Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/3e8fb3-48be-4083-b221-2cd00910bcb7/1/epxu4ldel37euJv5iKK-6i05AIc.roa
File: epxu4ldel37euJv5iKK-6i05AIc.roa (raw, json)
Hash identifier: 8++9DWFJDI5Z8sw+rLXkJDDM4NKVAVZxp3Q8VNvU1K8=
Subject key identifier: 7A:9C:6E:E2:57:5E:97:7E:DE:B8:9B:F9:88:A2:BE:EA:2D:39:00:87
Certificate issuer: /CN=43301775b3fdff04a227d6d859c01b6d633a4f0b
Certificate serial: 019426D96B88E0660F0639F8190797A9FC18
Authority key identifier: 43:30:17:75:B3:FD:FF:04:A2:27:D6:D8:59:C0:1B:6D:63:3A:4F:0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QzAXdbP9_wSiJ9bYWcAbbWM6Tws.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/3e8fb3-48be-4083-b221-2cd00910bcb7/1/epxu4ldel37euJv5iKK-6i05AIc.roa
Signing time: Thu 02 Jan 2025 11:49:30 +0000
ROA not before: Thu 02 Jan 2025 11:49:30 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 201946
IP address blocks: 185.49.8.0/22 maxlen: 22
185.49.8.0/24 maxlen: 24
185.49.9.0/24 maxlen: 24
185.49.10.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:6b:88:e0:66:0f:06:39:f8:19:07:97:a9:fc:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43301775b3fdff04a227d6d859c01b6d633a4f0b
Validity
Not Before: Jan 2 11:49:30 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7a9c6ee2575e977edeb89bf988a2beea2d390087
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:64:29:5e:17:71:4f:b2:4d:7b:ef:f0:8e:d2:
0a:1b:15:bc:02:33:00:8c:0a:e0:24:73:09:7c:d2:
12:6f:7a:b8:7d:cc:5a:aa:b6:3d:a4:3d:4c:95:dd:
b6:56:3b:bf:3c:a2:78:53:29:6e:5d:eb:c5:6a:76:
26:e4:23:4d:01:c1:2f:fe:fd:da:40:1e:a0:60:ae:
38:41:08:ba:1b:28:bb:6a:ed:b7:a9:68:2b:ec:c6:
ff:51:a2:fd:54:df:79:04:0c:1c:7e:8f:da:22:13:
71:7a:6d:e8:87:75:b1:2d:99:1c:c1:8e:e0:f8:19:
f1:1a:85:dc:ee:09:10:33:5b:d1:3b:5e:67:ea:22:
49:e0:04:76:b9:63:45:38:67:a2:f7:d3:ed:8b:64:
92:de:c4:5c:b7:ed:56:af:8a:59:97:f0:a0:6c:14:
5d:48:0f:c3:38:35:65:41:b7:5b:a7:3d:f0:cc:d0:
b0:16:b9:99:ee:b3:fc:a4:b7:99:1d:36:81:9e:eb:
60:36:b3:9c:cb:be:40:be:a4:04:6a:3c:e5:38:77:
f4:f4:c1:f6:a1:8a:76:d6:87:19:9b:d1:be:62:e8:
d0:8a:b4:d2:ef:7b:40:19:e7:9a:e1:33:56:c6:08:
82:3a:33:46:a3:79:d9:c7:ec:60:3e:87:28:3c:30:
76:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:9C:6E:E2:57:5E:97:7E:DE:B8:9B:F9:88:A2:BE:EA:2D:39:00:87
X509v3 Authority Key Identifier:
keyid:43:30:17:75:B3:FD:FF:04:A2:27:D6:D8:59:C0:1B:6D:63:3A:4F:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QzAXdbP9_wSiJ9bYWcAbbWM6Tws.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/3e8fb3-48be-4083-b221-2cd00910bcb7/1/epxu4ldel37euJv5iKK-6i05AIc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/3e8fb3-48be-4083-b221-2cd00910bcb7/1/QzAXdbP9_wSiJ9bYWcAbbWM6Tws.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.49.8.0/22
Signature Algorithm: sha256WithRSAEncryption
8d:28:a8:d8:7f:26:ac:57:56:06:76:f1:99:26:13:a1:8e:0c:
fd:cc:1d:62:8b:d6:df:ce:c3:bb:ac:73:21:28:31:dd:8c:fa:
bd:84:e1:12:a6:88:38:17:cc:9c:fb:83:23:d0:ef:91:2e:26:
49:29:0e:89:a2:06:ba:dd:13:45:c8:9b:2e:6b:8d:d2:f3:09:
1b:ec:b9:6e:cc:8b:0a:fc:14:b5:89:5f:b8:dc:2d:ad:44:14:
78:6f:f7:fa:8a:81:dd:f8:23:33:56:30:12:a6:aa:5d:75:e3:
d7:64:40:40:ef:b8:3f:4e:36:44:75:35:ef:7b:7b:df:a8:a4:
ac:74:0c:e5:aa:44:04:1c:da:d2:4f:18:31:66:9d:0d:34:4f:
9e:d7:9e:a2:1b:68:d2:9d:82:ab:6d:4e:f0:2f:59:ef:45:19:
8b:03:37:de:2f:00:9a:1a:a1:e5:e9:11:01:92:37:32:b2:1e:
10:ea:71:bb:50:bf:5a:45:50:9f:56:ee:09:ec:23:4f:47:dd:
c7:32:f4:8b:df:48:83:18:30:82:03:49:6e:7e:28:93:14:6a:
9f:2b:c7:33:8c:a9:b6:9c:7c:3f:6f:7c:ce:49:3c:9c:a3:06:
72:32:be:06:ca:36:79:98:21:06:b5:dd:e1:43:67:7d:a2:e0:
6c:7e:98:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:02:03 2025 by rpki-client