Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/5f9e16-6c88-4888-b165-62000946b104/1/YM0sDAz7oGKrUlG24KNPtvbFdxA.roa
File: YM0sDAz7oGKrUlG24KNPtvbFdxA.roa (raw, json)
Hash identifier: 8bb64PBGaUuAiSro2szpfbPAmR7MNnLz1FZ2skC+Ewc=
Subject key identifier: 60:CD:2C:0C:0C:FB:A0:62:AB:52:51:B6:E0:A3:4F:B6:F6:C5:77:10
Certificate issuer: /CN=1187c516e7f6f173f0bcceb4b24ba9127120b54b
Certificate serial: 0183EBA79443FE2BD019D503E73081076A2C
Authority key identifier: 11:87:C5:16:E7:F6:F1:73:F0:BC:CE:B4:B2:4B:A9:12:71:20:B5:4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EYfFFuf28XPwvM60skupEnEgtUs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/5f9e16-6c88-4888-b165-62000946b104/1/YM0sDAz7oGKrUlG24KNPtvbFdxA.roa
Signing time: Tue 18 Oct 2022 15:12:51 +0000
ROA not before: Tue 18 Oct 2022 15:12:51 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 200845
IP address blocks: 185.228.120.0/24 maxlen: 24
185.228.120.0/22 maxlen: 24
185.228.121.0/24 maxlen: 24
45.141.4.0/22 maxlen: 24
185.113.186.0/24 maxlen: 24
185.113.185.0/24 maxlen: 24
185.113.184.0/24 maxlen: 24
185.113.187.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:eb:a7:94:43:fe:2b:d0:19:d5:03:e7:30:81:07:6a:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1187c516e7f6f173f0bcceb4b24ba9127120b54b
Validity
Not Before: Oct 18 15:12:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=60cd2c0c0cfba062ab5251b6e0a34fb6f6c57710
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:ff:57:8d:11:e6:54:9e:fa:5e:b9:b3:8d:50:
5a:bf:a3:66:d2:b0:4f:7e:c5:a4:3d:20:12:ac:f0:
66:ef:d3:57:03:80:56:fb:66:b6:45:d8:c9:40:10:
39:a2:8a:81:a5:00:4f:de:5f:50:a9:6a:28:e6:c6:
36:fe:ed:1e:54:35:59:52:d5:be:2e:bf:e1:ea:63:
e3:76:a8:d6:8f:05:f7:38:89:85:10:0e:0a:f8:fd:
f0:44:8a:95:8a:c5:f8:2e:df:17:40:19:dd:9a:4c:
e3:45:33:0f:8e:56:b0:6b:7e:83:70:64:b0:a9:ab:
9d:e3:1e:6d:0f:52:ce:22:28:c0:ed:06:bc:09:71:
d1:90:bf:ce:cd:89:d3:9e:e4:a9:0c:65:0f:53:6f:
3f:6e:0f:d4:33:9d:09:b0:0c:98:cb:3c:5b:af:96:
9b:44:f8:ce:60:83:4c:4f:da:84:d7:96:02:a5:bf:
18:8b:61:55:6f:10:49:13:2b:6e:a9:30:7b:ab:f0:
37:d1:7c:80:28:06:cc:6d:85:4f:90:b3:a6:47:a1:
5c:81:21:92:71:85:ed:22:a4:57:87:df:61:16:9b:
55:3a:af:ca:26:9d:d6:ec:57:43:cf:c9:b4:86:7c:
a3:e1:62:e8:57:82:aa:a1:de:c3:28:d2:7f:2f:e9:
a0:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:CD:2C:0C:0C:FB:A0:62:AB:52:51:B6:E0:A3:4F:B6:F6:C5:77:10
X509v3 Authority Key Identifier:
keyid:11:87:C5:16:E7:F6:F1:73:F0:BC:CE:B4:B2:4B:A9:12:71:20:B5:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EYfFFuf28XPwvM60skupEnEgtUs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/5f9e16-6c88-4888-b165-62000946b104/1/YM0sDAz7oGKrUlG24KNPtvbFdxA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/5f9e16-6c88-4888-b165-62000946b104/1/EYfFFuf28XPwvM60skupEnEgtUs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.141.4.0/22
185.113.184.0/22
185.228.120.0/22
Signature Algorithm: sha256WithRSAEncryption
62:a1:35:1a:28:b6:83:32:bc:9f:28:bc:f3:af:d6:0f:10:39:
44:dc:a0:dd:d9:0e:22:1d:8d:6c:d1:29:01:76:23:f7:b0:4e:
58:78:13:50:0f:fd:c2:35:cc:17:07:32:46:a6:be:36:15:8d:
34:29:f8:5e:63:7a:5a:1c:bb:48:a9:5b:33:56:68:e7:a2:cf:
2f:98:29:94:c2:a6:7e:4a:77:62:d6:3d:75:f7:5b:31:ce:ab:
ee:65:a1:78:d1:b6:aa:68:ff:c3:92:1a:c9:ed:26:00:71:e2:
e6:dd:c7:77:79:41:aa:79:d1:e6:ca:8b:ff:22:07:d0:26:80:
3e:8e:6e:c5:84:fe:ae:70:70:79:2c:33:f9:38:f4:c5:88:19:
7a:49:e3:cb:27:45:67:83:37:5c:12:4a:fc:4e:ea:3d:48:90:
cd:aa:51:c6:e4:3b:df:b9:72:88:f1:b8:15:29:3f:61:ba:91:
87:89:23:53:0e:3e:92:47:71:90:e9:e7:f1:d4:b6:9d:81:50:
e8:c4:c9:ab:27:f8:36:32:88:87:44:de:ca:01:1d:9a:09:5c:
6f:9d:a0:d0:f7:72:95:b5:1a:15:73:c2:d7:fe:4d:0f:68:07:
db:05:25:71:ec:35:b8:b1:91:0c:89:7f:30:17:df:69:b8:d6:
df:cd:63:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 06:45:33 2025 by rpki-client