Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/599528-b89d-4402-a808-6c832050e77a/1/cG-TYaFK2J2ByypDgvQ4tRUHBNk.roa
File: cG-TYaFK2J2ByypDgvQ4tRUHBNk.roa (raw, json)
Hash identifier: 3r+iWy7gnItJRFxaUeqbAj9oWcBjP35GR/4lv1d2DLk=
Subject key identifier: 70:6F:93:61:A1:4A:D8:9D:81:CB:2A:43:82:F4:38:B5:15:07:04:D9
Certificate issuer: /CN=6a4623f76bd5bb2df0af66f360ff74ff1c00db02
Certificate serial: 019424B37D9ABB5F853099C70C24906455B2
Authority key identifier: 6A:46:23:F7:6B:D5:BB:2D:F0:AF:66:F3:60:FF:74:FF:1C:00:DB:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/akYj92vVuy3wr2bzYP90_xwA2wI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/599528-b89d-4402-a808-6c832050e77a/1/cG-TYaFK2J2ByypDgvQ4tRUHBNk.roa
Signing time: Thu 02 Jan 2025 01:48:50 +0000
ROA not before: Thu 02 Jan 2025 01:48:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 199246
IP address blocks: 185.4.132.0/22 maxlen: 22
185.138.40.0/22 maxlen: 24
2a02:c500::/29 maxlen: 32
2a07:8c0::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:7d:9a:bb:5f:85:30:99:c7:0c:24:90:64:55:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a4623f76bd5bb2df0af66f360ff74ff1c00db02
Validity
Not Before: Jan 2 01:48:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=706f9361a14ad89d81cb2a4382f438b5150704d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:ad:9e:24:65:8f:51:a5:3f:99:e1:7b:d6:fd:
88:22:31:25:fe:c0:8d:76:4a:cd:9a:ed:22:03:8c:
13:e2:25:44:be:22:4c:1b:69:82:b0:cd:33:3f:24:
89:10:a4:77:78:58:00:74:00:49:3f:f6:20:a2:cf:
b9:53:d2:04:c7:66:a2:f2:12:6b:81:0e:7d:ae:d6:
fa:a0:ef:75:e2:70:90:4e:a1:58:b5:08:62:1d:13:
33:5c:0c:fa:81:5c:37:4e:7e:22:d2:76:2b:b3:d7:
9b:96:d2:ef:4a:5e:57:c0:7b:c3:c4:cf:db:11:aa:
0c:63:f6:a8:54:2e:0b:ef:68:11:98:9b:4d:a4:5b:
11:90:da:b7:6f:03:5f:56:fd:96:4f:3a:dc:cb:b7:
48:b7:1d:03:64:6a:d3:32:4d:89:53:e1:fe:ae:25:
cb:1e:f0:22:11:3b:ae:97:08:84:9d:9e:20:46:ad:
b8:06:eb:de:ed:83:46:d9:6b:75:13:f0:e2:c7:9a:
1d:a9:a0:d0:d7:ef:4f:e6:4f:71:a4:fc:17:c1:65:
b8:cd:77:68:66:95:8f:fc:b3:d2:1e:53:44:8c:c3:
b5:5e:7c:59:94:b1:5f:f5:14:10:11:5b:65:dc:e7:
f1:54:d1:c7:47:63:38:9b:d3:e0:70:8c:eb:1e:59:
12:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:6F:93:61:A1:4A:D8:9D:81:CB:2A:43:82:F4:38:B5:15:07:04:D9
X509v3 Authority Key Identifier:
keyid:6A:46:23:F7:6B:D5:BB:2D:F0:AF:66:F3:60:FF:74:FF:1C:00:DB:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/akYj92vVuy3wr2bzYP90_xwA2wI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/599528-b89d-4402-a808-6c832050e77a/1/cG-TYaFK2J2ByypDgvQ4tRUHBNk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/599528-b89d-4402-a808-6c832050e77a/1/akYj92vVuy3wr2bzYP90_xwA2wI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.4.132.0/22
185.138.40.0/22
IPv6:
2a02:c500::/29
2a07:8c0::/29
Signature Algorithm: sha256WithRSAEncryption
78:5a:ef:92:51:31:9a:fc:2f:be:0d:69:b2:a5:57:d3:09:2c:
e1:c9:c1:d7:11:bf:58:55:09:33:79:cd:e2:41:93:2f:98:b8:
92:f2:07:f0:3e:38:04:05:c4:ff:78:95:5c:83:c8:ce:6a:e1:
1d:e7:42:19:8e:3f:60:9c:51:bd:cd:cc:9c:24:a0:10:d0:9a:
81:6b:46:67:07:a6:d2:31:0c:a7:ce:8b:48:5a:e2:3b:be:ac:
9f:70:c6:93:06:b6:9b:0c:e8:40:ed:a6:70:22:0b:47:b7:bc:
4d:e6:2e:7c:b5:68:fe:a4:52:81:f0:eb:b3:85:c7:66:03:83:
14:55:53:88:8c:c1:e4:88:87:29:74:b9:06:e7:48:11:06:12:
6c:84:84:72:10:2f:5d:ab:e5:91:e1:05:60:3c:3f:16:ff:8a:
dd:85:36:ae:43:a5:78:a0:b3:42:8d:6d:2c:14:9c:6a:10:1f:
f6:78:87:14:a9:58:b9:20:5b:12:67:af:1a:21:e7:3e:0f:12:
41:54:a4:2a:67:e0:c4:5b:51:3e:b4:e0:01:8f:f0:81:2e:7e:
58:b2:f7:f9:e7:88:c3:23:6b:c7:a2:8b:64:ed:5a:00:ff:7b:
c9:78:c8:16:ff:cc:e3:b2:a6:39:4c:0b:f9:c8:b2:31:92:33:
58:93:33:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 15:02:15 2025 by rpki-client