Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/a782cc-1e09-4480-a6dc-6c20ebaf30a9/1/yJigt7WPN9DYDx5fLX0n2c-KHQA.roa
File: yJigt7WPN9DYDx5fLX0n2c-KHQA.roa (raw, json)
Hash identifier: gSW9NFhLfhIcbtZELCSreEKotIrfN2ZclTVS3dyDuhI=
Subject key identifier: C8:98:A0:B7:B5:8F:37:D0:D8:0F:1E:5F:2D:7D:27:D9:CF:8A:1D:00
Certificate issuer: /CN=833e0e480411b9c88e916def90fc3a901026394a
Certificate serial: 018CC56DFF4A9A9C93DF6F64A92BCF0BDE6F
Authority key identifier: 83:3E:0E:48:04:11:B9:C8:8E:91:6D:EF:90:FC:3A:90:10:26:39:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gz4OSAQRuciOkW3vkPw6kBAmOUo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/a782cc-1e09-4480-a6dc-6c20ebaf30a9/1/yJigt7WPN9DYDx5fLX0n2c-KHQA.roa
Signing time: Mon 01 Jan 2024 14:29:29 +0000
ROA not before: Mon 01 Jan 2024 14:29:29 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 34173
IP address blocks: 195.64.164.0/23 maxlen: 23
193.105.43.0/24 maxlen: 24
185.7.75.0/24 maxlen: 24
185.7.74.0/24 maxlen: 24
185.7.73.0/24 maxlen: 24
185.7.72.0/24 maxlen: 24
185.7.72.0/22 maxlen: 24
2a03:1780::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6d:ff:4a:9a:9c:93:df:6f:64:a9:2b:cf:0b:de:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=833e0e480411b9c88e916def90fc3a901026394a
Validity
Not Before: Jan 1 14:29:29 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c898a0b7b58f37d0d80f1e5f2d7d27d9cf8a1d00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:41:0b:3c:f5:05:18:24:85:f6:00:c3:45:17:
2d:5c:68:29:23:2b:62:75:bd:5a:3d:13:24:84:46:
60:fe:ce:bc:f6:a8:7c:40:01:d1:0d:ee:65:97:ea:
22:22:3c:85:fa:0d:af:5a:c9:6e:82:2f:a4:c5:21:
77:01:76:eb:83:04:87:77:fa:9c:32:f6:63:a1:e0:
75:da:54:69:1a:da:99:8e:61:2a:a1:0c:86:46:6e:
5a:37:73:1c:bd:0f:e1:13:72:27:fd:97:da:c8:48:
c9:c3:9f:bc:9a:25:4d:05:58:fa:84:4b:b3:3f:d2:
84:98:42:52:30:a2:94:f7:44:f8:fe:e9:a5:07:c7:
f8:00:33:f9:bf:8d:fa:96:4c:41:92:ba:c7:d8:b8:
0b:2a:cb:49:05:b7:8f:3b:93:fb:ce:2f:f7:ea:b5:
e2:ea:b4:8f:d3:a0:70:c4:d7:49:e5:bc:34:8a:de:
0c:68:2b:8a:bb:76:3a:5f:2f:4a:72:9a:07:da:c9:
9f:76:ba:be:b3:55:83:7e:bc:3a:82:b0:f9:f9:10:
b9:8c:9a:bd:94:9b:97:85:a3:1c:17:70:ee:b6:6d:
fe:48:f0:d4:09:cb:35:6d:3e:56:48:35:90:17:0b:
37:53:33:5d:8d:1e:2d:0a:51:e9:74:d3:f4:a1:05:
1f:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:98:A0:B7:B5:8F:37:D0:D8:0F:1E:5F:2D:7D:27:D9:CF:8A:1D:00
X509v3 Authority Key Identifier:
keyid:83:3E:0E:48:04:11:B9:C8:8E:91:6D:EF:90:FC:3A:90:10:26:39:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gz4OSAQRuciOkW3vkPw6kBAmOUo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/a782cc-1e09-4480-a6dc-6c20ebaf30a9/1/yJigt7WPN9DYDx5fLX0n2c-KHQA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/a782cc-1e09-4480-a6dc-6c20ebaf30a9/1/gz4OSAQRuciOkW3vkPw6kBAmOUo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.7.72.0/22
193.105.43.0/24
195.64.164.0/23
IPv6:
2a03:1780::/32
Signature Algorithm: sha256WithRSAEncryption
00:b5:0b:7f:7f:d6:aa:a4:00:0d:39:b7:45:29:50:66:38:d7:
2b:26:ac:9f:a3:43:77:df:48:05:33:dd:e1:a6:07:9c:9e:83:
65:61:63:4c:eb:32:61:1d:19:ed:64:e5:ca:d7:3b:1b:9d:e1:
68:c1:a1:6d:d3:1b:ca:3c:ca:04:d4:75:ee:4e:2b:af:9a:9d:
4f:ed:0d:15:ee:67:64:22:27:5e:dd:e3:1e:57:57:81:7f:d8:
3d:e8:45:38:1f:8b:da:59:45:02:22:4d:0a:18:8f:c2:d7:3b:
91:bb:c5:ec:73:ff:df:aa:56:10:7d:8a:e0:71:62:42:1a:f1:
d3:82:eb:30:ed:c9:14:08:c1:e3:fe:00:e6:cf:78:3c:a9:05:
40:1c:09:fa:1b:d8:fc:8c:56:8f:36:34:ab:f9:1c:66:66:7c:
a8:a8:d7:e1:b1:dd:ee:74:6d:6f:d5:b3:fd:36:02:e3:ac:a9:
5b:c2:18:ac:ae:cb:38:c3:25:94:f5:b3:05:d0:3d:c9:e3:89:
b9:ed:14:bf:01:84:4a:85:a9:75:ab:74:8d:87:2b:8a:1b:d6:
34:d2:4a:5c:6e:58:20:17:c1:89:da:4f:c5:bd:5d:1b:f6:ee:
d0:7e:b7:2e:2b:14:99:c8:71:e6:28:b7:ce:36:11:16:f8:9b:
9f:6e:34:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 14:39:00 2025 by rpki-client