Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/dec50d-ee3a-4584-a591-429d668d9228/1/c0Cf6YCbscr3sGW2nWgoXFY8xps.roa
File: c0Cf6YCbscr3sGW2nWgoXFY8xps.roa (raw, json)
Hash identifier: 5gRboI0NrXJxmfngbqENdfvUiQ0ds61NdsYGIZfYOOU=
Subject key identifier: 73:40:9F:E9:80:9B:B1:CA:F7:B0:65:B6:9D:68:28:5C:56:3C:C6:9B
Certificate issuer: /CN=7dae7b5c9a30198bd7178b48b85f0b221a5e1eb7
Certificate serial: 019423D6AF402AE60A88EEC228C31125BE89
Authority key identifier: 7D:AE:7B:5C:9A:30:19:8B:D7:17:8B:48:B8:5F:0B:22:1A:5E:1E:B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fa57XJowGYvXF4tIuF8LIhpeHrc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/dec50d-ee3a-4584-a591-429d668d9228/1/c0Cf6YCbscr3sGW2nWgoXFY8xps.roa
Signing time: Wed 01 Jan 2025 21:47:39 +0000
ROA not before: Wed 01 Jan 2025 21:47:39 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 29337
IP address blocks: 185.140.188.0/22 maxlen: 22
185.140.188.0/24 maxlen: 24
185.140.189.0/24 maxlen: 24
185.140.190.0/24 maxlen: 24
185.140.191.0/24 maxlen: 24
217.70.240.0/20 maxlen: 20
217.70.240.0/24 maxlen: 24
217.70.241.0/24 maxlen: 24
217.70.242.0/24 maxlen: 24
217.70.243.0/24 maxlen: 24
217.70.244.0/24 maxlen: 24
217.70.245.0/24 maxlen: 24
217.70.246.0/24 maxlen: 24
217.70.247.0/24 maxlen: 24
217.70.248.0/24 maxlen: 24
217.70.249.0/24 maxlen: 24
217.70.250.0/24 maxlen: 24
217.70.251.0/24 maxlen: 24
217.70.252.0/24 maxlen: 24
217.70.253.0/24 maxlen: 24
217.70.254.0/24 maxlen: 24
217.70.255.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d6:af:40:2a:e6:0a:88:ee:c2:28:c3:11:25:be:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7dae7b5c9a30198bd7178b48b85f0b221a5e1eb7
Validity
Not Before: Jan 1 21:47:39 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=73409fe9809bb1caf7b065b69d68285c563cc69b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:fc:dd:ee:1c:14:a5:f5:94:78:4d:b4:93:22:
6c:59:a1:ac:8c:5c:7f:3c:7b:95:9a:48:9b:5b:60:
9d:da:07:38:f2:18:70:f4:c1:1c:d0:70:f9:ce:26:
2f:65:f6:18:e8:a9:83:fc:fc:07:66:40:4d:a1:b0:
da:d3:59:d4:4e:f6:f9:0a:78:d8:05:ff:4a:bb:ce:
fc:84:69:71:85:88:30:58:c2:ad:cf:ab:51:7e:b0:
7a:c0:bf:5a:4f:73:7b:53:ae:1d:a3:d0:22:7c:69:
7e:b8:36:d8:9f:84:10:ba:4f:7b:27:a5:f0:e8:d7:
58:e2:a6:2f:eb:d5:9e:73:e2:8c:73:2b:c7:c0:0a:
11:b5:32:d7:d7:81:ed:fa:e7:53:32:e2:6a:f2:82:
9f:f2:d9:11:6a:03:4e:74:ff:91:60:8c:10:d2:d9:
4f:a6:0e:d3:5f:34:08:f4:9e:52:e2:91:44:1d:0a:
da:04:78:69:51:5f:3e:86:a6:88:c1:e4:5d:e0:e0:
2a:3b:08:73:3d:27:39:2c:1a:94:47:cf:ea:97:8f:
91:ec:2e:5b:c1:14:23:79:4f:be:91:d6:19:7b:57:
6b:60:f1:3e:71:fb:db:73:c0:cd:67:1c:f8:9a:92:
a9:5e:4a:ad:ef:dd:b9:07:4c:b3:4c:34:03:5d:57:
1f:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:40:9F:E9:80:9B:B1:CA:F7:B0:65:B6:9D:68:28:5C:56:3C:C6:9B
X509v3 Authority Key Identifier:
keyid:7D:AE:7B:5C:9A:30:19:8B:D7:17:8B:48:B8:5F:0B:22:1A:5E:1E:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa57XJowGYvXF4tIuF8LIhpeHrc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/dec50d-ee3a-4584-a591-429d668d9228/1/c0Cf6YCbscr3sGW2nWgoXFY8xps.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/dec50d-ee3a-4584-a591-429d668d9228/1/fa57XJowGYvXF4tIuF8LIhpeHrc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.140.188.0/22
217.70.240.0/20
Signature Algorithm: sha256WithRSAEncryption
16:32:07:5e:c2:2e:d6:c9:9f:20:f5:a9:b3:be:7b:3f:35:36:
06:76:d1:7a:b9:8d:af:2e:ac:6a:81:c8:b4:e8:7b:68:26:5d:
6f:dc:47:12:d4:bd:b8:9a:e2:82:d5:91:e2:b1:2b:8d:09:e3:
2a:14:0d:32:6a:96:20:86:d6:1e:61:b8:e8:47:c2:f5:92:08:
66:ff:b9:e6:f0:6c:2a:8d:b1:87:bc:f7:87:56:54:f4:6e:c0:
61:e3:47:5e:6b:46:ca:b6:f3:34:a3:04:6c:91:7f:05:94:eb:
92:68:23:97:fa:85:82:f7:95:70:6f:7f:10:c5:b5:cb:27:4c:
51:09:5e:51:c6:25:9e:68:d9:37:1d:35:9e:24:57:e8:73:cf:
b0:4d:ee:69:e0:8a:b2:66:bb:72:46:6f:2e:a5:f1:64:88:92:
9e:5e:63:53:b1:72:d5:38:7d:7b:ce:04:1e:9a:32:08:91:22:
6e:39:86:4f:5b:fe:40:c3:2c:93:c8:c3:20:96:fe:f2:fd:94:
f8:43:2c:c3:50:05:f3:fe:56:88:27:0f:21:b0:7f:e7:fa:09:
e7:dd:90:f8:74:3f:12:5c:6e:84:85:41:f3:a1:ab:d6:41:43:
05:ed:c7:ca:50:07:c2:6d:4a:d4:fa:92:e6:49:62:23:a5:70:
6d:40:a2:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 21:08:13 2025 by rpki-client