Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/92c8a4-4a95-486d-9993-3f7aa446f7a8/1/8pu1S9NA1of2GGVEvVp-RUa0FEo.roa
File: 8pu1S9NA1of2GGVEvVp-RUa0FEo.roa (raw, json)
Hash identifier: 7Cy8rzfsYt/Ykbo4h6qYjlEEH8Huk90pnaOgN5uaM+s=
Subject key identifier: F2:9B:B5:4B:D3:40:D6:87:F6:18:65:44:BD:5A:7E:45:46:B4:14:4A
Certificate issuer: /CN=ea9d376d5441f48b3dd508515b16fe95c5a11782
Certificate serial: 019421B2403650CAC5933F9B7B246AC93BDB
Authority key identifier: EA:9D:37:6D:54:41:F4:8B:3D:D5:08:51:5B:16:FE:95:C5:A1:17:82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6p03bVRB9Is91QhRWxb-lcWhF4I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/92c8a4-4a95-486d-9993-3f7aa446f7a8/1/8pu1S9NA1of2GGVEvVp-RUa0FEo.roa
Signing time: Wed 01 Jan 2025 11:48:37 +0000
ROA not before: Wed 01 Jan 2025 11:48:37 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 30925
IP address blocks: 185.220.212.0/22 maxlen: 22
185.223.36.0/22 maxlen: 22
185.226.76.0/22 maxlen: 22
193.84.143.0/24 maxlen: 24
194.124.196.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b2:40:36:50:ca:c5:93:3f:9b:7b:24:6a:c9:3b:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ea9d376d5441f48b3dd508515b16fe95c5a11782
Validity
Not Before: Jan 1 11:48:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f29bb54bd340d687f6186544bd5a7e4546b4144a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:44:86:e3:37:f2:3f:a0:1e:7c:ea:8a:ae:43:
66:f3:7a:7e:25:46:b9:97:d3:7b:97:d0:eb:5c:3a:
1d:52:44:b9:d8:5d:51:2f:b4:aa:f2:58:a7:e0:66:
cf:6a:bc:ed:89:41:ba:c9:e8:78:fe:ac:0b:94:3a:
8f:65:dc:98:7d:89:fc:49:69:ce:5e:85:39:78:20:
48:af:82:08:44:34:fe:d4:8b:2d:58:13:ba:ea:db:
29:ae:27:7a:c4:66:56:da:36:93:b1:08:1b:7f:36:
d1:43:9c:02:d4:24:be:aa:67:f8:ea:f9:76:42:9c:
a9:b2:09:b2:f8:de:36:10:44:31:1d:ef:39:e3:4e:
eb:93:a0:8c:a5:b5:76:a4:d4:00:a0:24:e9:56:a2:
05:a0:35:b3:1f:8e:24:4a:3b:38:61:bb:63:38:78:
e0:71:d1:dd:8b:56:06:1d:6c:5c:14:af:47:d3:4c:
bd:67:3a:9b:34:8e:c6:48:db:fb:e5:a4:86:2c:e3:
62:9c:d4:56:f5:11:e4:a5:1c:ce:85:f4:f6:6f:02:
23:26:4a:10:ae:9a:8e:e9:41:90:2c:94:9d:6d:45:
1e:ac:09:e9:1f:2d:c8:b0:3c:c5:0f:20:43:c9:d6:
75:fb:3c:f1:6c:fa:18:6b:48:c6:c7:68:f7:c5:fb:
a5:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:9B:B5:4B:D3:40:D6:87:F6:18:65:44:BD:5A:7E:45:46:B4:14:4A
X509v3 Authority Key Identifier:
keyid:EA:9D:37:6D:54:41:F4:8B:3D:D5:08:51:5B:16:FE:95:C5:A1:17:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6p03bVRB9Is91QhRWxb-lcWhF4I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/92c8a4-4a95-486d-9993-3f7aa446f7a8/1/8pu1S9NA1of2GGVEvVp-RUa0FEo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/92c8a4-4a95-486d-9993-3f7aa446f7a8/1/6p03bVRB9Is91QhRWxb-lcWhF4I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.220.212.0/22
185.223.36.0/22
185.226.76.0/22
193.84.143.0/24
194.124.196.0/22
Signature Algorithm: sha256WithRSAEncryption
73:23:14:c6:96:86:bc:e8:df:0a:70:39:89:59:d7:c1:47:8a:
e6:80:7a:49:56:d5:36:28:f8:ea:47:17:1c:73:ea:4b:f6:d7:
c3:0d:e7:84:6d:bd:23:5b:9f:b9:88:1b:16:ef:f9:7b:da:f9:
c1:3a:9f:3d:f6:eb:80:8e:a8:c1:80:17:3c:c9:e4:05:ad:9e:
5d:49:3a:95:ef:30:5c:b5:b0:50:01:bd:61:33:17:18:9a:eb:
9a:5f:aa:fb:1c:03:15:68:5e:14:02:f5:07:06:a1:04:11:a0:
43:01:a7:09:8f:87:12:7b:ae:36:23:13:f0:cf:44:16:67:f8:
89:fb:6b:b2:c6:b1:06:11:1a:f1:f2:09:ec:8c:df:55:70:fc:
0e:23:84:78:44:8f:f0:35:42:25:bc:2d:cf:ab:75:75:49:4a:
d0:23:de:4e:aa:08:74:1a:18:e8:0f:2e:64:5f:57:bc:47:e2:
c3:40:33:cd:bf:38:d7:6a:6f:4e:1f:7d:80:b4:11:b0:ae:51:
28:7b:bb:9c:21:9d:d5:00:6b:ce:61:ae:dc:a2:e7:9d:82:9a:
45:e9:9b:6b:2b:2a:5d:9f:7d:66:89:23:c8:bb:f5:0a:12:90:
21:cc:e1:e1:1d:89:c6:50:34:36:b2:19:51:45:76:3e:e6:fa:
de:41:87:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:29:17 2025 by rpki-client on console.sobornost.net