Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/0c37c3-9990-4596-99e9-dd5ffd531571/1/fc7SRnOdKWMkfm35QHjuVP63CGg.roa
File: fc7SRnOdKWMkfm35QHjuVP63CGg.roa (raw, json)
Hash identifier: F0XX2FyPiZEkuc7OrHzEK+HUvlKEvHyVCeFAG2nOzHc=
Subject key identifier: 7D:CE:D2:46:73:9D:29:63:24:7E:6D:F9:40:78:EE:54:FE:B7:08:68
Certificate issuer: /CN=9e34b186271ccb89c5e58b30e70bd74109cc284a
Certificate serial: 01941FFA4BD97C64AB4A398A792C37EB0656
Authority key identifier: 9E:34:B1:86:27:1C:CB:89:C5:E5:8B:30:E7:0B:D7:41:09:CC:28:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/njSxhiccy4nF5Ysw5wvXQQnMKEo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/0c37c3-9990-4596-99e9-dd5ffd531571/1/fc7SRnOdKWMkfm35QHjuVP63CGg.roa
Signing time: Wed 01 Jan 2025 03:48:04 +0000
ROA not before: Wed 01 Jan 2025 03:48:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206406
IP address blocks: 185.72.216.0/24 maxlen: 24
185.72.217.0/24 maxlen: 24
185.72.218.0/24 maxlen: 24
185.72.219.0/24 maxlen: 24
185.187.92.0/24 maxlen: 24
185.187.93.0/24 maxlen: 24
185.187.94.0/24 maxlen: 24
185.187.95.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:4b:d9:7c:64:ab:4a:39:8a:79:2c:37:eb:06:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e34b186271ccb89c5e58b30e70bd74109cc284a
Validity
Not Before: Jan 1 03:48:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7dced246739d2963247e6df94078ee54feb70868
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:cc:12:42:da:d6:d8:a7:24:06:52:8b:97:ff:
ef:83:70:13:41:a7:22:0e:e9:5f:5d:47:57:e0:c0:
90:00:9a:70:69:4b:48:2b:55:5c:82:29:0e:5e:2a:
6e:a7:91:9f:63:92:c2:6e:b9:22:f7:3d:2b:30:bc:
72:9b:3c:1b:11:4a:fb:ae:e1:66:22:ac:d1:b4:c3:
51:df:98:8b:57:18:3f:53:55:79:18:8c:94:a5:1a:
42:a3:a8:99:56:ad:5a:7f:b3:9e:b1:b9:a9:e0:14:
d7:a4:0f:ea:b2:3c:00:d5:e0:ec:21:96:81:53:98:
cf:80:8a:23:cd:9a:4f:e1:4b:03:41:fd:e6:bd:9e:
01:4f:1e:51:f6:59:30:fb:e7:8f:07:50:6a:a0:dd:
94:2d:c8:8e:c1:aa:e1:0d:02:a0:12:b0:e6:42:75:
8f:25:8c:99:10:17:aa:88:13:3f:68:53:ba:dc:f5:
b3:46:3c:ed:60:c7:3d:7b:fb:d9:a9:e7:04:81:c3:
b0:c2:c9:fd:15:1f:a6:27:bc:bb:71:50:99:a6:c6:
0e:7a:96:77:e3:95:cb:ca:9f:fb:dd:d0:8d:74:b8:
d8:cd:21:12:62:0d:36:14:f7:b0:fd:71:17:86:b7:
f3:fd:f6:fa:d1:75:70:8e:69:06:9f:b2:9c:b8:39:
ac:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:CE:D2:46:73:9D:29:63:24:7E:6D:F9:40:78:EE:54:FE:B7:08:68
X509v3 Authority Key Identifier:
keyid:9E:34:B1:86:27:1C:CB:89:C5:E5:8B:30:E7:0B:D7:41:09:CC:28:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/njSxhiccy4nF5Ysw5wvXQQnMKEo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/0c37c3-9990-4596-99e9-dd5ffd531571/1/fc7SRnOdKWMkfm35QHjuVP63CGg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/0c37c3-9990-4596-99e9-dd5ffd531571/1/njSxhiccy4nF5Ysw5wvXQQnMKEo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.72.216.0/22
185.187.92.0/22
Signature Algorithm: sha256WithRSAEncryption
4c:94:97:2f:17:63:18:f8:4a:7a:34:4d:88:4b:4a:ef:9a:1c:
9c:23:c7:80:53:38:87:56:f5:c2:3f:6a:d7:0a:0a:05:85:01:
cf:54:b5:77:2c:cf:02:79:b6:b3:26:f0:aa:d0:63:30:a3:af:
3b:be:85:6d:41:82:e2:70:f1:d2:11:74:96:e9:57:2c:9f:0d:
c2:cf:9f:77:28:6a:19:53:0d:5b:b2:f1:d3:68:b2:ef:20:b3:
b7:95:de:31:49:e8:26:f8:65:ee:ed:20:b8:90:0c:54:ca:98:
8b:38:f8:ef:7a:87:b8:5e:44:58:2b:5d:84:87:5f:c7:cf:8d:
eb:e1:ef:03:27:d3:22:8f:0e:28:40:62:1d:8d:8d:7e:34:78:
a5:e0:90:d8:83:83:19:1d:76:6a:76:6c:7c:26:01:14:84:52:
4c:7c:1e:e8:59:59:c2:c8:96:38:c8:78:7f:aa:97:3f:48:b0:
80:8f:e1:54:e7:b0:38:80:18:3a:58:66:9c:34:91:b2:1b:c9:
cd:00:21:b5:74:43:44:f1:1b:b8:81:aa:4c:2c:2f:e2:ed:ef:
4a:4e:e0:f2:0a:d7:51:4a:84:3a:e5:2b:c9:4a:c9:90:8e:1d:
cd:cd:41:0c:10:47:a0:a3:34:06:82:72:67:e1:b5:90:ef:2a:
bb:30:71:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:08:33 2025 by rpki-client