Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/f90d83-02be-4e5f-bd0f-929f106630f1/1/1-yugL-SGYJzA0SlIwsrWzOp3cgA.roa
File: 1-yugL-SGYJzA0SlIwsrWzOp3cgA.roa (raw, json)
Hash identifier: O2bNI1scy+7X4n9DPZtywaN+gf/oDuWIcE8taLKp6lk=
Subject key identifier: FB:2B:A0:2F:E4:86:60:9C:C0:D1:29:48:C2:CA:D6:CC:EA:77:72:00
Certificate issuer: /CN=2f3136ed10998580a517d9598abca33d9ba66599
Certificate serial: 0194266C3279911798B2428B61A3EF85FEF1
Authority key identifier: 2F:31:36:ED:10:99:85:80:A5:17:D9:59:8A:BC:A3:3D:9B:A6:65:99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LzE27RCZhYClF9lZiryjPZumZZk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/f90d83-02be-4e5f-bd0f-929f106630f1/1/1-yugL-SGYJzA0SlIwsrWzOp3cgA.roa
Signing time: Thu 02 Jan 2025 09:50:12 +0000
ROA not before: Thu 02 Jan 2025 09:50:12 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 14340
IP address blocks: 85.222.128.0/19 maxlen: 24
151.106.128.0/20 maxlen: 24
151.106.144.0/20 maxlen: 24
151.106.216.0/22 maxlen: 24
151.106.220.0/22 maxlen: 24
159.92.0.0/16 maxlen: 24
160.8.0.0/16 maxlen: 24
161.71.0.0/17 maxlen: 24
161.71.128.0/17 maxlen: 24
163.76.128.0/17 maxlen: 24
163.79.128.0/17 maxlen: 24
185.79.140.0/22 maxlen: 24
194.145.0.0/20 maxlen: 24
194.145.16.0/21 maxlen: 24
2a03:5d60::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6c:32:79:91:17:98:b2:42:8b:61:a3:ef:85:fe:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f3136ed10998580a517d9598abca33d9ba66599
Validity
Not Before: Jan 2 09:50:12 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fb2ba02fe486609cc0d12948c2cad6ccea777200
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:c0:98:24:8f:e5:56:6a:33:db:87:ad:4b:22:
34:8f:11:a6:ee:54:4b:11:5e:56:7f:d4:03:52:2a:
ba:52:a8:d6:55:e6:df:53:e4:18:c5:df:72:1f:cc:
f0:62:58:8f:35:8c:f8:35:30:c8:03:89:94:23:1e:
39:8a:b8:40:35:59:fc:1d:70:1b:9d:04:f2:95:97:
48:76:d7:38:32:24:d9:50:08:77:82:b8:67:3b:22:
a5:0e:5f:b5:27:51:3e:b0:20:d2:7c:e9:01:92:18:
c0:07:4f:5d:86:a6:59:3c:60:3a:dd:3a:08:9d:25:
d7:50:f0:d5:99:a9:99:c8:fb:07:9a:9c:3e:6b:40:
6c:be:d8:e9:ac:41:bb:3e:3f:22:09:91:b6:7d:80:
13:47:87:65:2f:c7:08:89:c5:eb:5b:4e:4e:56:85:
52:d6:37:c6:af:8f:07:92:eb:f5:84:1d:43:c7:af:
76:a8:5c:d7:46:cc:db:d9:1f:6c:5a:f3:9d:80:8e:
6a:96:57:20:d1:fd:87:5e:a8:4a:8e:ee:a3:80:64:
d9:51:46:8e:34:11:45:70:4d:a9:b1:6c:71:6e:4c:
4f:98:d1:82:90:6d:6c:ee:c3:25:10:3b:8f:cb:e1:
03:f8:73:ab:9a:24:ef:a3:0d:26:25:21:ce:ed:b9:
8c:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:2B:A0:2F:E4:86:60:9C:C0:D1:29:48:C2:CA:D6:CC:EA:77:72:00
X509v3 Authority Key Identifier:
keyid:2F:31:36:ED:10:99:85:80:A5:17:D9:59:8A:BC:A3:3D:9B:A6:65:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LzE27RCZhYClF9lZiryjPZumZZk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/f90d83-02be-4e5f-bd0f-929f106630f1/1/1-yugL-SGYJzA0SlIwsrWzOp3cgA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/f90d83-02be-4e5f-bd0f-929f106630f1/1/LzE27RCZhYClF9lZiryjPZumZZk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.222.128.0/19
151.106.128.0/19
151.106.216.0/21
159.92.0.0/16
160.8.0.0/16
161.71.0.0/16
163.76.128.0/17
163.79.128.0/17
185.79.140.0/22
194.145.0.0-194.145.23.255
IPv6:
2a03:5d60::/29
Signature Algorithm: sha256WithRSAEncryption
41:c0:4e:2a:68:6c:81:e2:35:55:58:ab:87:99:c5:e0:c4:0a:
fb:64:5c:9f:8a:42:1a:07:d6:b7:ce:94:68:0e:07:e2:ff:91:
58:2c:a3:8f:a9:6b:5a:35:ac:2a:a5:ed:cf:39:8c:00:20:7a:
d7:aa:a0:a1:a6:5d:31:70:32:e4:51:36:cc:56:fe:1c:ed:7a:
10:d4:d4:bd:05:9d:7a:4f:7e:33:ce:cd:d5:ec:1b:0f:d3:38:
5f:13:79:7f:f3:63:5e:94:fc:37:87:1f:ea:17:77:12:34:42:
12:9a:10:46:d4:89:c0:19:7b:dc:b1:fc:08:67:17:b9:59:bb:
d8:3b:bb:9e:f6:58:2a:fc:6e:a9:1f:ab:48:96:6a:45:e0:35:
78:f3:21:b1:e8:c3:a0:88:08:4c:8f:29:a7:e7:11:ee:85:30:
57:93:6e:ee:a6:57:51:02:e1:ba:99:bc:4a:6e:67:df:a5:09:
14:25:11:6a:ef:c9:49:e1:26:6f:26:78:09:46:b7:64:ef:26:
68:42:a4:1f:22:b6:7d:40:4d:4c:85:fa:2c:f1:ae:5a:7e:e8:
51:9d:d8:59:30:4a:da:46:2d:51:0b:ef:9a:11:cc:7c:ee:9f:
8a:94:cb:2f:c6:7b:4c:df:46:f1:f6:1a:ac:b1:5c:e0:64:a1:
60:48:a7:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 22:26:28 2025 by rpki-client