Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/d8b9f4-ad01-447c-a4de-0215aca1b909/1/EfwLikTBq1BQAGfNQNV1E8qGDAc.roa
File: EfwLikTBq1BQAGfNQNV1E8qGDAc.roa (raw, json)
Hash identifier: yRt0hCbp/cepFk2zNBBsY1KquLoFtQD0MeEg7vy0YTA=
Subject key identifier: 11:FC:0B:8A:44:C1:AB:50:50:00:67:CD:40:D5:75:13:CA:86:0C:07
Certificate issuer: /CN=27d8af7e56c80d18dc968f4dbcec813f85ea30a4
Certificate serial: 019421B20916D57C5BC0DE4EA046762FEEE7
Authority key identifier: 27:D8:AF:7E:56:C8:0D:18:DC:96:8F:4D:BC:EC:81:3F:85:EA:30:A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J9ivflbIDRjclo9NvOyBP4XqMKQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/d8b9f4-ad01-447c-a4de-0215aca1b909/1/EfwLikTBq1BQAGfNQNV1E8qGDAc.roa
Signing time: Wed 01 Jan 2025 11:48:23 +0000
ROA not before: Wed 01 Jan 2025 11:48:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209026
IP address blocks: 185.253.236.0/22 maxlen: 24
2a0c:42c0::/29 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b2:09:16:d5:7c:5b:c0:de:4e:a0:46:76:2f:ee:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27d8af7e56c80d18dc968f4dbcec813f85ea30a4
Validity
Not Before: Jan 1 11:48:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=11fc0b8a44c1ab50500067cd40d57513ca860c07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:24:10:4a:72:97:65:29:c5:36:0b:3f:2e:a3:
42:cd:4c:41:f7:55:be:8d:d3:53:af:18:e1:62:f0:
2c:ef:bb:75:83:cd:13:14:6a:36:50:55:35:90:5c:
8f:64:46:92:ef:e8:56:26:6a:db:bc:a1:ce:8a:01:
4f:53:3c:fa:63:3f:16:ff:7e:8a:03:9c:fa:80:cd:
ad:a7:3b:e2:51:19:88:eb:fe:60:51:16:2a:85:0d:
53:05:84:de:5d:85:48:7e:6c:4e:f9:8f:6a:46:65:
4e:db:2f:bd:13:8b:b3:e8:8d:b3:96:68:a3:38:f8:
ce:57:df:31:8e:af:38:8a:a0:46:9a:d0:d2:8d:ba:
c1:e0:41:ae:8a:40:04:6f:40:8f:51:43:a7:fd:eb:
29:36:fb:6f:02:97:75:43:e6:1c:af:d3:6d:84:50:
12:d5:c1:39:18:1a:3a:24:77:2d:e4:65:8b:90:55:
1e:bc:91:43:bb:d5:10:bf:a8:4f:4f:0f:d2:8c:5f:
66:b3:6d:6d:23:9e:b3:6d:ef:c4:21:e9:1f:66:a6:
bf:0d:18:73:11:5b:6b:26:7a:b2:9b:28:e9:0b:95:
1b:3a:87:0b:b3:71:07:d2:8c:d5:a5:fe:05:c6:97:
c1:f5:02:fb:ef:3e:f5:95:8e:e5:e1:47:c0:0b:b7:
a1:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:FC:0B:8A:44:C1:AB:50:50:00:67:CD:40:D5:75:13:CA:86:0C:07
X509v3 Authority Key Identifier:
keyid:27:D8:AF:7E:56:C8:0D:18:DC:96:8F:4D:BC:EC:81:3F:85:EA:30:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J9ivflbIDRjclo9NvOyBP4XqMKQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/d8b9f4-ad01-447c-a4de-0215aca1b909/1/EfwLikTBq1BQAGfNQNV1E8qGDAc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/d8b9f4-ad01-447c-a4de-0215aca1b909/1/J9ivflbIDRjclo9NvOyBP4XqMKQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.253.236.0/22
IPv6:
2a0c:42c0::/29
Signature Algorithm: sha256WithRSAEncryption
08:56:45:59:ce:6a:98:60:f0:9c:aa:a6:f7:ea:96:3b:b3:72:
a2:35:05:70:51:f0:d1:85:54:92:3d:a9:bd:07:d8:7d:45:c7:
67:39:18:a5:a4:37:66:c0:34:34:bf:56:b7:db:db:c0:d9:fe:
db:73:34:26:ce:54:d4:bb:b0:39:3b:15:31:40:06:5c:73:a5:
f5:93:57:db:16:af:1f:e3:9a:de:ce:8b:fa:8e:40:c0:a6:83:
27:87:a2:b2:24:91:28:88:ac:25:2e:98:e4:ce:89:10:a3:1a:
1e:0c:e1:56:a2:86:46:eb:7a:7e:34:94:14:da:c5:21:17:dd:
79:f6:bf:6c:80:5b:b9:ab:bc:7e:9e:dc:d3:af:af:e3:ac:b1:
6d:86:3f:6b:3d:a1:a3:76:40:38:20:b7:65:7e:5a:fb:2d:5a:
c7:53:5a:01:ab:fb:0e:16:62:01:d5:94:6d:b1:13:0a:da:a7:
27:fe:f2:11:c4:16:db:ea:6e:d7:3f:5e:b2:8b:9c:de:77:5a:
c7:bd:94:25:d5:8d:96:14:96:d9:d6:bd:39:ce:4b:86:81:72:
31:b6:db:fe:90:68:de:89:82:36:22:f0:d8:ac:33:d1:38:fe:
14:79:60:2a:7a:9a:80:be:ce:87:37:8f:a6:cb:89:6b:31:4e:
25:e2:74:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:46:37 2025 by rpki-client