Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/f60134-6d6d-4dc1-92a9-659ae821991c/1/SYl42DSQ15f2MkRVXhgFO_DcT3g.roa
File: SYl42DSQ15f2MkRVXhgFO_DcT3g.roa (raw, json)
Hash identifier: qnxKanj8UYPbp1ej9wVkGKNRD7q8MIi89cK5pEM0kaU=
Subject key identifier: 49:89:78:D8:34:90:D7:97:F6:32:44:55:5E:18:05:3B:F0:DC:4F:78
Certificate issuer: /CN=aceb99748999ab8e0218f7c8dbdcc5698d669d39
Certificate serial: 019422FC4343FDAFF5625B0C80247AAA95ED
Authority key identifier: AC:EB:99:74:89:99:AB:8E:02:18:F7:C8:DB:DC:C5:69:8D:66:9D:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rOuZdImZq44CGPfI29zFaY1mnTk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/f60134-6d6d-4dc1-92a9-659ae821991c/1/SYl42DSQ15f2MkRVXhgFO_DcT3g.roa
Signing time: Wed 01 Jan 2025 17:49:05 +0000
ROA not before: Wed 01 Jan 2025 17:49:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 204499
IP address blocks: 185.219.112.0/22 maxlen: 24
185.251.76.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fc:43:43:fd:af:f5:62:5b:0c:80:24:7a:aa:95:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aceb99748999ab8e0218f7c8dbdcc5698d669d39
Validity
Not Before: Jan 1 17:49:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=498978d83490d797f63244555e18053bf0dc4f78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:fc:11:e6:75:b9:5b:1e:1a:25:2f:ad:f0:f0:
d0:5a:a7:c8:95:75:9a:b3:21:4d:b2:6d:44:70:9f:
00:0f:7f:e7:06:e3:a7:84:7d:0b:4b:06:31:ac:f8:
68:2a:46:f6:97:e3:15:26:95:7a:2f:a3:ad:2d:ee:
27:6e:c5:01:cf:13:2b:5b:43:6a:ad:fb:be:08:63:
fd:ce:6e:a2:ac:16:b6:16:07:8e:c4:74:96:46:2b:
60:c3:d5:de:93:da:45:ab:ef:e2:7f:96:8d:5d:32:
94:f4:fa:6a:aa:8b:a7:f8:91:7e:4f:08:dc:7c:0e:
32:85:9c:04:04:9f:83:ef:81:b4:17:08:14:7d:69:
29:48:38:34:f1:ea:30:fb:28:74:f3:17:35:b9:2e:
dd:43:19:72:f8:6d:97:21:71:26:e8:04:17:fa:97:
d7:60:1e:14:b5:4f:93:09:5c:1c:de:f9:9c:bc:27:
6a:d9:ca:a4:87:d2:a0:e2:ba:55:24:4d:41:87:ce:
42:e9:1e:2b:80:af:fb:70:e0:e1:f4:0e:ec:83:8c:
63:4a:c3:20:10:03:c0:8f:9f:af:35:6b:d8:de:97:
13:74:07:1b:3e:54:11:05:42:50:fe:b0:93:74:53:
6d:77:36:0f:ae:02:fa:a1:bb:38:11:e2:ac:38:67:
05:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:89:78:D8:34:90:D7:97:F6:32:44:55:5E:18:05:3B:F0:DC:4F:78
X509v3 Authority Key Identifier:
keyid:AC:EB:99:74:89:99:AB:8E:02:18:F7:C8:DB:DC:C5:69:8D:66:9D:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rOuZdImZq44CGPfI29zFaY1mnTk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/f60134-6d6d-4dc1-92a9-659ae821991c/1/SYl42DSQ15f2MkRVXhgFO_DcT3g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/f60134-6d6d-4dc1-92a9-659ae821991c/1/rOuZdImZq44CGPfI29zFaY1mnTk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.219.112.0/22
185.251.76.0/22
Signature Algorithm: sha256WithRSAEncryption
5f:87:12:fd:cf:a6:11:e4:a8:b0:89:3e:96:36:50:32:d0:ae:
68:dc:7b:84:9c:4f:fb:d4:d6:4f:0a:ba:62:d0:37:89:3a:06:
df:60:a2:fc:b5:15:02:79:43:7a:29:c2:17:8e:a3:a5:da:86:
7c:c7:67:7e:40:0c:29:71:55:44:99:9a:c1:ef:77:bd:e0:eb:
0a:91:ed:6a:75:4b:12:45:3c:39:9e:8c:39:f7:7c:36:97:6b:
b3:fc:02:6c:45:74:5a:16:56:75:9f:ed:69:24:36:0e:74:df:
98:2c:1c:38:32:07:be:fc:43:d4:3a:66:24:21:7d:1d:31:92:
43:f6:7e:92:1d:18:d5:1c:93:b2:65:2f:79:1d:86:c8:2f:d3:
7f:fe:36:66:c0:08:23:21:a8:f7:a8:0c:e9:bb:84:97:28:53:
92:bd:62:35:f6:e8:42:02:23:bf:0d:c2:9c:3b:70:ed:e7:33:
fc:8d:f1:2e:c2:e8:b3:e9:ba:2f:45:96:a2:e8:c1:36:84:96:
26:0c:60:fe:ef:fb:c8:20:be:7f:1e:c1:a3:f1:7e:ea:41:f4:
91:0b:1d:b9:e3:ed:3f:15:d2:c1:de:86:32:53:6b:b3:2b:05:
72:a1:3f:20:af:e4:61:ce:6e:e4:2a:bf:fb:ed:9f:0d:3a:87:
49:29:c8:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:52:28 2025 by rpki-client