
Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/c41c74-0b82-40e7-a0bf-0aae1ccd874b/1/_bd1uUXdWfimJKjSRLsLwjuEcR8.roa
File: _bd1uUXdWfimJKjSRLsLwjuEcR8.roa (raw, json)
Hash identifier: uctm/cSaahCT9GH/ghFykbr6OfbIpXkqwxi32eXN9Ao=
Subject key identifier: FD:B7:75:B9:45:DD:59:F8:A6:24:A8:D2:44:BB:0B:C2:3B:84:71:1F
Certificate issuer: /CN=78b04fbafaa36b71fcd36eca50b5fe0e88dd3551
Certificate serial: 019420D630EA446EF69825D1B6873FCC97FA
Authority key identifier: 78:B0:4F:BA:FA:A3:6B:71:FC:D3:6E:CA:50:B5:FE:0E:88:DD:35:51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eLBPuvqja3H8027KULX-DojdNVE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/c41c74-0b82-40e7-a0bf-0aae1ccd874b/1/_bd1uUXdWfimJKjSRLsLwjuEcR8.roa
Signing time: Wed 01 Jan 2025 07:48:15 +0000
ROA not before: Wed 01 Jan 2025 07:48:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 201997
IP address blocks: 185.59.184.0/22 maxlen: 22
185.59.184.0/24 maxlen: 24
185.59.185.0/24 maxlen: 24
185.59.186.0/23 maxlen: 23
185.59.186.0/24 maxlen: 24
185.59.187.0/24 maxlen: 24
2a02:6ca0::/32 maxlen: 32
2a02:6ca0::/48 maxlen: 48
2a02:6ca1::/32 maxlen: 32
2a02:6ca2::/32 maxlen: 32
2a02:6ca4::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d6:30:ea:44:6e:f6:98:25:d1:b6:87:3f:cc:97:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=78b04fbafaa36b71fcd36eca50b5fe0e88dd3551
Validity
Not Before: Jan 1 07:48:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fdb775b945dd59f8a624a8d244bb0bc23b84711f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:a5:e7:c5:95:fb:cb:d7:e3:de:2b:03:f0:8d:
b6:66:44:3a:73:ba:e8:a6:b9:9e:c0:ec:bc:5e:5f:
ae:59:de:ea:49:6c:3a:b9:85:ed:2a:a0:ad:61:1c:
cd:d3:b1:d4:8f:ce:15:2b:0d:03:2f:42:7c:2b:2b:
f0:24:60:ec:55:1c:b1:73:f7:41:2c:5a:b8:f5:fc:
64:53:78:f4:7a:0e:3c:b9:bb:01:e5:e0:a9:ca:51:
76:0d:7c:9d:4b:30:c6:33:c3:c0:7e:40:b3:12:fa:
3e:4f:93:36:9c:28:a1:9c:35:6b:21:f3:a5:3e:73:
59:8d:06:05:21:50:47:bd:e7:df:00:11:82:bb:3c:
2f:4d:d1:30:4a:cd:25:a0:31:7f:e9:7e:65:42:be:
d2:6b:df:7c:4b:a3:51:6b:16:97:83:19:0f:eb:5b:
f5:40:04:f0:98:5e:4e:16:f8:9b:56:99:ba:a1:24:
c5:b6:68:8e:80:5b:d1:a2:02:b0:ad:e3:c3:ad:6a:
e0:07:f2:2e:e0:9a:14:9d:66:58:7d:da:79:27:07:
23:68:b8:c4:df:ea:46:f4:da:03:f6:cd:88:43:52:
4d:19:dc:7c:e1:82:a7:49:7b:7c:d8:45:1e:87:a5:
bc:07:81:b7:c2:d9:bb:f3:96:d9:60:b7:b7:ae:6e:
1b:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:B7:75:B9:45:DD:59:F8:A6:24:A8:D2:44:BB:0B:C2:3B:84:71:1F
X509v3 Authority Key Identifier:
keyid:78:B0:4F:BA:FA:A3:6B:71:FC:D3:6E:CA:50:B5:FE:0E:88:DD:35:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eLBPuvqja3H8027KULX-DojdNVE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/c41c74-0b82-40e7-a0bf-0aae1ccd874b/1/_bd1uUXdWfimJKjSRLsLwjuEcR8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/c41c74-0b82-40e7-a0bf-0aae1ccd874b/1/eLBPuvqja3H8027KULX-DojdNVE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.59.184.0/22
IPv6:
2a02:6ca0::-2a02:6ca2:ffff:ffff:ffff:ffff:ffff:ffff
2a02:6ca4::/32
Signature Algorithm: sha256WithRSAEncryption
12:7d:ce:b9:9f:55:23:99:a7:cf:9c:cc:90:53:2b:bc:5b:69:
ae:e8:e8:08:c7:6d:99:be:c3:2d:b0:87:b4:33:6e:8b:0a:82:
ff:4b:f7:6b:70:b2:f9:f9:ef:c6:87:1d:f0:b3:50:e0:35:de:
4d:46:59:88:e9:0b:a8:14:c6:8a:43:c9:8f:36:5b:56:4d:ff:
39:a4:91:bd:79:48:36:48:10:2a:62:c0:94:65:07:fe:63:39:
fd:a1:d1:be:38:5f:4b:cc:a3:e5:5a:5f:7c:a8:30:f8:04:c1:
69:65:37:ee:87:f4:46:16:83:26:94:e5:97:e7:77:7d:3d:5d:
61:66:67:98:7b:b8:90:9c:14:e4:67:c4:5b:34:93:6c:3e:6a:
5f:3d:89:46:bb:b6:69:d8:e8:ef:c8:7a:7a:3a:e1:d9:5f:fa:
ca:9f:71:96:50:29:d6:86:39:0f:a2:fa:d6:9c:db:20:f2:6e:
44:d2:3a:1e:66:23:0e:c7:59:26:4a:84:fc:4b:26:94:db:01:
a4:5c:b0:cd:ea:fc:55:c2:1a:d8:40:12:dc:9c:42:ea:30:e8:
5d:ae:3d:89:96:e9:8a:86:ea:8e:7d:6f:28:ab:d4:7a:b8:18:
7f:82:3e:d0:13:e1:8d:ad:78:35:db:36:18:8d:60:d7:58:5e:
34:1b:3f:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:57:06 2025 by rpki-client