Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/6de65e-04bd-4346-85b1-a5325d441702/1/yrS5JvCeQkL61hQzQKYDkOhEOTg.roa
File: yrS5JvCeQkL61hQzQKYDkOhEOTg.roa (raw, json)
Hash identifier: goLq7UsC9/y1qbTkOPG/FDEBz20Pk1byDqCOGCbWKi0=
Subject key identifier: CA:B4:B9:26:F0:9E:42:42:FA:D6:14:33:40:A6:03:90:E8:44:39:38
Certificate issuer: /CN=de51c3c5ddc4fb61381c3bea24c1ba4f74998eab
Certificate serial: 0194244563C67891A2C4CB9AA23365E4DA65
Authority key identifier: DE:51:C3:C5:DD:C4:FB:61:38:1C:3B:EA:24:C1:BA:4F:74:99:8E:AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3lHDxd3E-2E4HDvqJMG6T3SZjqs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/6de65e-04bd-4346-85b1-a5325d441702/1/yrS5JvCeQkL61hQzQKYDkOhEOTg.roa
Signing time: Wed 01 Jan 2025 23:48:34 +0000
ROA not before: Wed 01 Jan 2025 23:48:34 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200773
IP address blocks: 89.38.176.0/21 maxlen: 24
185.71.200.0/22 maxlen: 24
185.242.96.0/22 maxlen: 24
188.247.136.0/21 maxlen: 24
188.247.144.0/20 maxlen: 24
194.38.44.0/22 maxlen: 24
2a03:3ba0::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:45:63:c6:78:91:a2:c4:cb:9a:a2:33:65:e4:da:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de51c3c5ddc4fb61381c3bea24c1ba4f74998eab
Validity
Not Before: Jan 1 23:48:34 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cab4b926f09e4242fad6143340a60390e8443938
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:9f:95:bc:ed:9e:80:87:85:97:18:e0:75:b7:
93:32:d4:82:9a:d1:b9:65:87:8d:77:92:d6:99:a6:
81:45:cb:4f:ac:ca:9a:dc:55:21:0d:e0:aa:1f:60:
39:fe:42:6e:a1:3a:44:0e:19:0d:c1:0b:a0:77:6f:
95:5c:8c:c3:70:23:f5:b2:30:e3:28:88:e8:68:67:
4a:39:01:30:9a:56:2c:2d:d9:8c:05:e7:5a:57:5d:
69:7b:b0:27:5a:f5:96:64:8a:54:dd:08:5d:83:ce:
09:c3:8f:14:ef:cb:6d:b8:ab:e7:b3:ef:58:6d:38:
49:dd:4d:a5:56:4b:ec:01:6c:fd:25:b4:f9:b7:9b:
b4:f5:5d:46:34:c8:ef:fe:2a:b3:b7:5c:79:06:c5:
74:ac:84:6a:43:fc:49:4b:bd:d4:bb:ac:17:5e:e3:
bc:ea:ff:93:e2:6a:07:0e:f0:fe:7d:3c:53:fc:33:
5a:7d:ed:33:dd:39:06:2f:2f:8d:9a:ae:0b:2f:3c:
e9:19:46:27:d5:85:ed:64:92:4b:2d:05:85:bc:ea:
03:67:ef:d0:c9:68:4f:da:c6:47:d5:0f:cd:bd:df:
cd:e1:d4:29:55:16:8a:c3:c5:90:8a:6c:52:de:9c:
2b:4f:22:09:4d:9c:9e:e9:32:6e:01:86:68:ca:cc:
ca:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:B4:B9:26:F0:9E:42:42:FA:D6:14:33:40:A6:03:90:E8:44:39:38
X509v3 Authority Key Identifier:
keyid:DE:51:C3:C5:DD:C4:FB:61:38:1C:3B:EA:24:C1:BA:4F:74:99:8E:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3lHDxd3E-2E4HDvqJMG6T3SZjqs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/6de65e-04bd-4346-85b1-a5325d441702/1/yrS5JvCeQkL61hQzQKYDkOhEOTg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/6de65e-04bd-4346-85b1-a5325d441702/1/3lHDxd3E-2E4HDvqJMG6T3SZjqs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.38.176.0/21
185.71.200.0/22
185.242.96.0/22
188.247.136.0-188.247.159.255
194.38.44.0/22
IPv6:
2a03:3ba0::/32
Signature Algorithm: sha256WithRSAEncryption
55:68:fa:b5:a6:e9:ec:57:e5:3a:52:ba:e9:15:3b:0d:7f:a5:
3e:f2:53:44:da:2c:14:a0:be:ed:c7:9e:f4:53:51:af:27:a4:
a4:6e:14:64:43:fe:ec:d0:46:0d:c7:f0:3a:ce:69:11:a0:fe:
02:e7:c4:d5:95:20:26:bb:18:45:89:51:86:2e:1b:ae:c8:05:
5f:d1:93:d9:9f:98:81:fc:d0:a6:03:59:b0:86:b7:ed:48:74:
d7:ea:7e:94:1a:8d:4c:72:10:ce:e2:46:68:b1:0b:17:da:0c:
ef:84:b0:d3:7a:1e:8f:5e:c3:c3:12:00:ed:4f:9e:43:04:2e:
73:e3:84:ef:38:fe:1a:a9:4f:64:71:a3:23:d4:cc:5d:7f:11:
37:b7:65:ce:60:d5:71:86:9a:f8:c1:27:4d:3b:3d:29:11:15:
d6:71:24:c2:8b:c5:3c:00:b0:12:5b:f2:bc:cc:83:f2:03:0c:
f9:d0:f7:c7:13:d6:9b:4b:2e:e9:14:79:83:8b:12:1b:d3:a9:
83:e1:a7:02:c5:42:c3:4d:9d:92:0c:db:74:cd:91:71:c7:1d:
9c:3c:18:56:07:9b:d9:0e:0a:3b:e1:63:b8:d0:a1:c4:f4:d3:
06:00:17:b8:35:f1:90:52:ab:14:88:a3:92:50:dd:65:dc:48:
70:6a:87:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 03:16:31 2025 by rpki-client