Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/865490-78e7-43b4-b2fd-1d0bf5208f90/1/7-MoQtEz0Sovzb__rGTdadrqw5M.roa
File: 7-MoQtEz0Sovzb__rGTdadrqw5M.roa (raw, json)
Hash identifier: U558036DeUJnZJMzXht2gtuVkX4ODtSCmM6m3SoWL4U=
Subject key identifier: EF:E3:28:42:D1:33:D1:2A:2F:CD:BF:FF:AC:64:DD:69:DA:EA:C3:93
Certificate issuer: /CN=ab27ed1cea4321c49c3ca10f3affafdbdad532c2
Certificate serial: 0194ACC2F9C876C3645B3DB9BF3BE8F18C48
Authority key identifier: AB:27:ED:1C:EA:43:21:C4:9C:3C:A1:0F:3A:FF:AF:DB:DA:D5:32:C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qyftHOpDIcScPKEPOv-v29rVMsI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/865490-78e7-43b4-b2fd-1d0bf5208f90/1/7-MoQtEz0Sovzb__rGTdadrqw5M.roa
Signing time: Tue 28 Jan 2025 11:54:06 +0000
ROA not before: Tue 28 Jan 2025 11:54:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202870
IP address blocks: 185.152.44.0/22 maxlen: 24
185.152.44.0/24 maxlen: 24
185.152.45.0/24 maxlen: 24
185.152.46.0/24 maxlen: 24
185.152.47.0/24 maxlen: 24
2a07:7e80::/29 maxlen: 32
2a07:7e80::/30 maxlen: 30
2a07:7e80::/31 maxlen: 31
2a07:7e80::/32 maxlen: 32
2a07:7e81::/32 maxlen: 32
2a07:7e82::/31 maxlen: 31
2a07:7e82::/32 maxlen: 32
2a07:7e83::/32 maxlen: 32
2a07:7e84::/31 maxlen: 31
2a07:7e84::/32 maxlen: 32
2a07:7e85::/32 maxlen: 32
2a07:7e86::/31 maxlen: 31
2a07:7e86::/32 maxlen: 32
2a07:7e87::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ac:c2:f9:c8:76:c3:64:5b:3d:b9:bf:3b:e8:f1:8c:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab27ed1cea4321c49c3ca10f3affafdbdad532c2
Validity
Not Before: Jan 28 11:54:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=efe32842d133d12a2fcdbfffac64dd69daeac393
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:c0:2c:34:83:d8:6d:3c:ac:76:ed:67:5b:bd:
1b:0d:ce:1d:08:df:76:b8:8e:41:13:87:f5:9d:b1:
f3:ba:5a:da:93:cb:1b:37:9f:af:00:9f:1e:62:b3:
cb:cf:84:16:78:9f:02:87:d7:8f:71:66:68:2c:fd:
66:ca:f2:19:f3:9e:4d:fa:cc:87:b6:e6:58:86:d0:
aa:68:d9:32:50:9b:38:41:11:3b:89:98:08:88:a3:
3a:3b:2e:48:e2:29:2a:94:77:89:52:d9:45:5f:2d:
30:73:d5:a4:5e:b3:43:dc:1b:bc:72:3b:3b:7e:eb:
c6:58:16:0e:34:bf:fa:63:54:03:0d:7b:a5:4b:11:
7d:90:25:b0:52:a1:22:cd:7d:cd:3a:93:d0:4b:09:
b1:ce:d6:b0:6d:a9:f9:ff:51:55:be:07:70:3a:57:
57:94:c6:29:04:7e:09:07:ef:2a:fd:5a:a5:30:b3:
a9:c2:c8:9c:2b:f0:53:8c:d1:3b:86:df:97:38:e3:
0e:76:83:6b:91:69:11:f2:30:6c:fb:4a:03:6e:99:
59:20:bf:a8:2e:87:58:ea:ae:43:60:3f:0a:d5:28:
12:36:85:3e:2a:6d:62:a9:16:d7:a3:66:1f:79:2c:
38:68:bb:ab:91:c8:ff:d4:3f:7f:aa:50:d8:0f:08:
b6:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:E3:28:42:D1:33:D1:2A:2F:CD:BF:FF:AC:64:DD:69:DA:EA:C3:93
X509v3 Authority Key Identifier:
keyid:AB:27:ED:1C:EA:43:21:C4:9C:3C:A1:0F:3A:FF:AF:DB:DA:D5:32:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qyftHOpDIcScPKEPOv-v29rVMsI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/865490-78e7-43b4-b2fd-1d0bf5208f90/1/7-MoQtEz0Sovzb__rGTdadrqw5M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/865490-78e7-43b4-b2fd-1d0bf5208f90/1/qyftHOpDIcScPKEPOv-v29rVMsI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.152.44.0/22
IPv6:
2a07:7e80::/29
Signature Algorithm: sha256WithRSAEncryption
24:4f:a8:34:ab:48:6d:db:72:16:b4:b5:f3:bf:e8:73:1f:e8:
31:9a:aa:a4:5a:d8:73:94:42:66:b4:5f:5b:72:2e:1a:b0:7c:
7c:4e:13:00:16:33:ac:29:95:e6:58:d9:00:33:cb:10:45:bc:
e3:35:33:62:b0:dc:5c:81:78:21:e2:d2:de:4e:35:13:2b:e0:
12:94:6e:0b:56:96:56:f8:94:dd:ed:32:ba:86:c1:72:96:65:
99:d3:5a:a9:ef:96:4f:4e:22:cf:99:21:7b:7f:7a:40:f6:41:
40:1f:45:05:d0:b1:30:ee:cb:7f:1f:3a:eb:3e:dd:85:ee:a2:
f6:f7:dd:9b:99:0f:1d:f0:12:30:79:b3:62:9a:40:bf:fb:d8:
02:b9:d0:e5:84:e0:af:54:08:d7:8a:3f:ce:44:a3:85:da:5c:
c9:ae:1d:21:1d:a1:04:8d:7a:2b:b3:86:46:bd:ba:e7:8c:15:
50:05:99:77:42:33:f7:d3:01:d7:ea:21:96:a8:83:f3:e1:35:
33:9a:02:2d:0d:b0:ad:ea:43:81:d1:2b:59:a6:76:75:f7:97:
07:4e:ea:83:98:bb:e7:33:79:ac:9f:70:c3:8b:96:5d:02:81:
2f:dc:91:9e:75:12:e4:24:89:ed:78:15:ad:04:17:fa:31:8d:
48:11:98:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:28:14 2025 by rpki-client