Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/61ae21-8f63-4fd0-a6b5-d57255e25fee/1/gYXNDgipUR4p8D2ApeSVLs897wE.roa
File: gYXNDgipUR4p8D2ApeSVLs897wE.roa (raw, json)
Hash identifier: RxWzlJUn1jBGsjOg4R9ykIjYADyjsWtNrsk7QUiVxUQ=
Subject key identifier: 81:85:CD:0E:08:A9:51:1E:29:F0:3D:80:A5:E4:95:2E:CF:3D:EF:01
Certificate issuer: /CN=687c8bf222a26bf1c9c6638cc356d2835502f2d6
Certificate serial: 018CC50068388E6948432CD560D197C8234D
Authority key identifier: 68:7C:8B:F2:22:A2:6B:F1:C9:C6:63:8C:C3:56:D2:83:55:02:F2:D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aHyL8iKia_HJxmOMw1bSg1UC8tY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/61ae21-8f63-4fd0-a6b5-d57255e25fee/1/gYXNDgipUR4p8D2ApeSVLs897wE.roa
Signing time: Mon 01 Jan 2024 12:29:47 +0000
ROA not before: Mon 01 Jan 2024 12:29:47 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 204358
IP address blocks: 185.251.60.0/22 maxlen: 22
185.251.61.0/24 maxlen: 24
185.251.63.0/24 maxlen: 24
185.251.60.0/24 maxlen: 24
185.251.62.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:00:68:38:8e:69:48:43:2c:d5:60:d1:97:c8:23:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=687c8bf222a26bf1c9c6638cc356d2835502f2d6
Validity
Not Before: Jan 1 12:29:47 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8185cd0e08a9511e29f03d80a5e4952ecf3def01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:55:82:74:d7:56:70:29:3f:ec:2d:ad:4f:7d:
60:a7:60:e1:f9:d6:11:1f:3d:7d:28:57:c0:1a:80:
ee:c5:cd:72:0d:c6:cc:f5:67:58:46:0f:95:70:b7:
0b:67:e5:0d:dd:48:07:87:42:81:38:1a:ac:af:a3:
1f:6d:28:80:1d:a5:1c:2f:f9:95:9b:bc:f4:19:87:
ce:2e:5c:cb:18:e0:14:6e:4a:a6:23:e3:e1:66:49:
3d:f8:26:e6:79:66:ce:2a:08:9b:29:36:51:1e:72:
eb:a2:c0:7b:a2:f2:21:df:5b:ae:c1:f6:60:b4:96:
1b:f7:f1:8c:95:4c:b7:f4:29:a4:3a:0a:17:3e:15:
4b:f8:65:20:a3:82:3e:8a:15:b0:1a:bf:86:79:d4:
c4:d3:2e:5c:02:fa:32:89:43:bf:b9:e2:12:57:33:
35:0b:01:53:36:9d:8e:5f:a0:ad:11:0b:61:8b:bd:
4b:61:e8:db:fd:cf:88:68:88:3b:94:9e:ab:57:e2:
ad:ca:d0:a1:b0:a7:f3:26:2e:d2:c6:0f:50:3a:03:
49:fd:99:18:59:7c:2f:60:9e:c9:9d:87:e4:df:d7:
8b:4c:0f:da:16:79:bf:15:f1:a8:60:7c:94:ed:6c:
30:be:10:79:29:15:f4:ec:d8:fb:8f:f2:23:1d:13:
aa:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:85:CD:0E:08:A9:51:1E:29:F0:3D:80:A5:E4:95:2E:CF:3D:EF:01
X509v3 Authority Key Identifier:
keyid:68:7C:8B:F2:22:A2:6B:F1:C9:C6:63:8C:C3:56:D2:83:55:02:F2:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aHyL8iKia_HJxmOMw1bSg1UC8tY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/61ae21-8f63-4fd0-a6b5-d57255e25fee/1/gYXNDgipUR4p8D2ApeSVLs897wE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/61ae21-8f63-4fd0-a6b5-d57255e25fee/1/aHyL8iKia_HJxmOMw1bSg1UC8tY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.251.60.0/22
Signature Algorithm: sha256WithRSAEncryption
b0:ac:fd:8e:c4:09:fc:f6:5c:ef:48:f4:d5:a0:b7:f0:d6:17:
f6:69:70:93:d7:2c:ba:76:b2:08:8e:60:15:96:50:55:a6:68:
20:80:31:8e:18:40:7f:dd:b7:f4:5f:b1:0c:86:68:56:9a:e3:
ed:70:2c:1e:2d:cb:ec:c0:0c:ea:82:f7:0d:ca:d5:78:f2:5a:
07:88:b5:0d:8a:ca:84:9b:6e:81:10:34:df:eb:bd:d3:ec:1f:
85:e9:24:ab:14:41:98:78:9f:61:c3:53:dc:fe:cb:ba:2f:c5:
ec:37:da:cf:00:2c:4e:b9:32:e4:ca:69:c5:f6:2e:11:3f:e9:
0c:4a:fd:fb:fd:85:81:10:81:e5:87:b6:7d:3d:5e:24:a1:0f:
57:20:78:e9:57:81:d6:92:07:3c:42:53:a8:45:97:c7:89:a0:
2c:0f:53:bc:5a:4b:14:31:ec:b0:77:81:a4:ee:b5:cd:ee:2d:
5b:9b:b8:0a:e2:b3:8d:6f:11:d6:76:98:cc:e3:66:98:e8:da:
8e:0e:c3:41:fe:92:3f:c7:f7:17:d5:24:a0:63:5c:fa:1b:e5:
0e:24:21:e9:72:3d:64:8c:84:04:31:71:25:39:b3:4e:0b:d0:
31:80:c1:23:d3:52:d5:6b:07:7b:97:67:88:7e:d7:8f:8d:29:
49:f5:1e:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 00:36:11 2025 by rpki-client