Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/36fd43-b5f3-40cf-8631-518e7a35660a/1/SEFQEUahukCO25CLynieJYFwZgg.roa
File: SEFQEUahukCO25CLynieJYFwZgg.roa (raw, json)
Hash identifier: X7nkM3WeHmcxHA7JwfIjXwagYEA1ZAkZsVPWtjQPu3E=
Subject key identifier: 48:41:50:11:46:A1:BA:40:8E:DB:90:8B:CA:78:9E:25:81:70:66:08
Certificate issuer: /CN=d0e80414b947f1931f22bc9c878c17b7d23078eb
Certificate serial: 019421B1A52933441BE797D53C65978F4F31
Authority key identifier: D0:E8:04:14:B9:47:F1:93:1F:22:BC:9C:87:8C:17:B7:D2:30:78:EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0OgEFLlH8ZMfIrych4wXt9IweOs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/36fd43-b5f3-40cf-8631-518e7a35660a/1/SEFQEUahukCO25CLynieJYFwZgg.roa
Signing time: Wed 01 Jan 2025 11:47:57 +0000
ROA not before: Wed 01 Jan 2025 11:47:57 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 204947
IP address blocks: 185.63.100.0/22 maxlen: 24
185.234.172.0/22 maxlen: 24
2a0d:2100::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b1:a5:29:33:44:1b:e7:97:d5:3c:65:97:8f:4f:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0e80414b947f1931f22bc9c878c17b7d23078eb
Validity
Not Before: Jan 1 11:47:57 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4841501146a1ba408edb908bca789e2581706608
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:50:92:27:00:e9:82:1a:4b:a4:10:b7:30:06:
10:43:9b:bb:e9:5d:22:da:cb:89:58:97:28:11:3b:
2b:6d:03:e9:8c:04:bd:49:5b:68:69:e0:d0:de:cb:
5d:dc:3f:88:6c:70:a0:c1:e5:2d:77:b1:e3:99:a6:
12:3c:41:4b:38:0d:67:ea:2f:ae:0b:1c:70:5c:7e:
80:d0:d2:71:7d:9c:8b:37:3f:91:01:ed:45:3c:63:
8c:db:3a:60:7e:6c:b5:ab:db:f4:73:58:b0:99:43:
de:b5:bf:c7:70:5f:61:fe:18:04:96:33:9d:af:c1:
3c:19:a5:5b:1c:48:31:ee:13:6f:f2:da:3d:16:7b:
a5:4a:6e:21:07:ad:a7:b0:35:38:2b:53:44:76:94:
00:10:1a:b9:70:c3:51:3c:67:06:25:42:63:47:59:
64:8c:cb:16:92:7d:f1:ca:48:ad:24:fe:24:a1:ae:
c7:b9:14:84:3f:55:02:c9:73:d0:7f:5d:53:ea:7f:
98:12:4c:89:42:e4:3f:10:39:b7:a8:ff:a0:da:79:
dc:f7:b0:82:35:41:07:3b:14:23:0f:25:96:f8:b7:
90:14:ea:df:80:cf:d4:34:64:2c:cb:f2:3e:60:b1:
31:a7:a8:15:02:2b:78:51:bc:5f:99:89:b9:5f:04:
98:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:41:50:11:46:A1:BA:40:8E:DB:90:8B:CA:78:9E:25:81:70:66:08
X509v3 Authority Key Identifier:
keyid:D0:E8:04:14:B9:47:F1:93:1F:22:BC:9C:87:8C:17:B7:D2:30:78:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0OgEFLlH8ZMfIrych4wXt9IweOs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/36fd43-b5f3-40cf-8631-518e7a35660a/1/SEFQEUahukCO25CLynieJYFwZgg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/36fd43-b5f3-40cf-8631-518e7a35660a/1/0OgEFLlH8ZMfIrych4wXt9IweOs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.63.100.0/22
185.234.172.0/22
IPv6:
2a0d:2100::/29
Signature Algorithm: sha256WithRSAEncryption
5c:a6:11:35:5e:8c:0e:df:c9:c5:34:97:c7:82:28:9a:b5:6b:
e7:6d:39:52:4d:46:56:a5:65:ea:0c:b6:71:8b:97:4a:d6:1e:
c1:5b:af:54:b5:14:61:3b:88:fa:9e:49:0a:bd:94:4c:da:fb:
35:bc:48:a6:0b:a0:a3:fc:e0:36:b4:b7:a4:3c:38:a4:4b:fc:
ba:bf:b4:6e:c5:cb:ac:95:0d:a0:d4:41:2a:8e:b7:b8:a0:4f:
38:68:b4:3e:90:f1:22:a3:aa:d4:00:8b:be:fa:01:d7:49:1e:
54:c7:d2:e6:04:a1:c1:56:dc:17:0b:e9:60:2d:2e:6f:14:78:
26:d9:ca:3c:33:80:10:46:d1:db:5f:8d:fe:ab:03:69:e9:57:
5d:7f:0b:00:7e:a8:8c:1c:35:5e:67:e2:7d:cc:36:8d:45:f8:
3e:d0:1b:e1:97:7a:64:cd:28:49:dd:b7:fc:fd:a7:d5:d6:1c:
19:2e:37:68:04:2d:2e:ab:46:f6:53:01:ab:c2:7e:4b:a0:9b:
69:30:d1:a9:b6:3b:40:3f:4e:38:31:e1:2a:60:43:02:8f:93:
82:66:75:ee:26:72:d7:e6:86:00:0f:ab:5d:e5:23:18:c9:c7:
f5:ce:92:2b:5c:fb:4e:00:97:46:d0:e8:46:62:b4:eb:23:c3:
9b:c3:ac:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:18:24 2025 by rpki-client