Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/861f32-81f4-4d64-8610-54de7a6cb3b1/1/atkABp03ezo3IQf9p_BdcUMTGKY.roa
File: atkABp03ezo3IQf9p_BdcUMTGKY.roa (raw, json)
Hash identifier: XIGewf/YhXuM1/3dqCaqTKBoy+0/E1uQhatEfe1jkfI=
Subject key identifier: 6A:D9:00:06:9D:37:7B:3A:37:21:07:FD:A7:F0:5D:71:43:13:18:A6
Certificate issuer: /CN=83f8294469fb7aec2601bb03772d0156f470b74d
Certificate serial: 019421B18E75661933EC7BB55CF0C2DF371A
Authority key identifier: 83:F8:29:44:69:FB:7A:EC:26:01:BB:03:77:2D:01:56:F4:70:B7:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g_gpRGn7euwmAbsDdy0BVvRwt00.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/861f32-81f4-4d64-8610-54de7a6cb3b1/1/atkABp03ezo3IQf9p_BdcUMTGKY.roa
Signing time: Wed 01 Jan 2025 11:47:52 +0000
ROA not before: Wed 01 Jan 2025 11:47:52 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 59884
IP address blocks: 185.67.212.0/22 maxlen: 22
185.67.212.0/24 maxlen: 24
185.67.213.0/24 maxlen: 24
185.67.214.0/24 maxlen: 24
185.67.215.0/24 maxlen: 24
2a05:1340::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b1:8e:75:66:19:33:ec:7b:b5:5c:f0:c2:df:37:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83f8294469fb7aec2601bb03772d0156f470b74d
Validity
Not Before: Jan 1 11:47:52 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6ad900069d377b3a372107fda7f05d71431318a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:ae:c4:0b:f1:a5:c2:d2:d5:84:71:23:69:99:
82:7a:89:0b:ed:64:c2:2f:d7:02:a7:25:f1:0d:9c:
b0:30:54:78:68:b3:17:83:ce:b3:dd:97:09:67:75:
77:3c:49:a1:fe:bf:79:98:f0:f0:cf:18:eb:70:f8:
a1:49:db:a5:da:9d:01:36:90:c1:6c:cf:65:76:a4:
a6:7a:ae:90:86:fb:fd:e0:58:bc:ce:59:d4:a0:8b:
ed:54:01:4e:36:9d:59:23:fc:60:d7:c4:ab:e2:47:
d0:3d:44:bb:e1:50:d9:39:1d:98:3a:d8:ca:92:4f:
3f:6c:e8:4c:02:34:9d:cf:6e:29:26:cb:64:78:67:
a1:e2:e9:32:2d:c9:42:9b:ab:1c:57:c9:03:70:0d:
b7:a0:1d:ed:72:1e:10:07:79:a3:e2:c2:27:32:1e:
d2:76:2c:03:c9:53:08:10:09:a6:f1:e6:0d:d1:2b:
7c:85:f3:45:50:ce:d9:2d:e7:b9:17:d4:e1:d3:cb:
80:e5:5a:65:7a:4b:35:92:7a:9d:84:6f:df:9b:d6:
af:0b:7f:90:be:88:ae:a8:e0:bc:5e:20:70:3a:c6:
95:c8:20:a7:fc:97:72:79:c0:d9:02:a6:0a:a2:30:
b5:bf:55:fd:25:01:e7:34:30:07:9d:14:bb:8a:d7:
9a:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:D9:00:06:9D:37:7B:3A:37:21:07:FD:A7:F0:5D:71:43:13:18:A6
X509v3 Authority Key Identifier:
keyid:83:F8:29:44:69:FB:7A:EC:26:01:BB:03:77:2D:01:56:F4:70:B7:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g_gpRGn7euwmAbsDdy0BVvRwt00.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/861f32-81f4-4d64-8610-54de7a6cb3b1/1/atkABp03ezo3IQf9p_BdcUMTGKY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/861f32-81f4-4d64-8610-54de7a6cb3b1/1/g_gpRGn7euwmAbsDdy0BVvRwt00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.67.212.0/22
IPv6:
2a05:1340::/29
Signature Algorithm: sha256WithRSAEncryption
3c:7c:77:83:ed:ff:cc:09:b6:38:a4:f2:e9:e2:2b:11:f5:8f:
eb:f7:aa:68:88:cb:d7:fb:49:91:2d:02:93:03:7c:6c:bb:00:
fd:cc:8e:a3:29:f9:5e:c3:18:84:3a:45:37:e0:93:3c:b9:1a:
40:cb:af:73:fb:66:c9:45:58:36:00:0a:28:b4:7c:f2:c9:fd:
f8:91:55:54:28:4d:f9:3c:6f:e9:5d:af:93:59:6e:ac:d1:8d:
dc:e9:3a:d6:8a:53:c5:47:7d:59:48:6c:1f:f3:14:af:f1:f5:
43:1a:17:3e:60:42:65:b2:f0:82:9e:f5:df:3f:08:6e:db:56:
f0:a9:f1:63:9f:7d:30:84:9c:3e:63:78:b5:04:5e:03:78:41:
07:de:9f:d3:49:5b:2e:1e:7e:7d:c4:fb:d0:d4:5f:d4:c6:af:
d9:18:ea:ab:3e:61:50:94:b1:01:f8:50:d2:a3:28:97:57:2e:
cc:3a:c1:ac:60:d6:b9:ec:71:42:0d:b5:69:74:09:51:25:03:
04:ff:c1:9d:ea:b7:5d:63:bd:2d:8b:cd:c0:67:31:64:41:61:
66:dc:11:a8:91:6c:f3:1e:e0:07:bf:a7:8b:15:b2:b4:dd:f8:
75:80:5a:1a:13:7b:f8:82:2a:e8:46:24:cf:f8:11:6c:e5:52:
ba:ca:80:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 12:47:20 2025 by rpki-client