Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/e0184d-64d0-4a15-a277-7ce809353b18/1/725G7dybLbuQKpUr5VC2q0wDs8E.roa
File: 725G7dybLbuQKpUr5VC2q0wDs8E.roa (raw, json)
Hash identifier: OC0qz7BZ0oC6fOW2Sqogh+LE8Hr7cjZ2nPkrOk5rs7g=
Subject key identifier: EF:6E:46:ED:DC:9B:2D:BB:90:2A:95:2B:E5:50:B6:AB:4C:03:B3:C1
Certificate issuer: /CN=80ef67a3dc3d71845e9b1555cff5ad31bb423a94
Certificate serial: 019426D9F31B308EB006CA2041FFBB70B8F3
Authority key identifier: 80:EF:67:A3:DC:3D:71:84:5E:9B:15:55:CF:F5:AD:31:BB:42:3A:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gO9no9w9cYRemxVVz_WtMbtCOpQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/e0184d-64d0-4a15-a277-7ce809353b18/1/725G7dybLbuQKpUr5VC2q0wDs8E.roa
Signing time: Thu 02 Jan 2025 11:50:05 +0000
ROA not before: Thu 02 Jan 2025 11:50:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206711
IP address blocks: 185.176.36.0/22 maxlen: 22
2a07:ee00::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:f3:1b:30:8e:b0:06:ca:20:41:ff:bb:70:b8:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80ef67a3dc3d71845e9b1555cff5ad31bb423a94
Validity
Not Before: Jan 2 11:50:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ef6e46eddc9b2dbb902a952be550b6ab4c03b3c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:30:03:e9:e1:d9:3f:8e:35:b5:c8:31:a7:87:
3f:16:78:13:05:56:06:d1:25:38:d7:b6:41:6f:9f:
74:aa:55:08:de:7e:b1:f2:6e:19:a5:be:17:d6:01:
8c:7c:8f:33:3d:77:da:75:e5:59:f4:31:9d:5b:e6:
36:9c:1a:e7:21:b4:ec:a3:f7:1d:07:c8:88:f4:d6:
d0:26:a6:2d:cf:af:00:8a:3f:e5:7b:c5:75:29:b6:
c6:16:ff:92:3d:1f:89:8e:8b:ae:ec:5e:a1:d1:a0:
08:a5:fb:bf:d1:91:ef:ed:09:6e:ae:67:17:86:30:
16:0f:80:7f:02:ae:dd:29:ea:29:ed:30:65:b2:3e:
af:b3:fc:b7:42:e0:3d:3a:1b:06:54:f1:96:ce:52:
f6:b8:9b:6a:94:43:58:c8:07:e7:54:85:f9:3a:df:
ea:a7:74:8e:7d:f6:ce:92:cc:bc:a0:fa:93:32:e5:
05:b9:f7:3b:9e:5d:61:74:10:47:85:81:cc:12:15:
9f:37:ec:a7:c2:73:6d:79:e7:cc:e2:4e:83:e5:cf:
45:fd:e2:00:7b:38:8a:e2:fe:20:06:25:2a:3f:a6:
ff:07:b9:ab:0a:c2:6f:9a:30:8c:8f:35:29:9b:2e:
49:8e:67:67:35:62:03:7f:d4:3a:54:16:56:1b:47:
78:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:6E:46:ED:DC:9B:2D:BB:90:2A:95:2B:E5:50:B6:AB:4C:03:B3:C1
X509v3 Authority Key Identifier:
keyid:80:EF:67:A3:DC:3D:71:84:5E:9B:15:55:CF:F5:AD:31:BB:42:3A:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gO9no9w9cYRemxVVz_WtMbtCOpQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/e0184d-64d0-4a15-a277-7ce809353b18/1/725G7dybLbuQKpUr5VC2q0wDs8E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/e0184d-64d0-4a15-a277-7ce809353b18/1/gO9no9w9cYRemxVVz_WtMbtCOpQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.176.36.0/22
IPv6:
2a07:ee00::/32
Signature Algorithm: sha256WithRSAEncryption
3a:3c:2c:00:3e:ae:41:98:43:7d:01:7a:f1:e3:8d:54:eb:3f:
9d:5a:23:7f:22:e7:6b:35:80:48:eb:f5:4b:3e:3c:b2:5b:8b:
be:87:8f:f6:e6:3d:f6:b0:c9:1a:71:7c:6f:57:f2:24:aa:46:
75:9a:85:0b:93:24:e4:a7:b8:d8:86:27:c7:f7:1b:c6:15:36:
f5:fb:ad:73:32:4b:b4:4a:0e:e4:d1:7c:66:e2:3c:13:fa:2b:
af:26:0c:96:bf:50:9a:e7:f6:e3:73:76:0f:8c:65:64:cc:3c:
b6:07:57:2d:06:27:fb:1c:ec:62:1b:f8:d7:bd:46:e0:f1:24:
77:73:af:7c:94:de:b7:a1:25:d7:19:46:80:53:69:80:2d:58:
a0:c9:13:4b:4d:8f:66:3e:bf:f4:f5:bf:31:48:35:4d:6b:27:
a7:ce:5d:49:44:14:a0:42:cc:fa:4b:51:8a:82:10:26:95:a6:
5a:aa:fd:12:45:1e:44:e8:5b:bc:18:c6:a8:2e:05:a4:4e:b7:
e4:fd:a7:80:5f:20:57:de:8a:e4:62:88:7a:d4:0f:d9:d4:b6:
85:28:4b:c0:63:cd:b6:0d:00:ed:19:8f:bd:6d:53:b1:a3:f1:
a1:c9:42:98:70:a4:f8:df:89:dd:6c:1e:d3:95:aa:ca:6f:6a:
f3:1e:e9:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 02:11:02 2025 by rpki-client