Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/78b190-8a02-4cb8-b484-526f7cc529b7/1/A_rVLwz6loZEjMXnXd5R_NOTkp4.roa
File: A_rVLwz6loZEjMXnXd5R_NOTkp4.roa (raw, json)
Hash identifier: 8+JgFivo4KszmuGxxyWfRxvtdrWwzQi25zyDQNYA07U=
Subject key identifier: 03:FA:D5:2F:0C:FA:96:86:44:8C:C5:E7:5D:DE:51:FC:D3:93:92:9E
Certificate issuer: /CN=ba54b6e5fcca308b36dc8f167606b2d659839cf1
Certificate serial: 0194CC80EB20CB5535BA1755380157EF4B18
Authority key identifier: BA:54:B6:E5:FC:CA:30:8B:36:DC:8F:16:76:06:B2:D6:59:83:9C:F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ulS25fzKMIs23I8Wdgay1lmDnPE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/78b190-8a02-4cb8-b484-526f7cc529b7/1/A_rVLwz6loZEjMXnXd5R_NOTkp4.roa
Signing time: Mon 03 Feb 2025 15:49:48 +0000
ROA not before: Mon 03 Feb 2025 15:49:48 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 204007
IP address blocks: 185.185.216.0/24 maxlen: 24
185.185.217.0/24 maxlen: 24
185.185.218.0/24 maxlen: 24
185.185.219.0/24 maxlen: 24
185.190.89.0/24 maxlen: 24
185.194.12.0/24 maxlen: 24
2a0b:6580::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:cc:80:eb:20:cb:55:35:ba:17:55:38:01:57:ef:4b:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba54b6e5fcca308b36dc8f167606b2d659839cf1
Validity
Not Before: Feb 3 15:49:48 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=03fad52f0cfa9686448cc5e75dde51fcd393929e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:59:f1:6b:57:05:83:a0:80:5a:5f:4f:52:0d:
a4:75:eb:96:2b:39:3f:70:12:9f:a5:fb:2c:e4:61:
97:dd:66:9d:1b:83:cf:7f:d9:db:ed:9c:d3:09:4c:
d9:4d:95:1d:a7:b3:52:53:b4:08:b7:31:dd:6b:5b:
43:36:ab:91:83:05:e3:7a:0a:e5:7c:2c:67:9b:49:
a2:ac:09:e9:6d:81:6b:32:72:83:ba:f4:02:da:99:
77:2e:a0:7e:b8:a5:7f:71:35:ad:2e:b3:95:0e:db:
07:b9:17:0b:04:0d:3b:3c:fe:c9:e3:75:cf:57:d5:
f1:2c:63:65:fd:a0:18:7f:ff:b2:16:de:83:d6:15:
b1:75:6e:36:23:bc:e3:7e:15:15:65:58:36:28:81:
ae:dd:9a:bb:45:1f:00:d3:e2:91:39:3f:fb:64:8e:
3a:27:64:c2:95:de:58:86:f3:b5:77:32:9b:95:8f:
0e:f9:fd:81:d2:cc:f5:bc:27:50:df:2b:42:fa:2b:
3b:5d:ee:9e:db:cc:2c:87:6b:20:43:28:42:18:92:
c9:0b:b1:92:d3:05:5e:e9:88:81:2a:f2:94:7c:da:
bc:8c:32:8a:b2:c5:1b:ef:47:26:c0:37:09:91:9d:
5b:3d:ba:93:32:bb:dd:cd:d2:82:a0:14:f4:cb:32:
1e:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:FA:D5:2F:0C:FA:96:86:44:8C:C5:E7:5D:DE:51:FC:D3:93:92:9E
X509v3 Authority Key Identifier:
keyid:BA:54:B6:E5:FC:CA:30:8B:36:DC:8F:16:76:06:B2:D6:59:83:9C:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ulS25fzKMIs23I8Wdgay1lmDnPE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/78b190-8a02-4cb8-b484-526f7cc529b7/1/A_rVLwz6loZEjMXnXd5R_NOTkp4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/78b190-8a02-4cb8-b484-526f7cc529b7/1/ulS25fzKMIs23I8Wdgay1lmDnPE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.185.216.0/22
185.190.89.0/24
185.194.12.0/24
IPv6:
2a0b:6580::/29
Signature Algorithm: sha256WithRSAEncryption
4e:e6:74:3e:1e:9a:79:fb:63:3c:55:b5:cc:7d:54:6f:89:72:
2f:7e:ac:a7:da:53:59:67:54:0c:e2:7d:be:5a:cb:ac:6e:a9:
0a:8e:72:f9:90:5d:bb:36:78:66:5e:22:ba:f6:ed:9f:30:3d:
cf:95:23:4b:aa:75:ea:00:e9:f6:c9:18:3d:40:6f:75:f0:10:
1c:2e:e9:31:4f:ed:27:be:75:68:39:80:e1:5a:5c:f9:0f:16:
ad:8c:da:80:1f:a4:2b:2a:cc:9c:aa:a5:f4:40:da:97:fe:a6:
32:8a:57:fc:bd:39:ad:cd:2f:e8:bb:19:99:14:70:bf:8a:20:
a6:b0:39:06:36:45:5d:0e:82:19:3b:07:77:7b:21:f7:5e:fc:
52:1a:22:17:46:cb:bf:fb:46:be:8a:2c:e0:a8:34:20:40:6c:
af:d1:f3:64:5a:a8:d5:9d:f2:5c:6a:bb:5a:05:f7:ce:43:67:
f5:0d:f9:f6:5f:bb:b5:38:05:1e:db:db:65:5e:7f:19:f9:59:
6e:85:60:d0:0d:c9:ac:c5:35:0f:e6:a6:97:c6:a8:1f:38:f5:
ac:01:13:11:05:66:09:64:8a:9c:69:1e:bf:cd:dd:bf:6f:46:
3e:30:fd:46:ff:4f:57:54:5d:31:c3:b2:a7:dd:5f:15:79:e2:
3b:c8:32:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 03:31:05 2025 by rpki-client