Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/2d346b-8825-4681-94e3-98441607b228/1/637FTc-EjTy2CPittOXZDbe6ZIE.roa
File: 637FTc-EjTy2CPittOXZDbe6ZIE.roa (raw, json)
Hash identifier: UXrydQhxUZeYxfWwxSYgoELX/MNnNsFM3cbVDDIL3xE=
Subject key identifier: EB:7E:C5:4D:CF:84:8D:3C:B6:08:F8:AD:B4:E5:D9:0D:B7:BA:64:81
Certificate issuer: /CN=8c05b364fcf319ccf53c5f2e8c634290ac0eb129
Certificate serial: 019420D60C60A55ECB662CA28658A0E506F2
Authority key identifier: 8C:05:B3:64:FC:F3:19:CC:F5:3C:5F:2E:8C:63:42:90:AC:0E:B1:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jAWzZPzzGcz1PF8ujGNCkKwOsSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/2d346b-8825-4681-94e3-98441607b228/1/637FTc-EjTy2CPittOXZDbe6ZIE.roa
Signing time: Wed 01 Jan 2025 07:48:06 +0000
ROA not before: Wed 01 Jan 2025 07:48:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211483
IP address blocks: 185.60.76.0/24 maxlen: 24
185.60.77.0/24 maxlen: 24
185.60.78.0/24 maxlen: 24
185.60.79.0/24 maxlen: 24
192.109.198.0/24 maxlen: 24
193.29.3.0/24 maxlen: 24
2a04:5b40::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d6:0c:60:a5:5e:cb:66:2c:a2:86:58:a0:e5:06:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c05b364fcf319ccf53c5f2e8c634290ac0eb129
Validity
Not Before: Jan 1 07:48:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=eb7ec54dcf848d3cb608f8adb4e5d90db7ba6481
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:87:0a:dc:9b:10:6e:b3:5d:e9:f6:03:6a:ad:
48:f5:98:67:a6:27:88:0b:f2:e0:a7:f2:37:a0:4f:
0c:fd:f5:3d:0d:03:9f:de:70:14:55:7a:7e:79:2d:
07:19:3c:35:49:a7:eb:3c:56:d1:1e:ea:3f:50:39:
d0:0b:8e:77:a1:81:22:de:71:27:37:c5:2e:3b:c8:
60:ed:94:16:67:68:0c:d1:2f:90:04:c5:7b:cb:e1:
8f:4a:e3:b0:4a:e9:5d:2a:ed:8f:41:2e:2c:e2:dc:
0b:10:79:bf:eb:52:cc:f9:33:0b:8e:22:7c:3e:15:
ed:e0:05:43:4e:2f:28:61:e2:cd:23:0d:01:e5:dc:
fc:8a:cd:0a:16:1f:bf:46:90:b7:9f:00:92:7d:25:
a6:6d:93:be:c5:31:72:2d:e5:a5:99:09:e2:de:b8:
f0:41:9f:61:ad:2c:c6:8f:bf:d2:9a:54:73:05:cd:
12:35:b3:bd:5c:91:16:e3:c7:4b:6a:85:3d:80:23:
4e:ad:13:d7:07:5b:d6:78:88:fe:78:f3:0c:e0:7d:
05:7a:32:5d:24:f5:c7:18:92:1b:7d:72:a4:e2:09:
66:0a:b4:c4:ce:0a:fe:60:6d:20:39:b1:02:79:48:
93:e2:7f:cb:a5:cb:33:b7:4b:ed:5a:3c:04:d1:19:
06:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:7E:C5:4D:CF:84:8D:3C:B6:08:F8:AD:B4:E5:D9:0D:B7:BA:64:81
X509v3 Authority Key Identifier:
keyid:8C:05:B3:64:FC:F3:19:CC:F5:3C:5F:2E:8C:63:42:90:AC:0E:B1:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jAWzZPzzGcz1PF8ujGNCkKwOsSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/2d346b-8825-4681-94e3-98441607b228/1/637FTc-EjTy2CPittOXZDbe6ZIE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/2d346b-8825-4681-94e3-98441607b228/1/jAWzZPzzGcz1PF8ujGNCkKwOsSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.60.76.0/22
192.109.198.0/24
193.29.3.0/24
IPv6:
2a04:5b40::/32
Signature Algorithm: sha256WithRSAEncryption
81:73:fd:5b:70:28:43:ff:fc:e0:e7:ed:89:c3:66:8a:8b:38:
8a:3d:24:07:38:3a:88:83:0b:29:ea:9b:e8:8f:7d:ec:a2:b6:
2c:71:5f:80:0b:56:62:d0:28:53:8c:df:21:40:d4:ab:fe:37:
7f:75:d5:ca:8f:4f:e2:97:fa:d4:8c:06:2e:f9:b6:ca:35:d6:
52:ce:41:de:b1:9c:49:ba:03:47:ba:00:16:1a:96:08:f6:eb:
d3:cf:61:16:c7:da:04:7c:6e:74:39:46:67:65:55:5a:ca:ef:
71:70:e5:41:00:51:94:d7:2a:88:f1:4a:6f:f3:d4:bf:40:af:
ab:bf:fb:8e:a7:98:ae:dd:92:4e:cc:86:87:fa:09:46:cf:ea:
e0:d0:df:1a:63:94:6f:dc:fb:c4:f4:60:5a:48:b3:3b:1a:7c:
48:9d:2c:42:34:b7:d2:2e:1b:c4:02:5a:b5:f1:04:1d:23:0c:
8c:4f:d2:a9:4b:34:9d:c3:2a:e2:74:7b:ee:65:d8:d7:8d:d6:
92:49:ad:a7:11:e1:bb:78:2a:a8:07:9c:3b:76:3a:30:68:55:
c4:92:be:f6:79:52:09:02:b6:7f:56:11:38:28:d2:f1:2d:a4:
c3:03:ce:b0:6e:12:12:0d:73:d3:4a:3f:7d:63:a7:4a:31:b2:
30:1f:00:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 00:12:49 2025 by rpki-client