWNM6AMaF0_CSfpnM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/710934-304b-4f5f-950e-12e8276fdac4/1/VlN03NzU22VqBJjuuSiWL-bZBd4.roa
Signing time: Wed 15 Jan 2025 14:43:06 +0000
ROA not before: Wed 15 Jan 2025 14:43:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 203217
IP address blocks: 185.194.8.0/22 maxlen: 22
185.194.8.0/23 maxlen: 23
185.194.8.0/24 maxlen: 24
185.194.9.0/24 maxlen: 24
185.194.10.0/23 maxlen: 23
185.194.10.0/24 maxlen: 24
185.194.11.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:6a:6b:07:73:ae:c3:c5:c8:17:60:cb:93:66:2d:0b:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=987277fc47d848fa5634ce8031a174fc249fa673
Validity
Not Before: Jan 15 14:43:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=565374dcdcd4db656a0498eeb928962fe6d905de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:7e:5c:7e:54:8d:fe:7f:5e:03:e6:fd:e3:47:
fc:38:24:f6:67:de:db:24:16:9c:9b:f6:c3:10:54:
74:0c:e1:5d:88:74:46:07:4c:a5:3b:d3:a4:0a:4f:
1f:00:12:7b:6e:a0:c0:d1:1a:81:cb:48:f9:05:92:
1b:15:3b:48:51:8e:8b:82:8a:b7:fe:61:c8:4d:31:
ae:fb:fe:ef:f3:4f:db:1c:de:15:3e:84:6b:57:c9:
62:71:8f:7c:a1:07:1b:26:98:2e:bf:c9:f0:cc:83:
2a:1e:30:9c:73:85:3a:24:d6:b8:88:81:0a:ae:85:
5b:33:41:2c:d0:8e:56:00:35:0a:28:8e:97:2c:88:
0e:15:90:cf:bc:64:f8:b6:7c:18:81:73:d8:0b:84:
21:1e:e7:bf:27:5a:79:fb:d3:66:08:68:d3:13:81:
e3:82:92:69:b4:5f:29:bd:49:04:dd:b5:9b:42:f8:
1d:b5:5c:e0:d5:e8:98:0a:59:2b:fc:72:e8:f9:de:
2e:b9:fe:34:f1:d0:af:bd:ba:91:2a:a1:aa:eb:50:
28:77:7d:7c:b6:2c:d8:a6:93:15:21:1c:61:2c:b6:
a7:13:ac:7f:a7:30:f4:4f:11:e8:9c:fb:6b:95:b0:
40:ad:d0:b4:5f:9f:29:f6:77:bf:fb:7a:8d:b2:fa:
d1:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:53:74:DC:DC:D4:DB:65:6A:04:98:EE:B9:28:96:2F:E6:D9:05:DE
X509v3 Authority Key Identifier:
keyid:98:72:77:FC:47:D8:48:FA:56:34:CE:80:31:A1:74:FC:24:9F:A6:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mHJ3_EfYSPpWNM6AMaF0_CSfpnM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/710934-304b-4f5f-950e-12e8276fdac4/1/VlN03NzU22VqBJjuuSiWL-bZBd4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/710934-304b-4f5f-950e-12e8276fdac4/1/mHJ3_EfYSPpWNM6AMaF0_CSfpnM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.194.8.0/22
Signature Algorithm: sha256WithRSAEncryption
0d:9e:4e:3b:d2:ea:19:20:4a:ec:2d:98:30:16:8a:dc:45:3f:
3c:d6:f1:0e:90:0a:ae:bb:e9:21:c5:3d:43:db:9f:51:74:24:
d3:b2:81:51:bb:05:59:c2:ed:36:a7:5a:2c:15:19:55:4f:5a:
1c:b0:e3:94:af:b6:3c:d6:09:bb:99:18:18:c8:15:c2:81:ca:
1f:10:8b:2a:a2:74:52:1c:2d:e3:38:9b:03:53:0d:13:78:55:
f2:ef:b7:37:f3:26:21:d3:26:34:ca:fd:59:ff:f4:85:83:74:
d2:99:08:27:18:79:0f:a8:d7:8e:49:18:7e:17:9d:e8:4c:69:
3a:63:a3:de:a5:6d:6f:72:b6:44:68:52:17:de:f3:e2:bb:b1:
0a:bc:1f:51:f5:84:86:52:c3:a3:b8:c8:4a:97:ee:55:f2:50:
a4:7b:88:14:ab:ce:3c:24:c2:c5:ae:8d:08:15:e2:b4:0d:98:
6e:d7:30:68:18:fd:13:f0:92:4d:13:0c:2b:c1:0b:81:4d:4b:
ff:ca:1b:e7:bb:2e:d9:c7:f3:6f:2f:57:9c:54:fb:f4:44:38:
46:8d:3d:84:05:35:9f:0a:3c:76:f2:ce:e0:53:b7:25:34:c2:
b2:79:59:00:93:da:61:fe:ba:51:ea:24:1b:42:50:7f:1a:eb:
06:46:bf:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 06:00:48 2025 by rpki-client