Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/3ee7c5-1264-47e9-8a12-041b78ada215/1/8M6EvOOueKa7PM6SUMWysNV1P1E.roa
File: 8M6EvOOueKa7PM6SUMWysNV1P1E.roa (raw, json)
Hash identifier: tXy3k1V6q4E+Xjy/ypSFyuA9ZzVHmCAzqLsaHasRW9o=
Subject key identifier: F0:CE:84:BC:E3:AE:78:A6:BB:3C:CE:92:50:C5:B2:B0:D5:75:3F:51
Certificate issuer: /CN=a34f365e78064b58c44d48cfb39291d3fb1d9e10
Certificate serial: 01944A458A55BCF3F67C9E663D661BE99B9B
Authority key identifier: A3:4F:36:5E:78:06:4B:58:C4:4D:48:CF:B3:92:91:D3:FB:1D:9E:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o082XngGS1jETUjPs5KR0_sdnhA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/3ee7c5-1264-47e9-8a12-041b78ada215/1/8M6EvOOueKa7PM6SUMWysNV1P1E.roa
Signing time: Thu 09 Jan 2025 08:54:18 +0000
ROA not before: Thu 09 Jan 2025 08:54:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 20694
IP address blocks: 185.166.200.0/22 maxlen: 24
185.166.200.0/24 maxlen: 24
185.166.201.0/24 maxlen: 24
185.166.202.0/24 maxlen: 24
185.166.203.0/24 maxlen: 24
188.94.24.0/21 maxlen: 21
217.114.64.0/20 maxlen: 20
2a01:688::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:4a:45:8a:55:bc:f3:f6:7c:9e:66:3d:66:1b:e9:9b:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a34f365e78064b58c44d48cfb39291d3fb1d9e10
Validity
Not Before: Jan 9 08:54:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f0ce84bce3ae78a6bb3cce9250c5b2b0d5753f51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:af:ee:cd:8d:3d:4b:c2:9b:bb:d4:11:b6:f6:
d1:fe:3c:c4:da:94:e0:a1:80:10:cd:d1:47:16:09:
c5:e2:5d:69:09:4c:6a:9a:aa:e7:5e:93:98:a5:80:
65:3b:49:b5:33:47:9d:ee:68:81:d4:fd:8d:6b:81:
d7:df:65:cb:6d:01:d1:60:cd:59:e2:b5:6e:76:83:
6d:4a:c0:42:07:46:13:85:33:da:04:9f:27:2c:b0:
b1:af:66:52:49:e7:5c:9d:d8:8c:84:b2:27:26:7e:
51:a5:4e:68:b9:1e:01:b4:39:e5:18:6c:09:9c:87:
09:56:57:b4:10:52:8c:c2:76:9e:c6:9a:d8:5b:7b:
05:26:e9:f5:c7:59:af:a5:99:32:6c:6a:e6:e3:f0:
3d:86:a7:3f:b1:be:ad:d4:46:e9:52:77:1b:86:e7:
46:e9:90:5f:4f:25:8b:c6:09:1c:0c:2c:6e:f8:11:
e2:71:91:af:af:63:3c:73:f4:56:51:05:49:b0:ac:
c8:27:ab:a0:37:13:69:87:51:85:f3:e9:ab:8c:ea:
95:0a:f1:87:d9:2f:2d:3f:63:f4:02:3a:05:a7:9e:
d9:b7:c7:a1:0a:8c:af:2b:2e:69:c1:eb:c7:5d:c6:
e5:8f:92:1a:93:1e:5e:2b:33:9e:71:e4:10:59:e9:
37:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:CE:84:BC:E3:AE:78:A6:BB:3C:CE:92:50:C5:B2:B0:D5:75:3F:51
X509v3 Authority Key Identifier:
keyid:A3:4F:36:5E:78:06:4B:58:C4:4D:48:CF:B3:92:91:D3:FB:1D:9E:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o082XngGS1jETUjPs5KR0_sdnhA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/3ee7c5-1264-47e9-8a12-041b78ada215/1/8M6EvOOueKa7PM6SUMWysNV1P1E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/3ee7c5-1264-47e9-8a12-041b78ada215/1/o082XngGS1jETUjPs5KR0_sdnhA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.166.200.0/22
188.94.24.0/21
217.114.64.0/20
IPv6:
2a01:688::/32
Signature Algorithm: sha256WithRSAEncryption
11:72:0e:f6:05:5a:73:ca:0f:73:00:bb:2b:34:8a:55:9a:35:
19:9d:ab:5a:ca:63:06:ce:36:ba:00:f8:fc:2d:8b:bc:19:42:
45:d8:4b:88:b9:9c:90:6a:16:f4:27:1a:a6:c4:e2:79:d9:3f:
ef:c7:79:b2:79:20:13:59:70:9d:ed:b1:af:ce:2b:31:3b:6f:
ef:8c:08:e3:13:f8:b5:3b:d6:61:f7:10:0b:5c:0d:ac:74:60:
5d:39:3f:e5:91:1e:fb:fe:a6:01:ad:5f:b3:45:eb:44:dc:70:
0b:d1:f9:51:d7:18:cf:62:15:df:65:4d:bd:db:8f:7a:26:c9:
ce:6c:d7:c0:be:09:9b:a3:db:bb:9d:86:55:76:16:8b:33:a1:
09:a8:8d:34:75:4f:10:0c:0f:5c:a0:72:81:de:e0:60:62:86:
b3:aa:2c:4f:39:c0:45:86:28:2c:de:21:45:e5:69:d8:d5:81:
83:8d:e9:2f:6f:7c:da:66:12:11:10:d1:a3:2b:cc:40:46:92:
66:82:28:b9:d1:13:d4:fb:41:3b:26:06:2a:15:39:4f:f2:14:
a6:b3:73:46:82:ab:41:cc:0e:ef:e4:da:bb:f1:8c:36:b8:d7:
4b:20:b0:a1:4b:8e:cb:c7:c0:0b:70:4b:f4:c7:b7:23:51:de:
23:50:e3:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:20:26 2025 by rpki-client