Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/61ae21-8f63-4fd0-a6b5-d57255e25fee/1/YeLTGUeGGyXLDsIsBMQzQnfR_LU.roa
File: YeLTGUeGGyXLDsIsBMQzQnfR_LU.roa (raw, json)
Hash identifier: PtE+kRHpH8JzU2XmyrlXC4ronct26wzWESqGw8oyXbE=
Subject key identifier: 61:E2:D3:19:47:86:1B:25:CB:0E:C2:2C:04:C4:33:42:77:D1:FC:B5
Certificate issuer: /CN=687c8bf222a26bf1c9c6638cc356d2835502f2d6
Certificate serial: 018A4BF9EB0C8C856E35EB87B72B44CEF0A4
Authority key identifier: 68:7C:8B:F2:22:A2:6B:F1:C9:C6:63:8C:C3:56:D2:83:55:02:F2:D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aHyL8iKia_HJxmOMw1bSg1UC8tY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/61ae21-8f63-4fd0-a6b5-d57255e25fee/1/YeLTGUeGGyXLDsIsBMQzQnfR_LU.roa
Signing time: Thu 31 Aug 2023 14:23:04 +0000
ROA not before: Thu 31 Aug 2023 14:23:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204358
IP address blocks: 185.251.60.0/22 maxlen: 22
185.251.61.0/24 maxlen: 24
185.251.63.0/24 maxlen: 24
185.251.60.0/24 maxlen: 24
185.251.62.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:4b:f9:eb:0c:8c:85:6e:35:eb:87:b7:2b:44:ce:f0:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=687c8bf222a26bf1c9c6638cc356d2835502f2d6
Validity
Not Before: Aug 31 14:23:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=61e2d31947861b25cb0ec22c04c4334277d1fcb5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:d2:ab:d4:e1:fb:6d:63:35:d2:46:a0:58:e2:
4b:55:48:be:39:bb:59:14:2d:ac:26:66:1b:1b:95:
71:eb:e8:4c:42:80:f1:5e:60:22:c2:c5:27:b6:7e:
42:2c:fd:35:aa:0e:1a:78:15:1d:f7:8b:56:e8:c8:
92:53:de:ae:97:df:05:e1:0c:41:dd:10:ea:2b:54:
08:9e:69:28:72:c8:f9:16:7f:62:b4:77:cb:62:8b:
73:e8:e8:a3:88:7a:91:b2:77:46:9f:ed:d9:96:5f:
d7:87:98:bf:07:e1:98:f2:3e:81:bd:61:ee:2d:c0:
4b:16:b6:24:de:f4:1f:43:ca:01:24:85:8c:78:1b:
c5:21:86:8b:61:32:c2:80:1e:ed:b1:91:d5:84:7a:
2b:b6:cf:f0:a9:95:f5:c1:70:ab:86:d7:6c:5f:8a:
dd:30:1d:a0:71:76:ce:b2:78:e7:18:d6:ff:78:14:
3e:04:fc:55:a6:a5:f7:b4:33:f3:ac:17:08:09:59:
76:36:64:2b:83:ed:2a:74:ea:6f:29:69:91:6b:5f:
65:29:22:f5:93:65:81:c4:84:cc:a2:fb:9d:d9:d4:
c6:6b:26:ef:95:1e:7f:16:9d:d7:12:5f:51:77:30:
62:c0:d8:e8:5b:b1:03:89:d1:c8:84:f0:c6:c0:7a:
8e:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:E2:D3:19:47:86:1B:25:CB:0E:C2:2C:04:C4:33:42:77:D1:FC:B5
X509v3 Authority Key Identifier:
keyid:68:7C:8B:F2:22:A2:6B:F1:C9:C6:63:8C:C3:56:D2:83:55:02:F2:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aHyL8iKia_HJxmOMw1bSg1UC8tY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/61ae21-8f63-4fd0-a6b5-d57255e25fee/1/YeLTGUeGGyXLDsIsBMQzQnfR_LU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/61ae21-8f63-4fd0-a6b5-d57255e25fee/1/aHyL8iKia_HJxmOMw1bSg1UC8tY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.251.60.0/22
Signature Algorithm: sha256WithRSAEncryption
2a:c6:ea:77:2b:29:35:8c:af:e4:e4:02:36:a8:eb:93:2b:39:
a8:c4:5f:38:7d:b7:26:bc:c1:ba:54:5b:2f:58:7a:0b:ce:21:
5d:38:4c:b3:34:c1:e8:db:8d:9b:24:55:63:0b:e3:0e:7c:03:
91:5d:68:2a:fc:59:ef:37:b3:98:0f:f9:7e:04:16:e6:0b:0d:
e1:31:77:59:f8:46:51:90:d1:c3:d2:ab:8f:1b:bf:f5:ef:85:
5e:5f:dd:a1:86:dd:d0:51:40:ee:ab:c3:ae:7f:e0:c9:0c:62:
e0:c1:71:4d:30:5e:02:ac:04:09:c3:40:93:4d:bd:b6:e5:4b:
35:91:6d:66:88:f2:76:10:ef:d1:ed:24:f0:fe:94:af:30:07:
5a:92:d3:f0:03:f2:f5:c7:60:f4:f8:23:e3:ae:e3:1e:c7:0b:
e0:17:96:6f:29:bf:ab:ec:78:7f:6a:86:72:b3:06:9a:1f:cc:
ea:f8:30:cc:d3:e4:84:26:42:85:84:a1:b3:00:2c:59:a4:28:
8f:e4:22:3b:f9:e4:4d:88:15:2f:87:a0:34:90:74:c8:32:b8:
37:d6:9b:0c:ad:7b:6e:c8:c0:21:f9:3d:07:be:44:85:64:7b:
29:e0:68:ff:75:64:17:fa:85:41:90:3d:c6:f5:42:38:36:34:
6a:2a:e1:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 12:10:30 2025 by rpki-client