Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/54560f-9f39-469d-80cf-10d02a710216/1/EGnmM2wVMqJLntTcgDGU7znYv7c.roa
File: EGnmM2wVMqJLntTcgDGU7znYv7c.roa (raw, json)
Hash identifier: Bu3yW0I7bzwPNxcVAKRDv1V3C8AYG3+UWoK1onNW2P4=
Subject key identifier: 10:69:E6:33:6C:15:32:A2:4B:9E:D4:DC:80:31:94:EF:39:D8:BF:B7
Certificate issuer: /CN=6ffce16ffd6a9ba9c57314558a447fabf6c5c0da
Certificate serial: 0194228E3CD1CDFE1FB5E13DFB3140DFC32F
Authority key identifier: 6F:FC:E1:6F:FD:6A:9B:A9:C5:73:14:55:8A:44:7F:AB:F6:C5:C0:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b_zhb_1qm6nFcxRVikR_q_bFwNo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/54560f-9f39-469d-80cf-10d02a710216/1/EGnmM2wVMqJLntTcgDGU7znYv7c.roa
Signing time: Wed 01 Jan 2025 15:48:54 +0000
ROA not before: Wed 01 Jan 2025 15:48:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206694
IP address blocks: 185.122.120.0/24 maxlen: 24
185.122.121.0/24 maxlen: 24
185.122.122.0/24 maxlen: 24
185.122.123.0/24 maxlen: 24
193.53.86.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8e:3c:d1:cd:fe:1f:b5:e1:3d:fb:31:40:df:c3:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ffce16ffd6a9ba9c57314558a447fabf6c5c0da
Validity
Not Before: Jan 1 15:48:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1069e6336c1532a24b9ed4dc803194ef39d8bfb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:37:f5:a0:68:d3:aa:ad:ac:81:78:8b:7d:41:
b2:31:89:84:50:67:1a:0d:b2:cf:ce:59:2a:b1:69:
b1:9b:83:5d:c3:68:2e:2c:97:33:3a:69:5d:f3:1a:
7a:2e:7c:4f:69:7d:99:63:33:31:61:81:6c:fd:5d:
e9:b4:9b:8d:f7:e5:15:d3:d5:09:6a:53:80:0d:f3:
ee:01:4c:12:b4:1b:a3:98:5b:7f:50:c5:1f:38:67:
ad:8a:6f:ff:a1:a4:08:9f:fa:94:66:06:ec:14:20:
7e:7d:13:ee:8c:42:12:e2:dc:96:84:b1:f7:8f:a9:
2e:db:ba:3f:2e:68:1b:2f:80:0f:7b:58:17:72:82:
5f:f2:a9:b1:12:0b:ad:45:dc:18:2f:32:5c:6c:1a:
da:e3:9e:03:5a:58:f3:5f:fb:3f:65:bc:95:1f:b2:
50:b5:c5:0a:fa:9f:9f:14:0e:1a:ca:8b:e5:d8:98:
9d:06:d8:b1:5b:aa:38:bd:c7:f1:2f:fd:c5:2f:c2:
77:fe:ac:16:d8:35:ab:85:3d:4d:ef:cb:21:16:62:
47:1f:25:b5:33:59:4b:c2:27:5c:df:27:47:65:80:
18:74:fc:8b:74:ee:bf:98:e6:7c:a4:64:73:93:0b:
40:1f:e2:3f:71:ca:ee:b5:c4:5e:7b:fb:b8:f1:7c:
75:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:69:E6:33:6C:15:32:A2:4B:9E:D4:DC:80:31:94:EF:39:D8:BF:B7
X509v3 Authority Key Identifier:
keyid:6F:FC:E1:6F:FD:6A:9B:A9:C5:73:14:55:8A:44:7F:AB:F6:C5:C0:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b_zhb_1qm6nFcxRVikR_q_bFwNo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/54560f-9f39-469d-80cf-10d02a710216/1/EGnmM2wVMqJLntTcgDGU7znYv7c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/54560f-9f39-469d-80cf-10d02a710216/1/b_zhb_1qm6nFcxRVikR_q_bFwNo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.122.120.0/22
193.53.86.0/24
Signature Algorithm: sha256WithRSAEncryption
20:e0:0e:bb:9e:24:83:b6:94:a0:0e:d7:bc:b4:cf:10:7b:4f:
a4:47:86:c9:8c:22:d8:07:f7:23:b0:51:b8:4f:eb:c0:ef:1f:
b0:38:97:a3:26:d3:02:19:d3:91:8a:25:21:08:67:f9:67:82:
88:6c:15:40:90:02:19:f4:48:51:b2:1e:82:59:c6:16:1c:9e:
4f:7b:69:ab:c8:89:8a:c5:9a:02:ab:da:96:95:89:46:02:65:
b0:d3:65:92:46:04:6e:88:ce:1d:ea:ce:16:f5:a1:78:10:84:
41:a6:42:47:7d:20:66:83:ae:38:f0:ef:4d:61:43:d0:9b:60:
ec:c4:67:c4:63:62:24:ce:34:b0:3e:d0:94:03:f9:97:7d:51:
e9:4b:7b:67:cd:d7:aa:fe:d2:0f:dd:20:ff:29:48:af:dd:e1:
b9:e0:ef:8d:26:e2:ad:7d:dc:df:8f:5d:88:72:10:01:7c:2f:
cb:a1:8e:d8:31:c2:25:43:e8:90:30:36:86:ef:94:3b:b1:03:
6e:9d:fb:ec:fb:0e:bd:ef:61:6a:1b:cd:99:9f:f2:b6:99:7d:
87:be:91:27:f8:97:b1:70:6d:5e:0c:f9:6d:8b:57:77:22:08:
4b:51:5a:b9:8e:5b:2d:dc:38:9e:ea:2c:8c:93:37:0f:62:07:
ee:9e:b3:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:05:41 2025 by rpki-client