Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/ISY1uKMrijfCabX2w88nPl2KHN4.roa
File: ISY1uKMrijfCabX2w88nPl2KHN4.roa (raw, json)
Hash identifier: by1YyqNXW7+nQg6biF8vjmrIyqhvysjiKJpLjqzoGj0=
Subject key identifier: 21:26:35:B8:A3:2B:8A:37:C2:69:B5:F6:C3:CF:27:3E:5D:8A:1C:DE
Certificate issuer: /CN=c616c4195152effedbf7b3afee2aa72e19090e4d
Certificate serial: 019427472F6BD6F7457B821C9D9A283D2C18
Authority key identifier: C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/ISY1uKMrijfCabX2w88nPl2KHN4.roa
Signing time: Thu 02 Jan 2025 13:49:24 +0000
ROA not before: Thu 02 Jan 2025 13:49:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209474
IP address blocks: 185.249.202.0/24 maxlen: 24
185.254.239.0/24 maxlen: 24
194.62.54.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:2f:6b:d6:f7:45:7b:82:1c:9d:9a:28:3d:2c:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c616c4195152effedbf7b3afee2aa72e19090e4d
Validity
Not Before: Jan 2 13:49:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=212635b8a32b8a37c269b5f6c3cf273e5d8a1cde
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:4c:0b:c6:06:c1:50:6b:bf:ff:df:71:95:3e:
db:83:7f:f5:50:51:64:02:1e:bc:7e:31:38:ef:ed:
a7:08:98:a4:7c:92:27:8f:5e:f7:5e:a5:c7:14:35:
c3:46:3c:08:e4:86:e0:f8:7b:13:de:d0:e7:c8:3f:
ec:1b:db:a8:99:3d:75:8c:ff:ac:d5:86:49:23:29:
1a:39:16:8b:d9:ea:8a:91:62:dc:d5:92:88:cb:3c:
d4:47:e6:9e:13:a8:8a:7f:55:3a:15:76:c8:f2:13:
65:6d:d9:2a:26:f7:a8:d5:2b:1f:41:23:b7:0a:08:
85:6a:e5:3b:19:01:79:e5:f7:63:d6:3c:89:c5:e3:
44:eb:97:3e:d6:c5:80:de:19:a1:18:e5:df:1a:1c:
58:11:16:03:89:17:b9:94:f4:6d:f9:89:a9:5e:03:
ba:ec:e5:f6:e7:a3:02:cc:be:1b:9e:63:8a:8e:1b:
78:49:0c:71:dc:87:6a:1b:55:af:e3:cd:da:1d:cd:
03:d9:90:73:04:01:db:9f:22:21:a7:bc:70:7f:88:
55:e9:6d:8a:f5:c6:7a:7d:67:f8:ef:0e:e3:cd:4b:
5c:46:51:1e:29:2b:9b:6d:7a:15:d5:bb:2a:e2:b5:
2c:52:75:dd:c8:57:23:40:37:b2:96:fd:b6:cc:74:
f3:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:26:35:B8:A3:2B:8A:37:C2:69:B5:F6:C3:CF:27:3E:5D:8A:1C:DE
X509v3 Authority Key Identifier:
keyid:C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/ISY1uKMrijfCabX2w88nPl2KHN4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.249.202.0/24
185.254.239.0/24
194.62.54.0/24
Signature Algorithm: sha256WithRSAEncryption
75:21:e9:6a:f9:b5:83:08:1e:bf:a3:ed:ee:2b:0c:81:e8:08:
01:9a:53:6b:8e:f7:47:ce:b2:5f:05:5e:01:d1:5d:bd:d8:b8:
d9:f0:db:a6:d2:01:eb:2b:b1:ce:e4:a3:f9:76:37:66:b2:0f:
51:13:fe:74:ec:7d:e3:fa:2f:53:cb:92:43:1e:70:ec:fb:fd:
05:da:7f:2f:38:9b:b0:40:67:09:a8:af:45:df:1d:37:69:c1:
a5:e3:1d:4e:3b:52:7f:21:3c:93:9a:1a:13:59:70:24:19:f8:
8a:fc:54:d6:82:be:5f:8b:a7:cc:6c:b2:a8:d9:0c:bd:8e:e0:
c6:4d:87:f3:70:63:3a:18:86:e6:84:e0:2d:dc:24:fd:bd:2d:
a2:a9:9c:28:96:5f:2f:cf:14:7b:83:07:7b:70:1e:eb:2e:67:
ef:a1:d5:0c:db:f5:02:4c:b0:c5:4f:c3:27:7b:ee:59:1e:03:
9b:19:07:6d:f8:18:c9:86:32:5b:75:49:b7:79:28:55:58:3c:
fd:39:ed:a1:21:1b:ee:dc:83:59:9e:a3:56:b3:68:e7:11:7a:
51:87:bf:31:29:6a:dc:14:bb:c8:cb:a9:22:a9:ae:7c:24:5b:
9f:e5:2d:05:41:68:a1:d5:b2:37:e9:95:bb:61:04:41:c7:be:
9b:be:e1:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 04:29:49 2025 by rpki-client