Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/dDKyjw96L2KxmUYkqX4D6dJ8pGU.roa
File: dDKyjw96L2KxmUYkqX4D6dJ8pGU.roa (raw, json)
Hash identifier: kfwSB1OMsfj4L5k2NALhSvO4jbjcB88dINhnvrovmYI=
Subject key identifier: 74:32:B2:8F:0F:7A:2F:62:B1:99:46:24:A9:7E:03:E9:D2:7C:A4:65
Certificate issuer: /CN=6b233d75508b4e85cccf44349a7cb703198d1d26
Certificate serial: 019428253402A2A0AB1167465F48DD845E7C
Authority key identifier: 6B:23:3D:75:50:8B:4E:85:CC:CF:44:34:9A:7C:B7:03:19:8D:1D:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ayM9dVCLToXMz0Q0mny3AxmNHSY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/dDKyjw96L2KxmUYkqX4D6dJ8pGU.roa
Signing time: Thu 02 Jan 2025 17:51:54 +0000
ROA not before: Thu 02 Jan 2025 17:51:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206150
IP address blocks: 185.76.61.0/24 maxlen: 24
185.76.63.0/24 maxlen: 24
188.119.180.0/24 maxlen: 24
188.119.182.0/23 maxlen: 24
188.119.182.0/24 maxlen: 24
188.119.183.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:25:34:02:a2:a0:ab:11:67:46:5f:48:dd:84:5e:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b233d75508b4e85cccf44349a7cb703198d1d26
Validity
Not Before: Jan 2 17:51:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7432b28f0f7a2f62b1994624a97e03e9d27ca465
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:bd:07:4d:b9:7f:4f:d6:9b:d6:01:87:cd:6e:
ae:2e:25:72:33:a1:6e:3d:24:48:e3:8b:01:ca:a7:
d3:a7:3c:cc:86:07:10:f0:bc:2e:f4:49:0d:66:2f:
ed:d6:8f:d1:4e:44:23:6a:5b:6a:ab:ed:59:d8:ba:
2d:64:1f:31:fe:bc:86:32:79:7a:6c:c2:af:de:80:
a3:9d:d3:cf:b8:0c:a4:4a:bb:43:17:1e:6f:d3:1d:
ef:82:e0:4d:fb:f6:00:52:ca:86:24:92:fc:e4:25:
83:f4:bc:07:9f:b5:4a:3a:4d:eb:d3:52:8c:97:87:
e0:d9:e4:75:2e:95:be:cd:6f:02:14:d8:a2:2b:b8:
a7:30:07:a6:d5:4f:3a:c5:df:c8:f4:6a:38:07:0f:
45:22:35:25:1c:dc:b3:bd:f5:4d:d5:a1:fe:95:c9:
37:bb:45:b3:2a:d6:16:c7:a4:ba:65:76:31:a5:72:
fa:7d:38:5c:45:4a:79:31:56:8e:ce:62:7d:04:62:
1e:00:fb:cd:0d:7c:19:2f:20:b3:ec:0a:80:6b:c5:
a8:e8:0c:28:06:54:44:4a:1e:d6:bc:c3:eb:d5:91:
48:da:34:9a:ef:4d:12:88:90:b8:a9:4c:35:16:f7:
a8:20:89:3c:c1:19:6a:12:d8:99:44:53:ea:0a:72:
64:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:32:B2:8F:0F:7A:2F:62:B1:99:46:24:A9:7E:03:E9:D2:7C:A4:65
X509v3 Authority Key Identifier:
keyid:6B:23:3D:75:50:8B:4E:85:CC:CF:44:34:9A:7C:B7:03:19:8D:1D:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ayM9dVCLToXMz0Q0mny3AxmNHSY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/dDKyjw96L2KxmUYkqX4D6dJ8pGU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/ayM9dVCLToXMz0Q0mny3AxmNHSY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.76.61.0/24
185.76.63.0/24
188.119.180.0/24
188.119.182.0/23
Signature Algorithm: sha256WithRSAEncryption
19:f4:fc:b3:b5:27:89:d2:fc:ad:41:ad:f2:a9:88:09:0e:26:
79:96:4c:ad:69:63:8c:99:af:cf:9b:30:78:6c:66:0d:12:14:
70:34:ff:ad:aa:57:94:d5:d6:40:d7:75:e1:ed:06:69:b2:cf:
ef:84:b1:00:0f:7b:4d:bb:a4:5f:84:06:39:61:06:98:c7:54:
bb:d1:fc:3d:1b:2c:6b:c2:19:53:82:ca:ca:2d:ca:d1:c6:bd:
81:cf:0b:22:89:5a:e5:16:61:ed:fd:5e:7d:8d:0c:cb:e6:02:
0d:8b:fc:f4:66:7f:b8:02:3f:bc:14:4c:d2:6c:6e:15:74:05:
5b:5c:2a:bc:b1:c6:fc:4a:f0:89:15:2f:f8:5d:47:92:21:e7:
b1:88:23:6a:67:2a:4a:29:fc:04:b3:43:d5:a5:e1:d5:55:e1:
c7:c2:81:57:c9:40:31:0d:b0:16:e7:b6:b3:4b:6c:e2:c0:f3:
f1:ed:95:80:7f:58:7c:91:e7:d0:ff:e2:40:8d:27:01:d8:77:
bb:13:55:f8:43:ea:58:eb:80:b8:b4:a8:9b:46:43:a4:f0:87:
f2:33:b8:a0:a1:5b:ec:2a:99:f4:48:c9:4a:35:6b:ef:d4:bc:
67:e7:56:ec:22:73:05:72:26:cc:6e:e0:be:f9:e8:7a:ef:2f:
b2:17:18:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 07:41:30 2025 by rpki-client