Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/1ac795-2e93-4056-93d9-684e855d7ddc/1/4Ks29m0KEvqQ2u_x82i2_AGUJYc.roa
File: 4Ks29m0KEvqQ2u_x82i2_AGUJYc.roa (raw, json)
Hash identifier: LAlVvGEw43G7VBWh8V8Fzw/Vs6vev/GRjzgqnNcn5CU=
Subject key identifier: E0:AB:36:F6:6D:0A:12:FA:90:DA:EF:F1:F3:68:B6:FC:01:94:25:87
Certificate issuer: /CN=2e03bff3e7352373238964647dfd893b26a3b349
Certificate serial: 01942445820D81E52501FEC157EC5C8E4299
Authority key identifier: 2E:03:BF:F3:E7:35:23:73:23:89:64:64:7D:FD:89:3B:26:A3:B3:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LgO_8-c1I3MjiWRkff2JOyajs0k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/1ac795-2e93-4056-93d9-684e855d7ddc/1/4Ks29m0KEvqQ2u_x82i2_AGUJYc.roa
Signing time: Wed 01 Jan 2025 23:48:42 +0000
ROA not before: Wed 01 Jan 2025 23:48:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202970
IP address blocks: 185.148.232.0/22 maxlen: 22
185.148.232.0/23 maxlen: 23
185.148.234.0/23 maxlen: 23
185.148.234.0/24 maxlen: 24
185.148.235.0/24 maxlen: 24
2a07:62c0::/29 maxlen: 29
2a07:62c0::/30 maxlen: 30
2a07:62c4::/30 maxlen: 30
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:45:82:0d:81:e5:25:01:fe:c1:57:ec:5c:8e:42:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e03bff3e7352373238964647dfd893b26a3b349
Validity
Not Before: Jan 1 23:48:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e0ab36f66d0a12fa90daeff1f368b6fc01942587
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:8c:5a:de:f5:11:8b:11:cb:a6:ee:19:32:fb:
16:e9:ba:26:46:d7:2c:02:4b:43:fb:9e:4b:eb:db:
63:e7:ba:20:db:34:73:fd:89:5d:15:8e:0e:47:90:
c8:14:c3:c9:f8:a3:f9:a5:ca:45:aa:3c:f8:80:fa:
72:71:18:71:e8:e9:7a:0c:98:e4:b1:5b:86:49:a6:
cb:a4:30:1e:4f:4d:ca:33:a9:5e:5c:8f:89:78:81:
fc:d3:cc:21:d5:4f:70:e3:63:66:88:3b:9e:6d:2c:
f6:b6:60:a6:96:06:95:93:12:b9:f4:5a:a6:1b:1a:
b8:8d:22:8e:7b:14:f1:d3:33:2e:01:ef:0c:e4:f5:
ac:c3:7e:0d:c8:ec:80:d2:7a:fe:d5:ed:a5:59:5b:
2b:2f:96:c2:ef:8b:0c:5a:53:98:af:0b:72:b3:11:
d5:8a:c1:e8:58:0a:0b:bd:61:b8:52:21:48:cc:31:
bd:09:65:e5:1e:fb:7a:48:8f:07:09:68:f4:d4:94:
5e:19:8e:0f:ae:7b:2d:bf:b0:22:29:64:d0:46:84:
28:3d:45:ed:29:70:95:75:23:59:20:6d:10:69:f6:
c5:79:e2:b0:a3:79:7f:4d:d6:03:6c:50:51:7e:01:
3e:37:37:fd:cd:da:dc:7e:10:0e:67:f3:b2:81:ee:
0f:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:AB:36:F6:6D:0A:12:FA:90:DA:EF:F1:F3:68:B6:FC:01:94:25:87
X509v3 Authority Key Identifier:
keyid:2E:03:BF:F3:E7:35:23:73:23:89:64:64:7D:FD:89:3B:26:A3:B3:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LgO_8-c1I3MjiWRkff2JOyajs0k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/1ac795-2e93-4056-93d9-684e855d7ddc/1/4Ks29m0KEvqQ2u_x82i2_AGUJYc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/1ac795-2e93-4056-93d9-684e855d7ddc/1/LgO_8-c1I3MjiWRkff2JOyajs0k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.148.232.0/22
IPv6:
2a07:62c0::/29
Signature Algorithm: sha256WithRSAEncryption
19:3c:69:d6:4a:d6:16:98:81:0c:4e:cd:d9:3c:2b:13:2b:b6:
99:40:e5:5d:22:1a:b9:9b:20:70:cb:66:ec:d9:7f:62:03:c2:
20:38:33:16:a0:a8:f9:0d:03:0f:18:73:f1:d2:e4:bc:ee:09:
64:ed:e3:6f:a7:22:3f:8f:4a:e3:73:19:1c:16:97:fd:9f:5a:
6e:b6:af:29:d6:37:84:13:14:00:d9:de:9a:f3:d2:ff:c9:3b:
db:f6:15:ca:4b:b3:71:0d:16:ec:6f:be:71:9f:5e:6a:f8:40:
10:c2:a1:93:77:4b:18:83:1e:a4:0a:43:ae:e2:5f:f2:21:8d:
43:db:6f:de:72:33:c3:fb:f3:3e:d5:02:38:ab:69:ca:fc:82:
28:98:46:1a:a5:5d:f1:a0:00:69:df:7a:b5:01:af:eb:2a:14:
5c:da:61:57:2b:28:f9:41:17:f9:23:d8:e6:d0:4a:e5:41:83:
cb:4b:d3:45:e6:34:f2:01:d4:a6:2d:4a:8e:23:a1:36:39:79:
53:c1:f3:e6:27:e8:83:fc:71:4a:39:80:d3:12:62:94:87:20:
28:40:03:86:4a:47:fd:cc:ae:fa:1a:3b:62:1a:09:a7:a1:d4:
69:3f:18:5f:b7:5b:65:36:0e:a8:a8:c5:a5:4c:77:84:04:3f:
38:fa:9e:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:59:31 2025 by rpki-client