Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/0c9ddc-3191-44b3-88ba-82f7b99c5467/1/7i6CkxLW0y4-Eb1zqmEq2DrgTXo.roa
File: 7i6CkxLW0y4-Eb1zqmEq2DrgTXo.roa (raw, json)
Hash identifier: 9coWzyh+KYo6PjWXvZi4r37a7LcyA66ZeCRl9p/oIqU=
Subject key identifier: EE:2E:82:93:12:D6:D3:2E:3E:11:BD:73:AA:61:2A:D8:3A:E0:4D:7A
Certificate issuer: /CN=d234798e0712f155292d3211f7c447223ccd49ac
Certificate serial: 01942143D3BCFC7AABA913F6409FF9050E1F
Authority key identifier: D2:34:79:8E:07:12:F1:55:29:2D:32:11:F7:C4:47:22:3C:CD:49:AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0jR5jgcS8VUpLTIR98RHIjzNSaw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/0c9ddc-3191-44b3-88ba-82f7b99c5467/1/7i6CkxLW0y4-Eb1zqmEq2DrgTXo.roa
Signing time: Wed 01 Jan 2025 09:48:00 +0000
ROA not before: Wed 01 Jan 2025 09:48:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206430
IP address blocks: 185.186.188.0/24 maxlen: 24
185.186.189.0/24 maxlen: 24
185.186.190.0/24 maxlen: 24
185.186.191.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:43:d3:bc:fc:7a:ab:a9:13:f6:40:9f:f9:05:0e:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d234798e0712f155292d3211f7c447223ccd49ac
Validity
Not Before: Jan 1 09:48:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ee2e829312d6d32e3e11bd73aa612ad83ae04d7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:b9:d9:88:ba:3d:0f:17:7a:7a:d2:f8:3d:dc:
f8:63:b0:90:e4:ba:4d:b7:e0:fd:eb:33:01:f7:99:
43:7d:4d:b4:89:b2:77:09:e6:27:35:01:4c:35:29:
5d:de:61:39:f5:74:90:05:ae:4d:0d:ce:7b:c3:18:
5b:9c:65:e1:0c:9d:2d:1d:e2:5b:44:1e:cc:8a:9b:
88:d5:40:c6:40:1c:0f:a7:85:63:c0:91:66:fb:f7:
8a:fc:20:ca:4f:82:2c:fe:41:96:f6:90:b7:6a:e7:
3f:97:8f:ec:f8:92:8c:b6:b0:52:67:b1:d3:31:52:
94:79:6c:5a:0d:ec:83:ae:68:19:10:91:56:d8:63:
9d:1d:6c:77:01:7e:73:72:58:39:d4:03:2c:cf:cc:
5c:88:45:78:a8:0a:71:9e:fc:94:17:2b:af:ee:7d:
0b:d7:05:ac:49:b6:a9:5b:2d:d8:c2:fc:bb:26:b8:
38:ee:ff:e1:74:98:cd:ea:0e:59:f9:35:d3:82:90:
71:12:e5:bd:81:6b:64:8b:26:23:c4:ff:69:e4:b3:
53:a7:3f:18:c4:07:e0:e0:5e:4b:0a:db:57:b0:3c:
6e:a6:9d:43:1f:fe:b7:18:f2:1e:14:22:e5:26:7e:
02:fe:ad:7a:31:50:12:36:31:88:12:4d:c7:b2:20:
cc:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:2E:82:93:12:D6:D3:2E:3E:11:BD:73:AA:61:2A:D8:3A:E0:4D:7A
X509v3 Authority Key Identifier:
keyid:D2:34:79:8E:07:12:F1:55:29:2D:32:11:F7:C4:47:22:3C:CD:49:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0jR5jgcS8VUpLTIR98RHIjzNSaw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/0c9ddc-3191-44b3-88ba-82f7b99c5467/1/7i6CkxLW0y4-Eb1zqmEq2DrgTXo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/0c9ddc-3191-44b3-88ba-82f7b99c5467/1/0jR5jgcS8VUpLTIR98RHIjzNSaw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.186.188.0/22
Signature Algorithm: sha256WithRSAEncryption
2a:e0:7e:9e:f0:35:58:d9:c8:76:40:b7:17:1d:fb:4b:3a:13:
c4:9f:cb:84:2a:1f:a8:72:ba:87:01:cb:78:b4:fa:74:1b:60:
64:bb:0a:72:9d:67:7f:a2:b7:70:dc:71:06:11:66:46:f9:1a:
45:27:1b:85:1d:35:9c:a9:00:31:5b:5b:76:29:45:01:c2:79:
3e:ba:a3:e7:69:f3:1d:eb:77:33:21:40:6b:a1:fe:4c:9e:31:
74:38:08:03:05:da:79:f4:6b:eb:5a:ea:26:aa:a4:64:fd:31:
bd:b9:30:2e:8b:aa:30:38:79:9a:ca:36:97:35:a3:38:31:a9:
35:24:4e:ca:4c:6f:26:42:57:e0:34:9c:82:bf:f5:3b:ba:79:
5c:4a:1f:b0:fa:aa:7c:72:f0:2d:67:8e:b0:ac:e0:b0:41:d5:
4d:55:1d:b0:b2:c5:f8:b6:8e:fb:51:0f:49:e1:3e:1e:cc:37:
ac:06:ad:2e:23:7b:74:7f:ff:d5:dd:3c:2e:4b:0c:02:63:56:
cf:f7:0c:c1:31:55:dc:f9:9f:97:a7:3e:e1:d1:9e:96:0d:a5:
15:c3:c9:0b:30:9c:66:5d:6c:ef:c2:cd:47:bb:53:9f:1c:75:
9e:04:31:d3:6d:62:cc:a5:e1:25:2f:d0:2d:a8:9e:66:a1:89:
5a:82:53:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 01:09:22 2025 by rpki-client