Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/d6fed8-532d-4910-8d2a-5828cdbc2d88/1/vYZuW89qYgX5er9IOSfnNXxZW34.roa
File: vYZuW89qYgX5er9IOSfnNXxZW34.roa (raw, json)
Hash identifier: 0EdKtKatEpUSCqXqebeBogkxG8ym6mFR28GQIoDrGss=
Subject key identifier: BD:86:6E:5B:CF:6A:62:05:F9:7A:BF:48:39:27:E7:35:7C:59:5B:7E
Certificate issuer: /CN=50fcce98deef739ea053b5e4e87049533473bf1c
Certificate serial: 01823438A4ED888F17C9257C971F662E0562
Authority key identifier: 50:FC:CE:98:DE:EF:73:9E:A0:53:B5:E4:E8:70:49:53:34:73:BF:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UPzOmN7vc56gU7Xk6HBJUzRzvxw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/d6fed8-532d-4910-8d2a-5828cdbc2d88/1/vYZuW89qYgX5er9IOSfnNXxZW34.roa
Signing time: Mon 25 Jul 2022 07:18:23 +0000
ROA not before: Mon 25 Jul 2022 07:18:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 200845
IP address blocks: 185.229.97.0/24 maxlen: 24
185.229.96.0/22 maxlen: 22
185.229.96.0/24 maxlen: 24
185.229.98.0/24 maxlen: 24
185.229.99.0/24 maxlen: 24
185.229.44.0/22 maxlen: 22
185.229.44.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:34:38:a4:ed:88:8f:17:c9:25:7c:97:1f:66:2e:05:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50fcce98deef739ea053b5e4e87049533473bf1c
Validity
Not Before: Jul 25 07:18:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=bd866e5bcf6a6205f97abf483927e7357c595b7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:0d:8d:ad:6b:32:7e:57:20:4b:51:ea:c8:02:
c1:9c:cd:41:4d:77:b7:20:fe:99:25:0e:86:81:34:
e1:64:0b:b2:af:98:39:cd:a9:ba:0f:84:cf:04:d8:
20:7c:ba:96:88:1d:89:da:7f:2a:6b:69:26:f5:84:
9d:d5:28:a9:e5:9d:2f:21:98:04:d4:85:34:44:19:
c3:7d:25:23:6d:43:ce:eb:2d:46:19:4f:d8:ce:7f:
db:7d:64:f6:9f:bc:56:dc:47:33:f7:5c:cf:f0:1f:
39:3f:29:cc:a7:08:f7:3a:20:f1:e3:36:d8:3a:d7:
54:1b:3a:fb:2d:fa:1e:dc:32:22:66:a6:a3:cb:2e:
03:64:82:a7:75:7a:cd:87:77:45:52:9b:25:d5:b8:
89:34:31:f4:97:ff:09:a4:60:3c:a7:1f:40:b2:0e:
f3:3e:43:7c:d8:41:96:19:78:fc:8c:34:33:d1:80:
03:ab:1a:9a:80:05:ec:88:6b:8c:11:64:7a:cd:3d:
d5:7d:7f:f1:96:6b:4c:9a:bc:a0:7a:7f:ef:8b:a3:
d2:0c:d6:8c:12:a5:74:06:04:a8:f4:a4:66:62:5a:
c8:a2:3b:53:e2:63:31:6e:4d:46:7c:95:59:f3:b7:
f3:eb:4b:80:3b:fd:99:81:3e:32:1c:b3:72:6d:48:
60:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:86:6E:5B:CF:6A:62:05:F9:7A:BF:48:39:27:E7:35:7C:59:5B:7E
X509v3 Authority Key Identifier:
keyid:50:FC:CE:98:DE:EF:73:9E:A0:53:B5:E4:E8:70:49:53:34:73:BF:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UPzOmN7vc56gU7Xk6HBJUzRzvxw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/d6fed8-532d-4910-8d2a-5828cdbc2d88/1/vYZuW89qYgX5er9IOSfnNXxZW34.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/d6fed8-532d-4910-8d2a-5828cdbc2d88/1/UPzOmN7vc56gU7Xk6HBJUzRzvxw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.229.44.0/22
185.229.96.0/22
Signature Algorithm: sha256WithRSAEncryption
9d:56:ec:f3:4c:53:9d:69:a6:54:23:33:e0:e6:f5:c3:a0:1b:
0b:4a:1d:d8:29:53:b5:23:7b:20:7d:26:02:41:5e:a3:44:df:
12:56:9c:6f:da:ca:2a:62:d6:88:6d:78:23:f9:7c:68:bf:5c:
65:bd:97:05:5c:0c:f9:43:44:53:bf:32:be:c7:15:c2:59:98:
e5:3f:15:c5:4c:f5:80:3b:3d:0f:a5:49:46:97:36:05:b7:c4:
62:6d:bc:5f:ab:e3:99:5a:7d:48:71:55:08:9c:e8:90:86:af:
fc:e0:18:15:a5:ad:d8:77:89:08:12:0c:df:9b:b5:70:7e:38:
56:16:fa:18:41:64:53:11:ff:e6:d9:cc:0a:6d:1a:7c:da:cd:
6a:f7:5c:1a:d3:ec:c6:9d:4a:95:88:ae:81:e8:a0:bc:18:b1:
21:f9:e7:3c:a3:57:2e:40:3b:e5:e0:9c:c3:28:07:f7:06:a1:
f5:37:ae:32:54:76:92:55:85:f6:17:9d:00:5a:c4:94:39:9c:
c2:34:ba:74:61:1b:8e:a5:24:f6:b2:b3:fb:34:1a:a0:a6:90:
f8:29:04:3e:64:3b:39:4d:e7:4d:6c:31:62:24:5d:26:64:34:
6b:7f:3f:52:4e:05:00:52:e6:4f:6b:6d:fd:a5:9c:00:66:d7:
ac:c3:eb:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 02:34:12 2025 by rpki-client