Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/yyPUAj_dCWAktPW0jmBjCiRvIJg.roa
File: yyPUAj_dCWAktPW0jmBjCiRvIJg.roa (raw, json)
Hash identifier: H8oCA9x6vnmIvl4HatB3uvnypYSjgIN9/CrfMgatutI=
Subject key identifier: CB:23:D4:02:3F:DD:09:60:24:B4:F5:B4:8E:60:63:0A:24:6F:20:98
Certificate issuer: /CN=922208b47b6a864d9d1ff33e06aa81d13819a74e
Certificate serial: 01942522010DA6FFF8E720280041659706E7
Authority key identifier: 92:22:08:B4:7B:6A:86:4D:9D:1F:F3:3E:06:AA:81:D1:38:19:A7:4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kiIItHtqhk2dH_M-BqqB0TgZp04.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/yyPUAj_dCWAktPW0jmBjCiRvIJg.roa
Signing time: Thu 02 Jan 2025 03:49:32 +0000
ROA not before: Thu 02 Jan 2025 03:49:32 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 134450
IP address blocks: 77.246.152.0/22 maxlen: 32
185.153.148.0/24 maxlen: 32
185.160.64.0/24 maxlen: 32
185.161.68.0/24 maxlen: 32
185.201.189.0/24 maxlen: 32
185.201.191.0/24 maxlen: 32
194.150.72.0/24 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:22:01:0d:a6:ff:f8:e7:20:28:00:41:65:97:06:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=922208b47b6a864d9d1ff33e06aa81d13819a74e
Validity
Not Before: Jan 2 03:49:32 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cb23d4023fdd096024b4f5b48e60630a246f2098
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:d3:37:05:63:59:b4:64:5d:75:19:33:92:5e:
f3:ae:c4:d2:05:96:09:5b:f0:bf:33:ae:18:7f:0b:
4c:72:cf:47:0e:ad:d5:31:b3:af:6a:e9:0d:db:49:
ed:16:8f:e7:ba:86:56:f4:3f:91:8c:48:70:1e:6b:
4c:14:b8:50:29:03:f8:27:a6:49:9c:7d:5d:d7:4e:
5d:65:17:09:0f:13:22:7d:48:43:c3:97:88:0f:68:
fe:98:e6:ea:8f:4a:14:fa:c4:da:6f:4a:33:04:bc:
98:77:95:56:7b:be:8e:2f:ef:cb:80:fc:49:b4:e7:
c9:6b:ac:d0:c4:a3:f2:8c:fc:f9:1e:09:33:c0:0d:
bd:fc:aa:c2:53:48:1f:29:19:86:77:1c:db:2f:1a:
1b:0d:72:3e:0d:54:f1:cf:89:08:bd:06:5d:20:3f:
cd:c2:34:89:31:9e:49:87:82:5e:b5:8a:da:c3:b2:
0e:21:2b:3b:95:6e:1a:51:c1:79:a4:70:05:e1:12:
b5:55:86:fa:6f:11:3e:79:a4:22:3b:f5:aa:61:19:
62:75:2d:6f:92:2a:b7:c6:2a:f0:ee:34:2d:f9:dc:
34:4c:75:c2:da:37:b1:c4:b9:95:12:5e:0f:aa:84:
95:b0:c5:9b:d8:1a:e3:ac:ae:c6:04:b8:db:47:5a:
41:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:23:D4:02:3F:DD:09:60:24:B4:F5:B4:8E:60:63:0A:24:6F:20:98
X509v3 Authority Key Identifier:
keyid:92:22:08:B4:7B:6A:86:4D:9D:1F:F3:3E:06:AA:81:D1:38:19:A7:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kiIItHtqhk2dH_M-BqqB0TgZp04.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/yyPUAj_dCWAktPW0jmBjCiRvIJg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/kiIItHtqhk2dH_M-BqqB0TgZp04.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.246.152.0/22
185.153.148.0/24
185.160.64.0/24
185.161.68.0/24
185.201.189.0/24
185.201.191.0/24
194.150.72.0/24
Signature Algorithm: sha256WithRSAEncryption
84:92:e7:4a:2f:15:89:df:35:3b:12:bd:3f:b7:76:41:63:ae:
9a:ba:2b:19:12:d0:15:ef:5b:69:f8:f5:ca:d7:d8:d6:1b:ce:
7b:94:2a:cd:a3:81:a6:ad:62:58:cf:ef:d8:a3:7e:2e:18:78:
f3:f8:ba:81:f9:f0:c0:34:ad:43:c1:84:84:67:da:18:22:4f:
e0:4b:13:bf:a1:a5:36:5d:6a:52:c9:07:32:5d:21:a3:8f:3d:
19:47:df:51:4b:7f:dd:9f:3d:de:d5:f6:8a:69:1d:be:8b:12:
de:22:bb:36:a1:a6:87:9e:89:89:7e:0e:ee:b9:ec:11:84:bd:
81:7a:8a:cb:6f:e1:fe:23:09:70:18:f1:8a:13:33:6a:d9:94:
d9:03:56:a1:f3:7f:9d:5f:6a:d5:81:47:1d:b8:00:c7:3d:4e:
97:9e:0f:bd:a6:1b:a5:e6:37:4e:3d:9b:05:a1:4a:aa:46:b8:
44:97:c0:ea:9f:a3:55:c0:2c:c8:7c:29:c4:f5:af:8d:6a:13:
8a:5f:6c:fb:c3:35:2f:88:f5:f8:13:d3:bc:d9:3c:8b:10:26:
e1:a8:e3:00:07:2a:fb:5a:82:1f:5e:2d:5c:c1:be:dc:5a:9b:
b1:79:b8:54:85:31:2d:97:8c:42:2d:cd:fa:fd:8d:3d:02:b8:
db:02:e1:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 22:13:51 2025 by rpki-client