Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/e8f4b3-2120-4ecb-9609-cb9c58f510cb/1/oFHxOR-gmoi2f8hzooiT2H5qGbs.roa
File: oFHxOR-gmoi2f8hzooiT2H5qGbs.roa (raw, json)
Hash identifier: v7L5BEVhrfX9YxGEPwkVKzRUyMYIDLUuZIRykF3hjrE=
Subject key identifier: A0:51:F1:39:1F:A0:9A:88:B6:7F:C8:73:A2:88:93:D8:7E:6A:19:BB
Certificate issuer: /CN=af4ef4a8ed3711b6acd68c0f48f621831fd5aaae
Certificate serial: 01942067FCE9E71729965E6CEDAD355B599D
Authority key identifier: AF:4E:F4:A8:ED:37:11:B6:AC:D6:8C:0F:48:F6:21:83:1F:D5:AA:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r070qO03Ebas1owPSPYhgx_Vqq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/e8f4b3-2120-4ecb-9609-cb9c58f510cb/1/oFHxOR-gmoi2f8hzooiT2H5qGbs.roa
Signing time: Wed 01 Jan 2025 05:47:53 +0000
ROA not before: Wed 01 Jan 2025 05:47:53 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207141
IP address blocks: 185.164.252.0/22 maxlen: 24
185.164.252.0/24 maxlen: 24
185.164.253.0/24 maxlen: 24
185.206.236.0/22 maxlen: 24
185.206.236.0/24 maxlen: 24
185.206.237.0/24 maxlen: 24
185.206.238.0/24 maxlen: 24
185.206.239.0/24 maxlen: 24
2a0b:1b40::/29 maxlen: 29
2a0b:b400::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:67:fc:e9:e7:17:29:96:5e:6c:ed:ad:35:5b:59:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af4ef4a8ed3711b6acd68c0f48f621831fd5aaae
Validity
Not Before: Jan 1 05:47:53 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a051f1391fa09a88b67fc873a28893d87e6a19bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:d0:93:7a:8a:96:ec:9f:55:18:f3:a6:47:c2:
0f:c2:d5:9b:48:c4:72:ee:77:79:5b:2d:ee:f5:b4:
1a:0e:b2:3a:ac:fc:5a:18:cc:09:aa:ab:58:65:82:
ca:02:e4:ea:b2:e7:99:3f:75:1f:af:12:db:5d:71:
c7:c9:40:b9:f3:cb:eb:f0:99:54:b7:08:90:fd:a4:
bf:3f:fe:45:98:e3:7c:e7:53:de:d7:f4:e4:b7:4e:
59:02:f0:65:e4:8f:3d:a1:e8:41:04:20:b1:77:a6:
7d:fb:ec:e0:ba:f1:f7:92:57:9a:c4:a9:51:d9:74:
2c:3b:f0:9c:7c:28:3b:82:4e:e9:a8:50:c5:dd:2b:
3d:0f:0c:4e:7f:5b:9b:4e:36:55:fc:a0:19:83:10:
14:2a:0e:3a:0b:e3:32:94:03:6a:b8:22:9e:80:7e:
a7:6c:12:fc:0c:a0:e8:77:f2:13:08:20:73:f6:50:
9c:d3:a9:4d:45:eb:0f:67:7e:40:1b:83:f9:4d:28:
5d:42:47:00:64:14:07:02:18:6c:d5:09:5b:8e:f5:
82:09:a0:38:e8:f3:6c:eb:41:78:d6:67:2c:68:38:
01:cf:c3:1b:b8:b0:15:1b:83:a2:5c:fe:da:0d:ba:
15:17:67:61:5b:10:6c:7e:15:15:0c:44:a9:06:21:
c8:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:51:F1:39:1F:A0:9A:88:B6:7F:C8:73:A2:88:93:D8:7E:6A:19:BB
X509v3 Authority Key Identifier:
keyid:AF:4E:F4:A8:ED:37:11:B6:AC:D6:8C:0F:48:F6:21:83:1F:D5:AA:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r070qO03Ebas1owPSPYhgx_Vqq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/e8f4b3-2120-4ecb-9609-cb9c58f510cb/1/oFHxOR-gmoi2f8hzooiT2H5qGbs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/e8f4b3-2120-4ecb-9609-cb9c58f510cb/1/r070qO03Ebas1owPSPYhgx_Vqq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.164.252.0/22
185.206.236.0/22
IPv6:
2a0b:1b40::/29
2a0b:b400::/29
Signature Algorithm: sha256WithRSAEncryption
12:24:70:19:9d:60:f9:f0:d5:14:b8:45:35:42:cb:7f:47:4b:
51:da:07:cc:02:b7:80:d0:d4:3c:10:3d:9a:04:3d:0f:d9:d0:
5d:cf:3e:c5:74:fc:8c:3d:7f:9c:6d:2a:0d:e1:5c:9e:8b:c6:
b3:19:b8:21:28:23:92:b4:58:54:75:ea:51:e3:f3:a0:b2:f4:
a2:2b:94:7b:a5:b3:ed:e0:9c:24:9f:8b:58:e7:33:7c:c3:c6:
45:51:ff:ec:44:00:ff:7b:3d:84:a4:b9:97:3f:68:46:11:b5:
ca:eb:e7:24:50:6f:73:19:48:d9:e4:02:c3:d6:91:4d:9b:e7:
2a:6a:18:55:3e:7f:14:58:eb:23:2d:d3:b2:da:9a:04:a0:8c:
d7:3f:e3:6f:ad:89:bd:d4:87:08:da:b8:e1:43:6e:35:d1:48:
fc:34:60:3a:96:aa:6c:0c:eb:e2:00:92:9d:1b:d8:58:2a:ce:
21:1d:4a:36:69:d0:ef:ce:c7:fb:41:db:44:ea:ca:58:99:68:
87:32:61:2a:c4:a0:7e:b1:22:a5:67:ff:ce:5e:d8:20:5d:95:
33:29:ca:7e:7f:56:63:48:d7:ab:9a:91:6b:3b:f8:51:a1:2c:
bb:6f:78:b3:5a:6c:c2:98:e0:37:46:f8:61:11:95:4d:ad:6a:
7d:0e:50:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:03:51 2025 by rpki-client