Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/aa1019-564f-4c46-a217-fb5949808ddc/1/gYp6IGBVOFVZsRB7IjomepnaIhE.roa
File: gYp6IGBVOFVZsRB7IjomepnaIhE.roa (raw, json)
Hash identifier: iP6yT4eLEYF4BsaRCKFRQy+3qMq100f31MHRl4h4KPk=
Subject key identifier: 81:8A:7A:20:60:55:38:55:59:B1:10:7B:22:3A:26:7A:99:DA:22:11
Certificate issuer: /CN=624ad4535ac88dd534199f2a726095af71afe44e
Certificate serial: 018CC2DAC7DBD01D1F6B80AA89B4F23E3008
Authority key identifier: 62:4A:D4:53:5A:C8:8D:D5:34:19:9F:2A:72:60:95:AF:71:AF:E4:4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/aa1019-564f-4c46-a217-fb5949808ddc/1/gYp6IGBVOFVZsRB7IjomepnaIhE.roa
Signing time: Mon 01 Jan 2024 02:29:27 +0000
ROA not before: Mon 01 Jan 2024 02:29:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 197706
IP address blocks: 185.233.124.0/24 maxlen: 24
185.233.125.0/24 maxlen: 24
185.233.127.0/24 maxlen: 24
185.233.126.0/24 maxlen: 24
185.53.100.0/22 maxlen: 24
31.171.152.0/21 maxlen: 21
31.171.152.0/22 maxlen: 22
31.171.159.0/24 maxlen: 24
31.171.158.0/24 maxlen: 24
31.171.156.0/24 maxlen: 24
31.171.157.0/24 maxlen: 24
109.104.135.0/24 maxlen: 24
109.104.134.0/24 maxlen: 24
109.104.138.0/24 maxlen: 24
109.104.139.0/24 maxlen: 24
109.104.136.0/24 maxlen: 24
109.104.137.0/24 maxlen: 24
109.104.140.0/22 maxlen: 22
109.104.142.0/24 maxlen: 24
109.104.140.0/24 maxlen: 24
109.104.141.0/24 maxlen: 24
109.104.143.0/24 maxlen: 24
109.104.159.0/24 maxlen: 24
109.104.157.0/24 maxlen: 24
109.104.158.0/24 maxlen: 24
109.104.156.0/24 maxlen: 24
45.142.26.0/24 maxlen: 24
45.142.27.0/24 maxlen: 24
45.142.25.0/24 maxlen: 24
194.113.80.0/23 maxlen: 23
194.113.94.0/24 maxlen: 24
194.113.95.0/24 maxlen: 24
45.142.24.0/24 maxlen: 24
2a0d:4a40::/29 maxlen: 48
2a0f:a880::/29 maxlen: 48
2a0e:3f00::/29 maxlen: 48
2a0e:d4c0::/29 maxlen: 48
2a0d:27c0::/29 maxlen: 48
2a0e:3f01::/48 maxlen: 48
2a09:6ec0::/29 maxlen: 48
2a09:6e47::/48 maxlen: 48
2a04:27c0::/29 maxlen: 48
2a0e:4f00::/29 maxlen: 48
2a0f:42c0::/29 maxlen: 48
2a0d:42c0::/29 maxlen: 48
2a09:6e40::/29 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:da:c7:db:d0:1d:1f:6b:80:aa:89:b4:f2:3e:30:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=624ad4535ac88dd534199f2a726095af71afe44e
Validity
Not Before: Jan 1 02:29:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=818a7a206055385559b1107b223a267a99da2211
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:46:5c:a3:53:87:c0:7d:2b:78:49:96:10:85:
e8:d4:72:38:d3:81:6a:35:d2:aa:81:3a:09:04:52:
23:e5:5c:e0:d2:a8:5f:32:a1:d5:3f:cc:33:8e:7b:
a7:c1:bb:d2:c3:65:0e:f9:5d:6e:43:91:ba:42:07:
a3:b4:2a:4d:07:c4:e5:87:20:31:7e:00:7e:63:6a:
a5:c9:f3:66:12:5a:ef:c3:6f:8a:7d:30:10:8d:37:
e2:12:e4:b9:03:f4:a2:2e:46:74:e9:ae:f2:19:ff:
40:49:6e:38:6a:e0:c3:e4:68:6b:96:c1:5b:a6:0b:
5e:5c:c0:07:3d:c9:93:b0:89:98:74:3a:90:45:b3:
51:ec:8f:56:0e:ff:11:db:53:e0:50:4f:4b:29:2d:
aa:33:21:1b:54:b6:30:b4:85:d2:27:df:7c:41:14:
ea:51:8c:54:6a:3c:44:13:23:f5:f3:7c:c8:5d:ec:
d1:2a:42:a5:0d:6a:82:38:2a:ad:0c:7b:f4:da:2e:
77:a6:b6:8a:ef:37:77:a0:19:d4:0b:0e:32:38:03:
98:71:7a:cd:37:f2:52:15:dc:5a:94:97:f7:ae:15:
9b:ee:df:72:cb:5b:11:8e:8e:f4:2e:c2:e5:4a:b2:
8f:f6:10:8a:35:e3:ea:e0:97:c3:df:ad:45:d2:a9:
9c:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:8A:7A:20:60:55:38:55:59:B1:10:7B:22:3A:26:7A:99:DA:22:11
X509v3 Authority Key Identifier:
keyid:62:4A:D4:53:5A:C8:8D:D5:34:19:9F:2A:72:60:95:AF:71:AF:E4:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/aa1019-564f-4c46-a217-fb5949808ddc/1/gYp6IGBVOFVZsRB7IjomepnaIhE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/aa1019-564f-4c46-a217-fb5949808ddc/1/YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.171.152.0/21
45.142.24.0/22
109.104.134.0-109.104.143.255
109.104.156.0/22
185.53.100.0/22
185.233.124.0/22
194.113.80.0/23
194.113.94.0/23
IPv6:
2a04:27c0::/29
2a09:6e40::/29
2a09:6ec0::/29
2a0d:27c0::/29
2a0d:42c0::/29
2a0d:4a40::/29
2a0e:3f00::/29
2a0e:4f00::/29
2a0e:d4c0::/29
2a0f:42c0::/29
2a0f:a880::/29
Signature Algorithm: sha256WithRSAEncryption
4b:e6:55:bd:92:fd:8a:3b:76:73:6c:39:32:69:8b:01:ab:c9:
4e:c8:e8:e5:1e:57:3b:6f:44:ae:9c:ae:22:9d:7a:fd:b8:46:
a2:c6:54:f5:24:af:d1:5f:00:09:63:2f:00:f4:16:b0:2a:7e:
b1:92:dd:3e:50:75:c3:af:ae:1e:a5:97:e8:37:83:b7:fa:b1:
20:ca:bb:87:54:62:8b:8b:42:8c:9d:82:2b:30:c4:f3:8e:ea:
f5:ab:29:57:79:5a:ba:46:ac:4c:37:5b:c8:ac:b5:8b:98:56:
35:13:bd:72:fa:0a:98:11:35:fc:9e:63:e9:54:c3:87:f8:84:
b1:1f:c5:87:bb:59:a0:ec:9d:3a:5c:f0:b4:74:9b:4d:46:0b:
22:db:0f:10:15:a4:b3:aa:a4:4c:63:9c:1b:0e:80:53:12:3d:
ae:08:b2:10:f6:c4:aa:1e:a1:df:bb:73:82:27:f6:c2:b9:eb:
ea:60:2a:c3:e2:ad:6c:33:9a:c8:e9:ef:9f:12:8d:35:fc:11:
21:9b:0c:c2:a6:cf:2f:ac:2e:eb:c9:9f:82:94:23:ab:79:65:
05:d6:c3:5b:46:dc:22:58:06:d4:b1:3d:51:90:b8:66:62:59:
b0:24:4e:b8:cf:44:17:68:65:5c:7e:46:57:d5:9d:d4:8b:84:
5a:41:94:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:33:03 2025 by rpki-client