Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/229650-8a01-4370-991e-b504c9ae9bbc/1/dYeZ86Q9eOrX3ruoGqBQbil94fE.roa
File: dYeZ86Q9eOrX3ruoGqBQbil94fE.roa (raw, json)
Hash identifier: ixCQNkESLSOkCqLCMko70j+9MueRd2ujeMGI9hRjox0=
Subject key identifier: 75:87:99:F3:A4:3D:78:EA:D7:DE:BB:A8:1A:A0:50:6E:29:7D:E1:F1
Certificate issuer: /CN=123c3de61011de07101e14dc0727395171cb03ab
Certificate serial: 01942827800A9D2A88F486265C0318C702A9
Authority key identifier: 12:3C:3D:E6:10:11:DE:07:10:1E:14:DC:07:27:39:51:71:CB:03:AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ejw95hAR3gcQHhTcByc5UXHLA6s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/229650-8a01-4370-991e-b504c9ae9bbc/1/dYeZ86Q9eOrX3ruoGqBQbil94fE.roa
Signing time: Thu 02 Jan 2025 17:54:24 +0000
ROA not before: Thu 02 Jan 2025 17:54:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 204798
IP address blocks: 185.122.252.0/24 maxlen: 24
185.122.255.0/24 maxlen: 24
185.133.224.0/24 maxlen: 24
185.133.225.0/24 maxlen: 24
185.133.226.0/24 maxlen: 24
185.133.227.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:27:80:0a:9d:2a:88:f4:86:26:5c:03:18:c7:02:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=123c3de61011de07101e14dc0727395171cb03ab
Validity
Not Before: Jan 2 17:54:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=758799f3a43d78ead7debba81aa0506e297de1f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:d7:35:d2:c4:4e:83:e3:56:e3:5f:ba:8c:e0:
21:29:ae:8f:58:0b:82:d9:1d:f0:35:8f:a6:25:b7:
a7:d1:1a:a4:a3:5b:1f:86:80:89:c9:3e:78:b5:1d:
ae:24:59:80:7e:72:fe:ab:c5:9a:40:4c:b8:b7:73:
d9:e2:fe:5f:68:43:31:28:6c:cc:69:e2:3c:8a:78:
40:dc:4c:b8:78:c1:aa:22:6d:4c:eb:d5:b2:2a:34:
48:3f:d2:c5:89:43:29:65:39:20:f0:12:94:e5:5b:
3e:ae:8c:d9:91:a9:6f:c8:b7:e6:5d:73:39:5d:0c:
ac:f3:76:c5:7d:3e:4a:ac:bc:d1:94:e7:5a:46:e6:
e8:79:85:c1:76:7b:73:70:eb:a8:7d:6a:fa:66:42:
e5:1d:67:4f:ef:a7:15:f2:8b:e5:b0:57:76:d8:1d:
77:49:8a:27:58:cb:9f:36:d8:02:f9:c5:6e:d2:10:
95:4b:b7:bc:75:cb:c1:87:a5:83:f8:dc:cb:18:01:
ce:8c:5d:39:e7:04:5f:0a:d5:df:12:d8:2f:6a:bc:
da:5f:26:97:f3:53:7c:de:4d:a6:a5:ac:3c:6c:2b:
3c:3a:a5:f8:25:7a:43:5b:87:ba:49:6c:5a:f6:e5:
7f:44:8a:e4:b1:5b:35:10:6c:19:92:3d:2d:d3:cc:
17:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:87:99:F3:A4:3D:78:EA:D7:DE:BB:A8:1A:A0:50:6E:29:7D:E1:F1
X509v3 Authority Key Identifier:
keyid:12:3C:3D:E6:10:11:DE:07:10:1E:14:DC:07:27:39:51:71:CB:03:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ejw95hAR3gcQHhTcByc5UXHLA6s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/229650-8a01-4370-991e-b504c9ae9bbc/1/dYeZ86Q9eOrX3ruoGqBQbil94fE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/229650-8a01-4370-991e-b504c9ae9bbc/1/Ejw95hAR3gcQHhTcByc5UXHLA6s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.122.252.0/24
185.122.255.0/24
185.133.224.0/22
Signature Algorithm: sha256WithRSAEncryption
98:b3:16:98:99:da:d5:67:b7:3a:38:48:e7:cd:44:40:d9:96:
2e:7a:c4:37:dc:67:8d:9d:9f:a0:12:f6:ce:d4:9f:a9:d4:c4:
65:6c:90:b9:be:33:13:45:aa:ee:e7:3d:61:2a:22:8f:1d:e2:
f0:22:da:4e:c7:58:fd:af:2a:9a:0b:f6:39:1c:53:99:17:48:
3f:da:74:cd:d0:b8:49:6f:76:2e:99:ef:5c:d7:c0:41:d7:0b:
c7:62:6c:30:e6:92:4f:06:45:1e:93:19:ce:db:ba:81:04:ac:
41:0a:c5:ae:3f:2e:49:67:98:e8:6f:ea:33:ae:47:fa:b8:30:
fa:5b:c3:2a:2d:3c:57:e8:98:91:48:cb:f4:be:2f:6d:a7:b5:
62:6b:c3:c6:af:10:30:ad:af:69:7e:51:a5:02:cd:b6:4e:8e:
48:a1:dd:6b:29:43:6b:96:b5:a2:cc:16:84:28:d7:2d:87:92:
5b:d4:15:eb:bf:a5:5e:19:6e:9c:a4:e6:d3:d6:47:f9:ab:25:
a4:8c:88:3d:20:fa:05:fc:dc:f1:dd:a6:09:fc:87:8f:34:a2:
d0:f1:23:66:9b:dc:8d:1b:7f:cb:f7:44:0e:46:28:42:3b:40:
d9:0e:3b:a4:07:5e:4c:98:14:f5:d6:c8:5e:a8:59:9e:a5:32:
b5:7d:47:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:43:02 2025 by rpki-client