Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/39d5f1-66f7-49d8-afba-14a1909b1237/1/1-YcJrvTRpLHaqQAFDly2XT4FqzM.roa
File: 1-YcJrvTRpLHaqQAFDly2XT4FqzM.roa (raw, json)
Hash identifier: P+X7bk4xVC2G2mv0GzrMdTNr5FMbR6w5BMTW58Igvfs=
Subject key identifier: F9:87:09:AE:F4:D1:A4:B1:DA:A9:00:05:0E:5C:B6:5D:3E:05:AB:33
Certificate issuer: /CN=ee1cce901e5fb7c92f09a915cf6e656f693ba100
Certificate serial: 01941FFA91DFF37A2A4BF0C7539C0259EF7C
Authority key identifier: EE:1C:CE:90:1E:5F:B7:C9:2F:09:A9:15:CF:6E:65:6F:69:3B:A1:00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hzOkB5ft8kvCakVz25lb2k7oQA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/39d5f1-66f7-49d8-afba-14a1909b1237/1/1-YcJrvTRpLHaqQAFDly2XT4FqzM.roa
Signing time: Wed 01 Jan 2025 03:48:22 +0000
ROA not before: Wed 01 Jan 2025 03:48:22 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212879
IP address blocks: 185.155.136.0/24 maxlen: 24
185.155.138.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:91:df:f3:7a:2a:4b:f0:c7:53:9c:02:59:ef:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1cce901e5fb7c92f09a915cf6e656f693ba100
Validity
Not Before: Jan 1 03:48:22 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f98709aef4d1a4b1daa900050e5cb65d3e05ab33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:b7:cb:c7:a2:cf:d2:a0:39:54:8b:53:18:8d:
90:0c:28:77:1a:9c:2d:54:96:70:45:aa:07:59:bb:
58:1a:1e:1d:66:14:c2:c4:db:d6:7d:f8:d3:56:a3:
1b:eb:5e:8c:d4:77:cb:bb:97:eb:80:2d:29:bb:49:
c7:dc:90:15:7c:8a:07:c7:6b:99:85:ac:b5:7f:a4:
33:64:07:30:ad:96:0e:1d:55:5d:d0:f5:7a:ad:a2:
fa:63:15:da:ab:9c:49:3a:58:8d:1f:8d:ab:6c:68:
5f:1d:eb:60:30:01:97:2c:d4:30:78:0f:8d:f9:d7:
6c:98:01:2c:a3:09:b3:2c:c3:cc:da:9a:3d:f1:4c:
ed:65:b6:87:f0:86:ea:4d:36:90:46:81:8f:32:e4:
d1:2a:11:55:b0:6a:ba:15:cf:09:69:5a:5d:c7:0f:
f7:f6:5e:78:9d:3b:36:1f:72:97:61:9e:8c:fd:2d:
3a:54:ca:70:09:eb:b6:f8:3c:d8:24:b3:39:37:d0:
6d:bf:14:dd:d9:80:f7:d5:6a:fc:7b:8b:ea:7a:7b:
4c:03:d0:ca:be:8c:79:52:dd:4c:7b:df:80:8b:39:
63:16:c1:b5:ff:24:0b:29:1b:a9:e1:91:9e:ef:67:
33:10:7b:9c:c0:27:c8:3d:04:db:3d:46:fb:6a:62:
6d:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:87:09:AE:F4:D1:A4:B1:DA:A9:00:05:0E:5C:B6:5D:3E:05:AB:33
X509v3 Authority Key Identifier:
keyid:EE:1C:CE:90:1E:5F:B7:C9:2F:09:A9:15:CF:6E:65:6F:69:3B:A1:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hzOkB5ft8kvCakVz25lb2k7oQA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/39d5f1-66f7-49d8-afba-14a1909b1237/1/1-YcJrvTRpLHaqQAFDly2XT4FqzM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/39d5f1-66f7-49d8-afba-14a1909b1237/1/7hzOkB5ft8kvCakVz25lb2k7oQA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.155.136.0/24
185.155.138.0/24
Signature Algorithm: sha256WithRSAEncryption
aa:22:8c:46:89:20:0b:5f:0b:82:51:3a:c7:e6:ae:75:97:e1:
cf:59:3b:4e:29:3f:3f:7d:45:a7:94:c6:8d:17:d0:6d:5b:a1:
32:37:15:18:59:bc:a1:24:5f:c2:81:0b:c0:ea:a1:31:7c:84:
c2:57:f1:f0:a4:42:c0:15:f2:07:bd:90:6a:c3:4f:d6:8b:78:
b5:0b:ce:f6:8c:c8:27:e6:19:9f:7f:35:fe:0a:c0:38:ef:5c:
94:58:89:7c:2b:1e:01:74:e1:5a:86:f0:e6:85:d4:dc:6c:9a:
30:0d:27:d0:05:b5:82:a4:e7:2e:b0:be:76:a6:b6:29:45:3d:
5a:d9:1f:b4:18:36:21:90:46:52:23:07:42:ff:1e:d8:7c:77:
9a:c6:85:ec:bd:70:1f:09:63:16:e8:e0:03:fe:f4:49:4b:e2:
69:50:e9:a1:35:35:e8:d1:07:07:90:f5:05:0c:23:44:de:80:
47:ba:37:f5:0e:95:8d:c2:40:fa:b0:02:db:da:a8:a0:26:37:
3c:6a:d2:db:0f:6d:54:9d:76:10:51:7a:20:be:ab:c0:20:53:
98:dc:5d:71:f7:32:f9:df:92:ad:d0:95:e3:71:5a:19:75:f6:
68:a6:64:bc:b6:ab:c8:71:88:26:eb:da:41:0c:a5:7f:71:5e:
60:34:20:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 20:46:52 2025 by rpki-client