Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/b2b2c6-35ee-42f5-a268-cdbebbc652de/1/7bvAiXOGGN5F75C5TPaLkcrMrJ0.roa
File: 7bvAiXOGGN5F75C5TPaLkcrMrJ0.roa (raw, json)
Hash identifier: zIEK7IKs3VnTSjIwiOz0gcDm6zKT0vC9tWF2HOlgyJ4=
Subject key identifier: ED:BB:C0:89:73:86:18:DE:45:EF:90:B9:4C:F6:8B:91:CA:CC:AC:9D
Certificate issuer: /CN=92319bcd9b09a984b070e2ef588ffcfa8b73c8a2
Certificate serial: 01948E876C0ABCC07F3E3CC7A452357035A3
Authority key identifier: 92:31:9B:CD:9B:09:A9:84:B0:70:E2:EF:58:8F:FC:FA:8B:73:C8:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kjGbzZsJqYSwcOLvWI_8-otzyKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/b2b2c6-35ee-42f5-a268-cdbebbc652de/1/7bvAiXOGGN5F75C5TPaLkcrMrJ0.roa
Signing time: Wed 22 Jan 2025 15:00:27 +0000
ROA not before: Wed 22 Jan 2025 15:00:27 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 62597
IP address blocks: 185.103.32.0/22 maxlen: 24
185.103.32.0/24 maxlen: 24
185.103.33.0/24 maxlen: 24
185.103.34.0/24 maxlen: 24
185.103.35.0/24 maxlen: 24
2a00:edc0::/32 maxlen: 32
2a00:edc0:100::/44 maxlen: 48
2a00:edc0:107::/48 maxlen: 48
2a00:edc0:10f::/48 maxlen: 48
2a00:edc0:1f0::/44 maxlen: 44
2a00:edc0:1000::/48 maxlen: 48
2a00:edc0:1001::/48 maxlen: 48
2a00:edc0:1002::/48 maxlen: 48
2a00:edc0:1003::/48 maxlen: 48
2a00:edc0:1004::/48 maxlen: 48
2a00:edc0:1005::/48 maxlen: 48
2a00:edc0:1010::/48 maxlen: 48
2a00:edc0:6000::/48 maxlen: 48
2a00:edc0:6259::/48 maxlen: 48
2a00:edc0:7ffe::/48 maxlen: 48
2a00:edc0:7fff::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:8e:87:6c:0a:bc:c0:7f:3e:3c:c7:a4:52:35:70:35:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92319bcd9b09a984b070e2ef588ffcfa8b73c8a2
Validity
Not Before: Jan 22 15:00:27 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=edbbc089738618de45ef90b94cf68b91caccac9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:a4:c8:82:97:41:f3:d8:f0:dd:fa:d6:04:68:
76:47:f4:64:5c:60:3c:9a:83:01:1a:65:62:36:da:
c8:40:28:07:30:e4:03:c7:17:81:43:5c:e6:8c:23:
96:bf:a9:5d:e0:14:51:4c:75:4a:fb:a7:31:27:26:
f7:b7:80:14:08:ad:b3:b0:45:92:41:4e:39:e2:f4:
40:f1:d3:d8:48:24:dc:2e:fd:b3:0e:30:08:19:fb:
bd:d5:56:88:18:9b:f8:53:d3:fc:50:30:6d:14:c7:
da:d3:9d:2b:b4:47:ef:ff:d1:ed:d0:19:76:e9:bf:
c3:ea:97:8c:d0:2c:66:67:22:b2:fb:9e:6f:55:bf:
5d:c7:ae:5e:6f:8e:c6:8a:ea:cd:d6:0e:75:79:ee:
39:3f:3b:d3:c0:93:7c:fa:37:8d:1b:a7:ab:25:bd:
b1:65:2b:dc:8a:7c:18:8e:51:c4:1b:16:3e:09:87:
38:f2:af:da:d4:dc:14:b5:34:a7:1b:d0:7f:0d:8d:
29:0c:6a:a3:8a:c4:6c:c8:04:29:d9:ba:d9:cd:32:
44:53:c6:60:4d:02:e6:d5:98:7e:28:80:34:5d:43:
fa:2c:1e:55:6c:3d:78:aa:59:a2:1d:f7:df:9a:83:
27:06:ca:d1:56:fb:38:60:b3:e6:58:91:cc:08:5a:
32:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:BB:C0:89:73:86:18:DE:45:EF:90:B9:4C:F6:8B:91:CA:CC:AC:9D
X509v3 Authority Key Identifier:
keyid:92:31:9B:CD:9B:09:A9:84:B0:70:E2:EF:58:8F:FC:FA:8B:73:C8:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kjGbzZsJqYSwcOLvWI_8-otzyKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/b2b2c6-35ee-42f5-a268-cdbebbc652de/1/7bvAiXOGGN5F75C5TPaLkcrMrJ0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/b2b2c6-35ee-42f5-a268-cdbebbc652de/1/kjGbzZsJqYSwcOLvWI_8-otzyKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.103.32.0/22
IPv6:
2a00:edc0::/32
Signature Algorithm: sha256WithRSAEncryption
17:bf:c3:2f:33:07:a9:4e:63:b9:00:ad:e2:13:67:e5:4c:64:
94:f0:8f:a0:6b:a3:d6:d6:e8:0c:5d:f0:d5:fa:e3:ee:cb:af:
42:01:ec:96:0c:4f:3c:0a:d2:bb:1b:80:71:11:d2:91:56:45:
ad:55:86:69:4d:d4:79:e0:dc:f6:1f:4d:8b:5e:d3:3e:a9:e5:
eb:b8:e6:a4:ff:83:41:5d:19:23:f8:e2:ca:05:0f:37:33:21:
2c:20:05:06:75:3d:0f:7b:94:59:ac:86:b7:fa:94:26:01:01:
97:af:b4:80:83:df:53:4f:de:a2:28:d2:ea:0c:fa:9a:d0:58:
f0:49:5d:84:e2:15:b2:9c:53:7a:e9:b9:8d:80:a1:8c:a3:d2:
36:cc:31:3f:13:1a:90:81:8d:e5:5c:82:ec:ec:90:23:af:c2:
b1:1b:df:cc:65:da:48:06:ab:a4:ef:87:3b:8b:ae:61:b2:0f:
37:94:7b:ee:05:32:d1:7a:0f:a4:34:43:cd:ca:bd:56:77:ca:
10:8c:19:ca:b9:76:e0:69:02:b1:9a:31:2b:a2:cc:b5:63:f9:
bb:11:81:2a:70:ad:12:83:36:0c:d7:f9:db:9d:4a:59:1a:17:
85:bc:64:1d:ca:5b:e1:ac:dc:f0:b0:89:08:6e:88:1e:ca:d2:
ee:ec:b1:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:56:23 2025 by rpki-client