Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/e9ca7a-411c-43a8-952f-cc540608c41d/1/FIv37bh0ZRTnGv0_RzWoQo8NJHg.roa
File: FIv37bh0ZRTnGv0_RzWoQo8NJHg.roa (raw, json)
Hash identifier: 7fKZSi422ANEwoYfgRX2lfWBp8KGEhw9eJL3r9FHZjI=
Subject key identifier: 14:8B:F7:ED:B8:74:65:14:E7:1A:FD:3F:47:35:A8:42:8F:0D:24:78
Certificate issuer: /CN=c7221e402998abc1f035475e158b74e8c76920c0
Certificate serial: 019421B207C959764C0276735A9B99E17CB8
Authority key identifier: C7:22:1E:40:29:98:AB:C1:F0:35:47:5E:15:8B:74:E8:C7:69:20:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xyIeQCmYq8HwNUdeFYt06MdpIMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/e9ca7a-411c-43a8-952f-cc540608c41d/1/FIv37bh0ZRTnGv0_RzWoQo8NJHg.roa
Signing time: Wed 01 Jan 2025 11:48:22 +0000
ROA not before: Wed 01 Jan 2025 11:48:22 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205935
IP address blocks: 185.201.132.0/24 maxlen: 24
185.201.134.0/24 maxlen: 24
185.201.135.0/24 maxlen: 24
2a0a:c440::/32 maxlen: 32
2a0a:c441::/32 maxlen: 32
2a0a:c442::/32 maxlen: 32
2a0a:c443::/32 maxlen: 32
2a0a:c444::/32 maxlen: 32
2a0a:c445::/32 maxlen: 32
2a0a:c446::/32 maxlen: 32
2a0a:c447::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b2:07:c9:59:76:4c:02:76:73:5a:9b:99:e1:7c:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7221e402998abc1f035475e158b74e8c76920c0
Validity
Not Before: Jan 1 11:48:22 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=148bf7edb8746514e71afd3f4735a8428f0d2478
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:e8:6e:ea:d6:24:f2:f2:66:f9:18:ae:2f:92:
55:8f:d1:a1:d1:d4:20:85:7b:a3:14:ca:e0:a4:bd:
45:ca:59:87:01:b2:8d:c2:8f:a4:60:67:a7:7a:30:
e7:9f:66:c6:b2:71:08:05:2d:5e:95:93:af:f6:a2:
c9:bf:d3:c1:75:ad:3b:27:ad:cf:6a:ac:41:83:38:
90:9c:12:0a:75:1a:1c:36:e0:bf:19:8c:f1:01:63:
84:3d:04:53:e0:3e:52:d6:f8:82:95:5d:e8:e8:2d:
eb:2d:b3:fa:3d:65:79:a6:89:61:47:90:e9:77:0f:
fb:b3:1f:fa:20:cf:08:a2:37:b6:80:71:8c:a9:98:
83:b9:ed:c6:1c:f5:87:86:b9:84:ae:d2:9e:3a:8b:
86:6a:c7:84:dd:3d:38:d0:9d:3a:fa:68:bc:27:86:
d2:d9:90:e1:7e:a5:30:1f:fa:86:df:71:a5:20:72:
68:12:06:da:b8:d6:6b:1b:50:5b:89:b5:7c:20:08:
f1:be:0d:ca:81:84:a1:dc:87:09:bc:79:eb:10:d0:
42:0d:16:6e:b7:27:06:70:4a:2b:cd:1f:f7:13:f9:
63:8d:eb:cb:e6:29:9b:7d:27:08:7a:89:d1:2c:eb:
4e:c1:af:77:9f:ae:1a:fd:fc:2b:fe:4b:d9:93:bf:
8f:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:8B:F7:ED:B8:74:65:14:E7:1A:FD:3F:47:35:A8:42:8F:0D:24:78
X509v3 Authority Key Identifier:
keyid:C7:22:1E:40:29:98:AB:C1:F0:35:47:5E:15:8B:74:E8:C7:69:20:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xyIeQCmYq8HwNUdeFYt06MdpIMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/e9ca7a-411c-43a8-952f-cc540608c41d/1/FIv37bh0ZRTnGv0_RzWoQo8NJHg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/e9ca7a-411c-43a8-952f-cc540608c41d/1/xyIeQCmYq8HwNUdeFYt06MdpIMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.201.132.0/24
185.201.134.0/23
IPv6:
2a0a:c440::/29
Signature Algorithm: sha256WithRSAEncryption
95:51:c6:ca:5c:ae:fb:99:00:b6:02:b7:b8:65:5d:e7:e3:18:
39:e5:be:0c:be:44:0b:5f:a8:d4:88:af:62:0c:21:ab:a2:66:
0b:8d:bb:e3:45:08:40:c1:d6:6f:1f:09:2f:83:14:ff:7c:8f:
8e:87:e7:b5:18:cb:29:4d:a6:d7:e9:b5:2a:b1:1a:de:e1:71:
d6:50:26:b0:f1:07:30:f3:9d:63:50:90:20:52:c5:c4:de:bd:
64:9b:3d:fd:d6:a6:9b:12:3c:3a:d2:da:79:a3:82:5d:a1:e6:
21:2d:3b:f5:68:6c:cf:0e:a4:6b:a4:e6:8a:7f:b6:0b:d7:18:
5f:db:9a:88:1a:a0:e0:0a:e4:74:81:ce:24:84:32:d5:6d:d5:
bf:f6:a9:72:e9:66:cd:c2:18:f4:d7:eb:cb:bd:ef:40:13:68:
9e:10:8b:7d:7e:d2:c9:64:7c:54:92:d9:01:67:4d:ed:3e:47:
b6:ed:bd:05:2d:5c:bd:be:7b:fa:58:e9:bc:85:79:8b:1e:19:
3d:84:d6:09:3b:f6:d8:08:2b:fb:3d:ff:dd:bd:ac:98:7e:dc:
bb:c1:51:6e:9a:ae:5b:5c:32:41:59:ca:e3:2f:60:56:a9:af:
df:9c:cd:bb:4d:1c:b3:b7:06:f9:bb:2a:78:0f:b9:e7:b7:01:
8d:e6:4a:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:20:32 2025 by rpki-client