Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/36f83e-6be6-42c5-8380-114ad41cf331/1/7gE45KfXQALOMAUGdb2BAregZuQ.roa
File: 7gE45KfXQALOMAUGdb2BAregZuQ.roa (raw, json)
Hash identifier: FrGkbAlx02b1cSATN7WbBjpuh48y5i0oZZPxwkdVo9g=
Subject key identifier: EE:01:38:E4:A7:D7:40:02:CE:30:05:06:75:BD:81:02:B7:A0:66:E4
Certificate issuer: /CN=09253886a0250a04ec69be00bbf8433c2f014b7c
Certificate serial: 019425219890BEFD4680722A7C4953685C1A
Authority key identifier: 09:25:38:86:A0:25:0A:04:EC:69:BE:00:BB:F8:43:3C:2F:01:4B:7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CSU4hqAlCgTsab4Au_hDPC8BS3w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/36f83e-6be6-42c5-8380-114ad41cf331/1/7gE45KfXQALOMAUGdb2BAregZuQ.roa
Signing time: Thu 02 Jan 2025 03:49:06 +0000
ROA not before: Thu 02 Jan 2025 03:49:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 201128
IP address blocks: 185.84.180.0/24 maxlen: 24
185.84.181.0/24 maxlen: 24
185.84.182.0/24 maxlen: 24
185.84.183.0/24 maxlen: 24
194.110.168.0/24 maxlen: 24
194.110.170.0/24 maxlen: 24
194.110.171.0/24 maxlen: 24
2a05:a740::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:98:90:be:fd:46:80:72:2a:7c:49:53:68:5c:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09253886a0250a04ec69be00bbf8433c2f014b7c
Validity
Not Before: Jan 2 03:49:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ee0138e4a7d74002ce30050675bd8102b7a066e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:8c:6d:12:c1:21:ae:b5:f6:26:1c:3e:29:e8:
68:7a:67:53:bc:a0:a5:1c:26:d7:2d:c4:3a:d8:90:
88:c3:9c:f3:18:1c:31:35:7f:40:8c:6b:26:66:1d:
05:4d:b5:02:9a:de:a9:59:09:75:c4:d5:91:ac:df:
61:73:02:a5:51:82:bc:c9:09:8a:b0:5f:e9:0e:e8:
95:3b:bb:6b:48:b1:7b:e6:93:e6:8e:9d:c2:4d:f7:
bc:de:41:af:10:72:7b:38:c9:69:1d:52:f2:1a:a8:
b0:55:bf:eb:d0:d7:40:7e:f0:2e:d7:47:3e:6c:0b:
1f:e4:74:c6:97:0a:d3:1d:35:d8:d5:b3:27:63:4d:
9c:da:83:3a:d3:2d:e2:94:9d:fd:eb:63:64:37:b7:
78:dc:09:a2:74:82:88:f7:87:ce:80:f3:97:9c:47:
6f:be:6a:61:0c:d8:39:d6:0a:34:67:2c:b5:8b:d9:
6d:53:45:9b:e3:60:2f:8c:83:25:a6:1a:61:a3:4c:
7a:01:ff:eb:53:0e:b3:cc:67:43:37:1e:e8:65:98:
4f:d1:5f:ec:79:9e:f8:6b:f2:55:88:e6:e1:92:1a:
44:63:79:c2:78:4d:8d:67:0b:91:e8:ca:bd:d5:ca:
e3:7a:b5:03:ad:8e:f5:91:e3:e7:d8:e5:2d:c7:03:
b4:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:01:38:E4:A7:D7:40:02:CE:30:05:06:75:BD:81:02:B7:A0:66:E4
X509v3 Authority Key Identifier:
keyid:09:25:38:86:A0:25:0A:04:EC:69:BE:00:BB:F8:43:3C:2F:01:4B:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CSU4hqAlCgTsab4Au_hDPC8BS3w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/36f83e-6be6-42c5-8380-114ad41cf331/1/7gE45KfXQALOMAUGdb2BAregZuQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/36f83e-6be6-42c5-8380-114ad41cf331/1/CSU4hqAlCgTsab4Au_hDPC8BS3w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.84.180.0/22
194.110.168.0/24
194.110.170.0/23
IPv6:
2a05:a740::/29
Signature Algorithm: sha256WithRSAEncryption
45:56:0e:96:58:c8:5e:e8:e1:2a:b1:26:6e:6b:bc:bc:e9:5a:
48:54:a7:b1:86:05:7e:fd:b5:db:e0:bc:16:12:ff:e5:93:54:
a0:84:1e:29:9e:c3:e4:7e:eb:3d:60:8b:6b:9f:21:3b:59:14:
88:e4:1c:44:cb:b7:6d:a5:a2:76:db:1e:49:24:f8:e2:1d:80:
30:3a:8e:19:43:01:ed:54:ea:ed:5d:62:8a:09:ff:bf:96:59:
df:b4:e8:c5:0f:8c:a5:1f:54:54:32:13:c5:7c:70:1e:9d:f6:
a4:cc:19:1d:16:11:e0:88:fd:58:cc:19:ce:60:29:71:e7:04:
d8:95:86:8c:ae:3d:fa:ff:a6:48:2a:7a:c8:35:ad:f3:f0:c3:
b6:6c:8f:fc:69:cc:14:ef:ce:d1:54:56:5a:01:71:70:bb:37:
5b:10:8b:7d:99:b6:da:ca:dd:2a:81:0c:10:d8:e5:34:90:d8:
58:98:65:ee:da:e9:08:91:f5:83:38:8d:80:a2:9d:c3:0a:3b:
39:b5:5f:08:04:57:74:29:55:ed:46:88:65:38:fd:1f:b9:2f:
1c:44:16:e8:6c:9a:51:2f:81:a2:1e:c4:3e:3f:8c:01:06:5a:
09:6b:99:a2:46:be:8a:f6:61:be:b1:53:b1:c5:5a:35:31:6b:
f1:c8:ae:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 14:17:58 2025 by rpki-client