Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/c12395-c0f8-4e05-8cb1-73a3d07d2c31/1/e7uWgt7T0lZJq9oaz7pgmz5YCU0.roa
File: e7uWgt7T0lZJq9oaz7pgmz5YCU0.roa (raw, json)
Hash identifier: vlPlcyroUG1L25J38Irl5ZjN6BImmzz1Gl5tGlK8/3M=
Subject key identifier: 7B:BB:96:82:DE:D3:D2:56:49:AB:DA:1A:CF:BA:60:9B:3E:58:09:4D
Certificate issuer: /CN=5b7a905e25a4d5cccb2eebe4e2d5c3920819758e
Certificate serial: 01942521A7E4E0DA7036D0AC7B31695DEC50
Authority key identifier: 5B:7A:90:5E:25:A4:D5:CC:CB:2E:EB:E4:E2:D5:C3:92:08:19:75:8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W3qQXiWk1czLLuvk4tXDkggZdY4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/c12395-c0f8-4e05-8cb1-73a3d07d2c31/1/e7uWgt7T0lZJq9oaz7pgmz5YCU0.roa
Signing time: Thu 02 Jan 2025 03:49:10 +0000
ROA not before: Thu 02 Jan 2025 03:49:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 62250
IP address blocks: 185.110.252.0/22 maxlen: 22
185.110.252.0/24 maxlen: 24
185.110.253.0/24 maxlen: 24
185.110.254.0/24 maxlen: 24
185.110.255.0/24 maxlen: 24
185.118.152.0/22 maxlen: 22
185.118.152.0/24 maxlen: 24
185.118.153.0/24 maxlen: 24
185.118.154.0/24 maxlen: 24
185.118.155.0/24 maxlen: 24
185.119.164.0/22 maxlen: 22
185.119.164.0/24 maxlen: 24
185.119.165.0/24 maxlen: 24
185.119.166.0/23 maxlen: 23
185.119.166.0/24 maxlen: 24
185.119.167.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:a7:e4:e0:da:70:36:d0:ac:7b:31:69:5d:ec:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b7a905e25a4d5cccb2eebe4e2d5c3920819758e
Validity
Not Before: Jan 2 03:49:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7bbb9682ded3d25649abda1acfba609b3e58094d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:c9:84:36:d9:22:d9:26:07:ba:6e:4a:7c:7e:
a9:b4:a7:9a:68:0f:f2:65:2b:9c:94:f8:6d:9e:da:
88:04:5d:3f:b1:d4:5f:03:94:e1:ef:6f:9f:22:97:
2d:0e:5d:ab:85:c5:4b:c3:7b:fb:c6:d9:f6:e5:10:
a1:7e:e8:59:0c:d0:50:62:69:3a:0e:30:c7:84:cc:
ec:fc:b5:62:45:89:fe:49:a0:8d:8c:65:77:c3:38:
98:73:7c:96:ef:12:d6:32:73:f5:b9:d8:f2:45:bc:
dd:fe:b5:71:52:9e:e5:fe:aa:45:40:d8:32:da:ba:
3f:59:11:5f:93:29:61:c7:2b:12:b0:c4:9f:34:0b:
04:6f:3f:14:b0:27:3f:b0:fb:81:21:7a:c5:2e:23:
f1:d8:b6:3d:d9:f8:bd:96:07:77:96:5b:ca:31:cc:
fb:05:bc:48:b2:3a:e0:1f:32:fe:7f:fd:0d:48:87:
9e:3b:d4:db:a3:bc:04:19:ec:12:52:75:3f:39:45:
3e:a3:25:b8:a0:5f:3e:c3:fa:fe:e5:28:e2:4c:dc:
19:51:d7:0b:4d:d7:fe:57:29:98:ec:a8:15:12:91:
2a:e7:70:c2:dd:16:7c:1e:c3:d2:29:f3:35:8b:44:
8e:60:f9:04:d1:c2:c0:e1:7a:3e:80:df:3e:c3:fa:
90:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:BB:96:82:DE:D3:D2:56:49:AB:DA:1A:CF:BA:60:9B:3E:58:09:4D
X509v3 Authority Key Identifier:
keyid:5B:7A:90:5E:25:A4:D5:CC:CB:2E:EB:E4:E2:D5:C3:92:08:19:75:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W3qQXiWk1czLLuvk4tXDkggZdY4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/c12395-c0f8-4e05-8cb1-73a3d07d2c31/1/e7uWgt7T0lZJq9oaz7pgmz5YCU0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/c12395-c0f8-4e05-8cb1-73a3d07d2c31/1/W3qQXiWk1czLLuvk4tXDkggZdY4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.110.252.0/22
185.118.152.0/22
185.119.164.0/22
Signature Algorithm: sha256WithRSAEncryption
2e:a9:da:00:e4:68:51:28:c9:2b:44:b2:87:d3:20:01:a1:9e:
73:fc:16:ff:f8:be:2e:72:21:94:1c:58:49:51:c1:38:24:6d:
5b:92:2d:fd:2f:e4:44:29:4e:48:9a:82:63:0e:64:9a:4b:e9:
af:b4:83:00:5b:25:e2:1b:ca:40:85:8d:81:5e:4f:f3:81:24:
79:e6:83:63:ff:e4:db:f6:65:48:7a:8d:19:4d:f2:60:b6:0d:
92:9b:3d:b5:07:05:e3:ee:e7:85:ac:67:57:c3:2d:dd:90:08:
53:aa:f0:9d:05:e0:f1:eb:6f:78:c9:59:41:f2:b1:fb:c5:65:
51:39:20:a1:05:86:09:87:0e:f4:fe:f6:b7:5d:91:04:bb:6d:
18:1b:4c:5f:55:53:5d:12:df:24:11:09:a6:18:40:10:3e:ce:
0e:68:e0:c3:2a:d0:98:17:66:5b:ce:81:8e:90:09:be:a1:10:
55:e2:77:86:ff:40:c5:3c:52:f1:56:19:68:7b:16:2d:fc:ce:
30:a8:d2:23:ef:9f:5a:4c:fc:a2:7c:3e:9a:23:75:46:8c:d1:
20:b4:f5:54:27:70:d0:2c:21:18:36:4c:7c:43:81:64:0e:af:
13:33:dc:61:3e:a9:b9:f4:ee:92:44:2b:21:64:d3:13:08:00:
c1:38:b3:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:26:46 2025 by rpki-client on console.sobornost.net