Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/aacdcc-aa17-42f8-9ade-7c379a551c12/1/fIi6Y7TMQAIgGM-S2BYF-rhLP0U.roa
File: fIi6Y7TMQAIgGM-S2BYF-rhLP0U.roa (raw, json)
Hash identifier: frVihHDK+8j5US3CUXtBypHsqdv++cToSbTh8ao+mTk=
Subject key identifier: 7C:88:BA:63:B4:CC:40:02:20:18:CF:92:D8:16:05:FA:B8:4B:3F:45
Certificate issuer: /CN=7ddc36414c991bfa8d92f6027e5308370b22b6a6
Certificate serial: 019426D8DF977E77B55526819021CED3CD65
Authority key identifier: 7D:DC:36:41:4C:99:1B:FA:8D:92:F6:02:7E:53:08:37:0B:22:B6:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fdw2QUyZG_qNkvYCflMINwsitqY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/aacdcc-aa17-42f8-9ade-7c379a551c12/1/fIi6Y7TMQAIgGM-S2BYF-rhLP0U.roa
Signing time: Thu 02 Jan 2025 11:48:54 +0000
ROA not before: Thu 02 Jan 2025 11:48:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 203825
IP address blocks: 185.122.188.0/23 maxlen: 23
185.122.190.0/23 maxlen: 23
193.110.196.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d8:df:97:7e:77:b5:55:26:81:90:21:ce:d3:cd:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ddc36414c991bfa8d92f6027e5308370b22b6a6
Validity
Not Before: Jan 2 11:48:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7c88ba63b4cc40022018cf92d81605fab84b3f45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:f4:d9:cb:11:3c:9b:1a:2d:a5:68:92:6d:b5:
8a:3a:1d:da:f7:53:7f:6d:71:41:c3:ee:fb:0a:3d:
46:56:66:04:9e:4a:e8:4e:31:71:96:91:a0:d3:f3:
97:94:b3:52:3f:db:3a:44:ee:da:61:73:c3:be:f5:
03:01:47:38:b0:df:c8:95:2a:72:71:16:86:a8:d7:
de:1e:01:77:ee:3e:54:14:49:30:5a:f0:b3:07:c6:
7d:0b:97:a8:92:24:66:98:fd:53:36:3e:b6:22:17:
98:22:1b:76:1a:93:db:ff:7f:aa:9b:09:ab:a8:65:
8e:72:50:56:46:1c:f4:34:dc:f4:c0:39:b7:a1:ac:
6b:5e:d1:aa:0a:0e:64:a4:d0:2f:16:9a:5e:6c:42:
81:1e:b9:32:a4:82:97:f5:95:1c:7d:5b:12:95:9b:
6f:b9:60:0c:5c:8f:1d:79:45:8b:bc:50:de:0a:26:
0b:d5:42:b8:6a:d2:24:33:a5:0d:08:9e:39:8f:94:
d1:9b:8f:ee:a8:f6:3b:89:8b:b7:bb:11:b4:b2:c9:
1b:9a:34:5c:5b:ec:b9:62:b3:22:74:83:bf:4b:a6:
1c:dd:95:b8:ce:47:06:4c:0b:f0:6b:ef:06:1b:a9:
3e:b8:69:08:53:d2:64:7c:4b:43:90:dc:48:fb:6e:
2b:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:88:BA:63:B4:CC:40:02:20:18:CF:92:D8:16:05:FA:B8:4B:3F:45
X509v3 Authority Key Identifier:
keyid:7D:DC:36:41:4C:99:1B:FA:8D:92:F6:02:7E:53:08:37:0B:22:B6:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fdw2QUyZG_qNkvYCflMINwsitqY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/aacdcc-aa17-42f8-9ade-7c379a551c12/1/fIi6Y7TMQAIgGM-S2BYF-rhLP0U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/aacdcc-aa17-42f8-9ade-7c379a551c12/1/fdw2QUyZG_qNkvYCflMINwsitqY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.122.188.0/22
193.110.196.0/22
Signature Algorithm: sha256WithRSAEncryption
dc:ae:ad:53:2e:e8:0d:eb:09:4c:a4:5d:4e:4c:9a:f4:ab:38:
90:a2:28:61:ab:75:78:30:a3:77:ee:df:2d:8d:07:c2:b8:51:
d9:a1:1e:62:10:25:04:11:6b:0f:e9:fa:4e:32:56:d4:8e:f9:
0f:ad:df:74:a3:ba:7f:34:ef:29:b8:a5:e3:93:bc:fa:f8:c4:
50:5b:4b:35:a2:b0:ee:06:7c:84:92:e5:a2:b1:dd:14:8f:91:
6a:cd:83:05:67:9e:f8:74:42:19:70:f0:0c:0b:2d:fd:37:03:
9c:cb:3d:76:7c:b1:0b:9a:f0:24:45:df:d5:49:92:ae:bb:8e:
41:65:5c:59:89:8f:33:6b:f5:35:ec:dc:25:af:64:ad:92:d8:
93:22:49:c7:4b:9c:6a:c6:a3:25:34:67:bf:1f:ef:0d:fc:af:
7b:98:07:6c:9b:fa:b0:34:55:6a:89:44:ac:45:11:40:6f:4e:
25:f2:de:f9:9a:dd:7a:da:94:2c:ee:c8:e6:e5:8a:92:22:7a:
72:bb:51:80:8d:be:f9:3d:a5:9f:38:09:d7:5c:2a:a8:af:06:
4c:b8:39:a2:96:12:f6:99:9b:14:a3:53:24:ad:18:c2:e5:63:
13:51:61:8c:61:93:28:b9:51:64:22:88:e8:5b:ab:87:4c:0f:
aa:18:a9:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:29:28 2025 by rpki-client on console.sobornost.net