Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/7eb409-7f13-486d-86a8-ae1b0acd28a8/1/Ao7-x_8NPg2IIluWIinvFu8yH0U.roa
File: Ao7-x_8NPg2IIluWIinvFu8yH0U.roa (raw, json)
Hash identifier: A3P+oKM2oi9ju+YskOIABqGTeUYgSje5pwMOXAO8OH4=
Subject key identifier: 02:8E:FE:C7:FF:0D:3E:0D:88:22:5B:96:22:29:EF:16:EF:32:1F:45
Certificate issuer: /CN=ed8e8797ea068357ad6bb03a35c95bd7034e1541
Certificate serial: 01942825ECC15CA63ABEA8AA4B8E34B0705E
Authority key identifier: ED:8E:87:97:EA:06:83:57:AD:6B:B0:3A:35:C9:5B:D7:03:4E:15:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7Y6Hl-oGg1eta7A6Nclb1wNOFUE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/7eb409-7f13-486d-86a8-ae1b0acd28a8/1/Ao7-x_8NPg2IIluWIinvFu8yH0U.roa
Signing time: Thu 02 Jan 2025 17:52:41 +0000
ROA not before: Thu 02 Jan 2025 17:52:41 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51840
IP address blocks: 185.27.58.0/24 maxlen: 24
185.27.59.0/24 maxlen: 24
185.218.148.0/22 maxlen: 22
185.218.148.0/24 maxlen: 24
185.218.149.0/24 maxlen: 24
185.218.150.0/24 maxlen: 24
185.218.151.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:25:ec:c1:5c:a6:3a:be:a8:aa:4b:8e:34:b0:70:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed8e8797ea068357ad6bb03a35c95bd7034e1541
Validity
Not Before: Jan 2 17:52:41 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=028efec7ff0d3e0d88225b962229ef16ef321f45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:36:fb:50:4e:7c:0d:b2:a3:b2:75:ca:ea:b2:
ec:a0:12:fa:79:11:01:62:8d:f1:c9:b9:a2:72:27:
e4:ba:d7:da:75:4f:fe:db:0d:1f:e1:a9:1e:93:28:
2b:51:47:b0:6b:48:e7:bf:65:22:a7:ad:fd:60:46:
5c:21:5c:b5:ed:4f:fa:ba:dc:e9:8a:b7:9e:28:0d:
3c:cf:21:7d:d9:78:8f:25:ee:f9:be:e0:ae:13:3a:
3b:8f:4e:e6:6c:c5:b5:c2:6c:ae:6b:7d:32:8a:17:
ca:27:22:1d:79:e8:b9:c1:4f:35:7f:70:93:e4:6c:
ab:69:66:93:da:b2:b6:9e:c9:ea:ae:e1:cf:44:1e:
f5:92:30:73:a7:3c:13:57:e8:69:16:1b:a0:21:0c:
c2:2c:88:87:d5:10:fd:b5:ef:d7:18:25:fd:48:9a:
50:4e:01:d8:a9:16:9c:c6:1f:34:9a:97:e6:51:95:
16:b3:cc:c9:dc:c6:d1:e4:62:13:39:17:f7:37:65:
eb:94:8f:77:fd:29:4c:cc:4e:55:c3:a5:ea:8f:5e:
b5:f2:25:6f:f7:09:a0:71:36:7d:5c:9b:82:13:f7:
47:e7:6e:db:bc:ea:cb:e6:24:58:fc:10:51:90:17:
fb:a0:5d:99:f2:cd:ef:f6:05:c4:7d:58:55:d1:ea:
3d:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:8E:FE:C7:FF:0D:3E:0D:88:22:5B:96:22:29:EF:16:EF:32:1F:45
X509v3 Authority Key Identifier:
keyid:ED:8E:87:97:EA:06:83:57:AD:6B:B0:3A:35:C9:5B:D7:03:4E:15:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7Y6Hl-oGg1eta7A6Nclb1wNOFUE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/7eb409-7f13-486d-86a8-ae1b0acd28a8/1/Ao7-x_8NPg2IIluWIinvFu8yH0U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/7eb409-7f13-486d-86a8-ae1b0acd28a8/1/7Y6Hl-oGg1eta7A6Nclb1wNOFUE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.27.58.0/23
185.218.148.0/22
Signature Algorithm: sha256WithRSAEncryption
bd:30:1a:ed:db:59:d5:f9:40:13:a1:0b:9a:f5:53:46:1f:27:
a6:b7:67:a8:77:73:a9:91:5b:b5:df:25:dd:d3:46:e4:4f:bf:
cd:ee:b2:9a:41:c3:ef:e3:23:84:4b:a6:98:b2:9f:1d:e0:3d:
32:b5:68:30:ac:9c:60:42:9f:76:aa:81:14:86:e0:0c:57:2b:
eb:d1:4e:a5:1a:04:25:de:4f:5d:b3:70:d1:3d:41:43:db:bf:
3f:23:de:89:c4:ae:da:fe:f7:76:57:6d:10:2d:5f:e1:42:3b:
e7:c1:bb:3b:f1:c6:89:64:74:36:78:02:5e:be:e4:8d:e5:6c:
97:86:5b:98:83:52:ab:88:fe:bc:65:48:df:93:3d:12:f7:38:
00:79:3c:35:6e:6d:4a:6b:3d:65:87:94:96:82:be:af:22:b2:
a6:1f:e4:16:d7:6b:0f:18:0b:89:ac:87:d7:c2:e7:98:c8:2e:
2d:84:cc:4b:df:74:99:2d:d5:f1:64:1a:88:37:07:c1:d5:3f:
82:23:af:45:42:c7:4c:96:d9:ab:cc:f5:94:b9:81:ad:47:64:
bf:5d:e8:a6:dc:76:fd:ad:f8:92:8e:1e:80:d7:e3:a8:b7:bb:
d4:a3:68:f6:e1:42:ea:67:b6:2a:f2:e3:26:6a:2e:3e:09:e7:
02:1d:c4:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:33:38 2025 by rpki-client