Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/DyhmuM_ytZpVGh9Ifd0YkllJYEI.roa
File: DyhmuM_ytZpVGh9Ifd0YkllJYEI.roa (raw, json)
Hash identifier: yVdfljtejYSG85A1mOPgFZhLcToG9gYd9It94R+FkrQ=
Subject key identifier: 0F:28:66:B8:CF:F2:B5:9A:55:1A:1F:48:7D:DD:18:92:59:49:60:42
Certificate issuer: /CN=0548cedf17029ed98a108113c6c109ecaccd82ec
Certificate serial: 019428282A5166888D6EF3899986619A124C
Authority key identifier: 05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/DyhmuM_ytZpVGh9Ifd0YkllJYEI.roa
Signing time: Thu 02 Jan 2025 17:55:08 +0000
ROA not before: Thu 02 Jan 2025 17:55:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 201642
IP address blocks: 85.196.128.0/23 maxlen: 23
85.196.128.0/24 maxlen: 24
85.196.129.0/24 maxlen: 24
85.196.130.0/23 maxlen: 23
85.196.130.0/24 maxlen: 24
85.196.131.0/24 maxlen: 24
2a01:288:4005::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:28:2a:51:66:88:8d:6e:f3:89:99:86:61:9a:12:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0548cedf17029ed98a108113c6c109ecaccd82ec
Validity
Not Before: Jan 2 17:55:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0f2866b8cff2b59a551a1f487ddd189259496042
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:6e:aa:c9:15:a7:fb:95:cc:56:25:10:ba:08:
c5:42:5d:9a:24:10:81:36:05:3d:a9:c9:96:38:08:
99:d7:7d:9b:32:8b:f1:d0:61:52:b9:41:18:89:d1:
17:a4:23:de:c0:89:ec:91:07:58:87:07:e5:5e:d1:
6a:17:4c:3f:17:a6:de:c4:0b:7b:75:20:1f:87:95:
2c:93:c9:01:ed:61:28:d1:71:87:4a:bd:d2:ec:d9:
9c:0e:dd:98:67:65:e5:26:d7:8e:6e:bf:e0:f5:4a:
8c:39:f4:18:39:ee:f0:77:f9:e3:db:de:fc:e9:89:
8b:4f:ae:d9:89:2d:cf:ab:4c:5f:9c:a0:91:b1:38:
d5:75:52:51:07:46:90:c6:01:ab:97:1a:f9:93:f2:
0c:cb:59:7c:b8:cd:ad:91:6d:8f:c2:c6:bd:28:d0:
bd:f2:ce:80:35:bf:46:c3:83:48:97:17:f7:49:a6:
74:ef:9f:b5:44:10:fd:87:6a:98:ce:2c:cc:70:14:
f8:8b:43:5a:73:80:ab:a1:bc:54:1e:2d:de:d0:95:
51:20:08:ba:d9:5f:2b:e3:05:22:2e:ed:e3:bc:f4:
0f:9d:15:19:58:ec:cb:49:1f:28:e2:59:a7:03:2c:
e8:9c:42:d8:01:5f:44:b4:2d:69:41:f6:9e:a2:e3:
a5:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:28:66:B8:CF:F2:B5:9A:55:1A:1F:48:7D:DD:18:92:59:49:60:42
X509v3 Authority Key Identifier:
keyid:05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/DyhmuM_ytZpVGh9Ifd0YkllJYEI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.196.128.0/22
IPv6:
2a01:288:4005::/48
Signature Algorithm: sha256WithRSAEncryption
91:c2:83:46:6e:81:43:9e:b7:71:09:67:88:c6:83:ec:77:ad:
77:a0:60:9f:83:48:5e:18:45:a7:87:25:26:c4:0d:20:ba:4d:
16:5b:ae:6b:73:14:60:6a:2d:04:c3:0b:0f:44:de:b2:c2:22:
43:4f:fe:8d:f1:94:0b:cd:0e:d7:8a:ef:b2:89:6d:b4:bc:7c:
96:98:e7:c2:4c:e9:c5:80:35:9c:eb:34:a1:e1:c6:8d:e5:b6:
07:63:ab:8b:60:52:8f:21:b0:dc:2d:16:ef:65:cb:48:ab:aa:
d8:81:ab:08:a6:eb:a7:97:da:04:42:ec:7f:03:f5:59:53:34:
cb:e6:53:c2:f6:ac:c0:59:aa:60:b2:e0:53:8f:38:c9:bc:ec:
34:05:5e:db:65:af:5a:80:9f:74:fb:01:fc:81:eb:da:bd:85:
02:dd:02:62:41:a3:6e:a9:91:2c:77:5b:a6:dc:da:ef:8d:bb:
1e:16:3f:fa:51:c9:81:8f:fb:54:27:fe:a2:82:36:9b:e0:08:
39:8d:bb:92:f6:f9:f7:ba:e9:7e:94:16:f7:42:07:92:d0:ca:
5f:93:f0:1a:79:ae:1b:91:d5:47:db:b2:eb:10:7b:f0:ec:2e:
f7:71:aa:24:54:2c:54:34:d1:62:65:af:9e:63:cf:3e:f7:7f:
7f:34:6c:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 16:46:45 2025 by rpki-client