Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/_9Ul6K_UTV_vpt8n-spk7QSZYno.roa
File: _9Ul6K_UTV_vpt8n-spk7QSZYno.roa (raw, json)
Hash identifier: 8B/OeuoIVcxCENDSo1UmgKyl8NrBf3ai9vGS3RaUb2o=
Subject key identifier: FF:D5:25:E8:AF:D4:4D:5F:EF:A6:DF:27:FA:CA:64:ED:04:99:62:7A
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 019470ED4A41C8508CE5C959246419EC6426
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/_9Ul6K_UTV_vpt8n-spk7QSZYno.roa
Signing time: Thu 16 Jan 2025 21:03:06 +0000
ROA not before: Thu 16 Jan 2025 21:03:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200908
IP address blocks: 185.224.36.0/22 maxlen: 24
185.254.156.0/24 maxlen: 24
185.254.158.0/24 maxlen: 24
194.41.118.0/24 maxlen: 24
195.28.178.0/23 maxlen: 24
195.28.178.0/24 maxlen: 24
195.28.179.0/24 maxlen: 24
195.34.66.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:70:ed:4a:41:c8:50:8c:e5:c9:59:24:64:19:ec:64:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Jan 16 21:03:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ffd525e8afd44d5fefa6df27faca64ed0499627a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:7b:57:08:6c:08:94:61:6c:82:55:ad:ea:27:
4b:94:36:b8:cd:10:94:29:fb:e6:8c:6d:11:da:4f:
15:e9:a0:b9:4e:cb:78:92:2d:82:92:38:6a:0f:fa:
9d:b4:7c:ec:d6:9a:24:40:56:72:69:ef:09:9f:85:
ba:91:2b:60:31:44:46:64:b7:ef:07:10:fb:68:9a:
01:b9:e4:99:3f:57:4e:96:4a:7d:75:f9:f9:dd:ad:
7b:82:30:7b:e4:1c:e0:ea:d2:2a:65:5e:32:77:15:
6d:04:eb:e5:02:9b:de:43:b3:87:e3:00:35:b7:71:
8b:0c:39:78:68:90:9f:8d:be:4c:d9:f4:fd:ba:a6:
73:59:b0:99:51:0b:f9:67:e2:98:95:e1:8b:70:b7:
c0:71:9a:e8:07:96:c1:14:bf:54:66:8a:88:f7:fe:
18:3f:d1:58:29:b1:a6:f3:95:fc:1b:4f:40:8c:cb:
8f:cd:04:92:82:1e:d7:0e:c9:1f:b7:23:8b:bd:e0:
94:98:0a:d4:37:7d:68:90:60:d9:00:d7:fb:d4:3b:
e7:ca:5b:cb:d8:6b:32:38:96:f1:d4:0f:2b:c4:85:
b3:cc:99:18:26:e3:d4:55:be:6f:6a:43:a3:de:62:
11:39:1a:c8:1f:52:2d:81:1a:b2:1b:ba:4b:35:2e:
7e:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:D5:25:E8:AF:D4:4D:5F:EF:A6:DF:27:FA:CA:64:ED:04:99:62:7A
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/_9Ul6K_UTV_vpt8n-spk7QSZYno.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.224.36.0/22
185.254.156.0/24
185.254.158.0/24
194.41.118.0/24
195.28.178.0/23
195.34.66.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:8f:1b:99:67:a2:64:59:2c:ae:6a:49:48:b6:f0:a6:d5:2a:
6d:63:e6:b4:9e:bc:e5:c7:b6:c6:8d:fd:fe:59:31:7d:73:49:
01:8a:a8:fd:d1:5b:19:1e:3f:d4:0b:47:f1:bf:35:1b:de:a3:
9c:94:56:77:a0:24:04:3b:79:9b:9c:d1:77:43:22:ae:2a:4e:
7d:6b:2d:9f:6b:f6:d9:2e:4a:03:4a:26:39:82:8c:fb:12:a5:
0e:6a:4c:a0:ce:b7:4c:c3:53:b2:1a:d7:d5:3c:e2:b3:0b:37:
82:24:d2:14:c1:d0:b9:f3:2a:9c:41:ab:db:e0:cc:72:84:26:
15:e1:4a:d5:4b:82:bd:92:56:c6:09:41:d3:7d:c4:35:63:8e:
e5:34:13:98:21:d2:c4:e5:e5:c5:f0:57:53:04:cb:31:a0:f9:
2e:9b:6f:12:09:fd:1a:96:7e:36:ff:d4:c5:2b:d7:b2:41:45:
9b:07:98:61:60:c9:94:a8:ec:3d:69:3e:a4:b9:f1:08:ec:4f:
d5:c6:45:84:a4:02:a1:f8:00:79:ce:d2:e1:cf:d4:d1:e9:fc:
41:73:0a:1a:5c:22:4e:71:8f:25:b0:0b:ce:32:71:c9:6c:f6:
e0:f0:99:0a:7c:a0:8b:43:91:9e:6b:00:c6:16:c0:6a:83:b5:
21:94:c9:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 00:50:23 2025 by rpki-client