Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/150282-c9e0-44e3-aa12-570aed58c194/1/EdKEOZXwSgqw7Bu_DizXNwNUu7g.roa
File: EdKEOZXwSgqw7Bu_DizXNwNUu7g.roa (raw, json)
Hash identifier: YaLUi/WCyF+z1PE1hT5J9Z4ZVraA/YT5/9yCeg4jCDs=
Subject key identifier: 11:D2:84:39:95:F0:4A:0A:B0:EC:1B:BF:0E:2C:D7:37:03:54:BB:B8
Certificate issuer: /CN=aff35e383e9cd44a7249ac5d41b6dfadf4357b4f
Certificate serial: 01941FFA93DE567EBD9749C7DB506F5E7F4F
Authority key identifier: AF:F3:5E:38:3E:9C:D4:4A:72:49:AC:5D:41:B6:DF:AD:F4:35:7B:4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r_NeOD6c1EpySaxdQbbfrfQ1e08.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/150282-c9e0-44e3-aa12-570aed58c194/1/EdKEOZXwSgqw7Bu_DizXNwNUu7g.roa
Signing time: Wed 01 Jan 2025 03:48:23 +0000
ROA not before: Wed 01 Jan 2025 03:48:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44033
IP address blocks: 185.186.216.0/22 maxlen: 22
193.22.83.0/24 maxlen: 24
193.218.132.0/22 maxlen: 22
194.116.192.0/23 maxlen: 23
194.126.207.0/24 maxlen: 24
2001:67c:2118::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:93:de:56:7e:bd:97:49:c7:db:50:6f:5e:7f:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aff35e383e9cd44a7249ac5d41b6dfadf4357b4f
Validity
Not Before: Jan 1 03:48:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=11d2843995f04a0ab0ec1bbf0e2cd7370354bbb8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:f1:f4:f3:1f:af:e2:18:ed:fd:cc:14:e8:5f:
fa:74:47:13:1a:51:96:d2:09:0a:eb:26:44:a0:96:
f6:8d:77:cf:f8:0a:b6:c2:71:ae:4f:a4:15:3d:8f:
14:4d:18:1c:ee:45:cb:a2:2a:08:d8:54:08:d4:a0:
95:2d:09:4a:6b:1b:0d:b5:0a:05:3e:23:01:47:98:
f6:01:86:01:2b:51:b0:03:a7:1d:63:6a:57:70:12:
2b:6c:86:d9:ae:d5:12:4e:59:ad:66:75:de:6e:4c:
97:2b:a7:a2:af:2f:08:6b:f3:57:78:2d:5c:ea:a7:
10:93:96:54:5a:44:f6:a2:1c:d5:ad:f8:03:63:a9:
68:8e:5b:d9:51:d0:9c:7b:4c:b9:d5:dc:b3:c5:fc:
f1:03:9c:b3:99:f6:f0:54:cf:d2:66:82:58:b7:74:
96:4b:ec:43:c4:3c:a9:60:87:2d:9b:0a:37:0e:ce:
86:64:73:ba:80:e2:b8:d3:05:2d:41:35:d1:16:d8:
0c:0f:5d:5d:7f:e5:1c:15:d1:14:65:04:9c:b3:65:
6f:be:d0:98:4f:c4:a6:33:0d:8e:d8:ff:55:1d:76:
92:b1:56:e5:0b:da:b9:1b:64:fd:8d:e9:9a:4d:4d:
2b:83:d2:f2:20:a9:34:5e:ce:ac:32:ee:95:f1:0e:
d9:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:D2:84:39:95:F0:4A:0A:B0:EC:1B:BF:0E:2C:D7:37:03:54:BB:B8
X509v3 Authority Key Identifier:
keyid:AF:F3:5E:38:3E:9C:D4:4A:72:49:AC:5D:41:B6:DF:AD:F4:35:7B:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r_NeOD6c1EpySaxdQbbfrfQ1e08.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/150282-c9e0-44e3-aa12-570aed58c194/1/EdKEOZXwSgqw7Bu_DizXNwNUu7g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/150282-c9e0-44e3-aa12-570aed58c194/1/r_NeOD6c1EpySaxdQbbfrfQ1e08.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.186.216.0/22
193.22.83.0/24
193.218.132.0/22
194.116.192.0/23
194.126.207.0/24
IPv6:
2001:67c:2118::/48
Signature Algorithm: sha256WithRSAEncryption
18:c5:74:76:24:8b:95:ee:ba:76:cf:63:2e:54:cd:fe:03:71:
46:9c:6e:96:ff:9c:9d:c3:74:93:9e:73:50:e1:94:bb:63:1c:
9a:c9:d3:5a:f7:8d:6e:66:08:ae:2b:09:32:da:a4:18:d0:f3:
7b:ac:45:e5:b4:b9:db:a3:6d:17:ee:22:2a:73:cc:7a:03:94:
f1:d5:8b:3a:4c:52:13:28:f2:49:da:54:e5:9e:0e:0b:02:48:
49:cb:df:5f:29:12:83:19:72:fb:1a:c0:49:5b:3d:36:9e:ec:
26:da:f2:28:0d:55:73:f4:0a:04:e2:83:0e:7c:14:c8:85:48:
2e:ff:1b:06:56:2a:a3:b1:bd:40:c7:24:b0:61:34:a4:74:48:
4d:af:a9:e6:2f:53:fa:7b:1c:88:99:21:f0:ec:f3:ae:53:c3:
f5:47:2e:51:0f:36:31:80:29:fb:2c:51:78:98:de:45:7f:88:
ce:c5:28:4b:20:96:c3:74:f0:7e:5c:ae:e2:5e:83:7b:2e:c7:
dd:81:1c:5f:89:ca:c8:30:f6:a0:74:d9:fb:2e:60:6f:26:29:
87:ee:65:55:a7:7a:d6:f6:6a:f1:75:bd:50:b7:e3:b7:60:8f:
9f:f8:13:de:e8:a0:d5:7d:5d:13:47:ac:fb:c1:10:cb:86:05:
7a:62:0d:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 07:48:10 2025 by rpki-client