Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/0b252d-db4c-4256-ab06-06d14cf0a46b/1/fGQ3YVDh2zkecLRGo_WA_JJKmDU.roa
File: fGQ3YVDh2zkecLRGo_WA_JJKmDU.roa (raw, json)
Hash identifier: mv8AdpdjP5/diFcicEaZODtxwOkiTIPwxcyY8ZLf9hw=
Subject key identifier: 7C:64:37:61:50:E1:DB:39:1E:70:B4:46:A3:F5:80:FC:92:4A:98:35
Certificate issuer: /CN=ebc86c8c2d495c9ebe42665a1513de69a9bf6553
Certificate serial: 01942144096B042024718255C6D0D5D60016
Authority key identifier: EB:C8:6C:8C:2D:49:5C:9E:BE:42:66:5A:15:13:DE:69:A9:BF:65:53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/68hsjC1JXJ6-QmZaFRPeaam_ZVM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/0b252d-db4c-4256-ab06-06d14cf0a46b/1/fGQ3YVDh2zkecLRGo_WA_JJKmDU.roa
Signing time: Wed 01 Jan 2025 09:48:14 +0000
ROA not before: Wed 01 Jan 2025 09:48:14 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 203322
IP address blocks: 185.138.172.0/22 maxlen: 22
185.138.172.0/23 maxlen: 23
185.138.174.0/23 maxlen: 23
2a07:fc0::/29 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:44:09:6b:04:20:24:71:82:55:c6:d0:d5:d6:00:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ebc86c8c2d495c9ebe42665a1513de69a9bf6553
Validity
Not Before: Jan 1 09:48:14 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7c64376150e1db391e70b446a3f580fc924a9835
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:be:87:0b:cb:2a:b8:53:e1:29:6d:44:aa:96:
40:96:b1:8d:2d:a3:30:5b:07:44:f5:d3:74:a0:5b:
66:79:aa:e1:f9:39:7d:04:a4:70:8f:09:23:12:53:
4c:ed:5a:f4:c9:76:21:8e:75:ce:69:fd:a7:a7:eb:
3e:a6:ac:b4:db:ad:bb:6f:e7:67:e6:76:b6:0f:41:
7d:ed:68:af:e6:d7:af:a8:69:e8:e5:7c:e4:ae:c0:
41:55:53:b8:bd:0f:1b:44:40:52:b1:fd:57:64:7c:
50:51:d2:69:62:57:60:a7:8a:b8:16:78:68:45:c5:
88:e5:bf:c2:55:d5:4a:69:1f:4a:20:de:94:50:55:
a7:33:77:8e:44:b4:21:6c:dc:eb:e5:40:01:8f:41:
fa:9d:f4:41:00:de:bd:8b:d7:81:e6:5b:b7:f3:a1:
90:52:a5:06:d5:7d:e1:c5:b7:49:c0:c4:a3:06:8f:
30:e9:69:fd:32:74:23:96:21:13:e2:32:cc:70:cd:
39:b4:35:b5:28:c4:c1:c3:bc:29:be:00:60:a5:ff:
2e:18:d5:7d:96:c4:c3:1c:7a:c4:f5:05:d5:48:df:
ed:61:6f:06:bf:28:72:e0:09:b5:5d:1d:b8:f9:54:
15:e4:d7:9c:20:4d:52:f0:46:2a:d2:44:0f:31:98:
51:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:64:37:61:50:E1:DB:39:1E:70:B4:46:A3:F5:80:FC:92:4A:98:35
X509v3 Authority Key Identifier:
keyid:EB:C8:6C:8C:2D:49:5C:9E:BE:42:66:5A:15:13:DE:69:A9:BF:65:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/68hsjC1JXJ6-QmZaFRPeaam_ZVM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/0b252d-db4c-4256-ab06-06d14cf0a46b/1/fGQ3YVDh2zkecLRGo_WA_JJKmDU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/0b252d-db4c-4256-ab06-06d14cf0a46b/1/68hsjC1JXJ6-QmZaFRPeaam_ZVM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.138.172.0/22
IPv6:
2a07:fc0::/29
Signature Algorithm: sha256WithRSAEncryption
a0:47:70:7c:00:92:51:97:a5:20:a2:0c:32:cd:84:23:22:1f:
d3:91:47:da:e3:9f:b1:51:32:2f:71:f8:3c:ad:95:cf:8a:a3:
bf:39:d9:f8:07:12:84:e7:a9:ed:9a:1f:da:27:41:34:ab:4f:
c4:b9:fc:8d:fc:1b:36:b1:a7:4a:e5:94:0d:e3:bb:69:af:b7:
ed:fe:89:0f:cd:24:46:d2:3a:65:1e:c5:5b:51:3b:15:0e:68:
c4:b7:70:b9:c7:10:ed:d0:96:5e:4b:46:a2:1e:f7:93:cf:ea:
94:23:ec:a0:fa:79:79:82:41:ce:8d:e5:1a:92:0d:29:4d:a7:
c5:58:0b:33:02:9f:70:2f:c5:ba:e1:77:99:f0:65:43:80:94:
31:89:e9:d7:f2:da:db:5d:f2:a3:e8:50:d3:1c:fd:31:87:10:
55:e8:24:8a:d5:68:ce:cd:4f:21:17:27:ec:1a:3e:1d:66:99:
40:db:d9:65:35:50:43:2b:e5:0f:3a:41:7e:63:5d:56:2e:fc:
2b:1b:3c:c0:fc:c2:38:e5:74:47:3e:be:65:48:e0:f7:8b:ae:
e1:79:1e:0b:a8:70:5c:fd:62:c3:d7:02:70:1b:73:de:0b:e3:
6d:dd:12:ee:56:5b:06:e1:ee:47:22:13:21:7b:5a:7b:bf:76:
da:e0:45:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:33:21 2025 by rpki-client