Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/ee3e3f-3a45-43eb-a5de-4285998392d3/1/sYAfD4BV-6irRlKQSwMoXHjm0Mc.roa
File: sYAfD4BV-6irRlKQSwMoXHjm0Mc.roa (raw, json)
Hash identifier: T1/WiR0D/YUKPRxlOtYq/pfY4c0SddtxyI4tXYaUGdg=
Subject key identifier: B1:80:1F:0F:80:55:FB:A8:AB:46:52:90:4B:03:28:5C:78:E6:D0:C7
Certificate issuer: /CN=ccc478dd9ccd6162f82488ac6fc50c21d369f2a0
Certificate serial: 019425FDA8399276CDD96C89EACF46570713
Authority key identifier: CC:C4:78:DD:9C:CD:61:62:F8:24:88:AC:6F:C5:0C:21:D3:69:F2:A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zMR43ZzNYWL4JIisb8UMIdNp8qA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/ee3e3f-3a45-43eb-a5de-4285998392d3/1/sYAfD4BV-6irRlKQSwMoXHjm0Mc.roa
Signing time: Thu 02 Jan 2025 07:49:28 +0000
ROA not before: Thu 02 Jan 2025 07:49:28 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 201341
IP address blocks: 185.122.141.0/24 maxlen: 24
185.122.143.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:a8:39:92:76:cd:d9:6c:89:ea:cf:46:57:07:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ccc478dd9ccd6162f82488ac6fc50c21d369f2a0
Validity
Not Before: Jan 2 07:49:28 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b1801f0f8055fba8ab4652904b03285c78e6d0c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:c9:5a:3e:e4:83:27:c1:e5:4a:dc:4b:96:2b:
ab:43:72:75:57:51:c5:dc:f1:70:06:ab:ff:12:d8:
c1:d2:c8:d0:35:5b:25:59:35:12:43:46:84:d8:55:
13:f7:ae:27:cf:c4:42:4d:4e:5c:ef:57:9a:f1:e9:
73:53:4d:03:e0:9a:34:59:d1:20:9f:24:50:41:7a:
ee:69:1d:d4:fb:b2:0c:e0:c2:a8:2b:e3:5d:7f:3e:
f6:cb:97:bc:8d:80:21:32:82:ce:a3:d3:10:8a:7e:
e8:b8:de:55:86:85:72:6a:43:16:37:6b:b7:70:e2:
63:63:f0:50:aa:d5:94:79:0c:93:e8:e4:73:82:37:
c1:09:d9:f5:51:82:8f:3f:f0:4e:8e:85:fe:31:8e:
91:4b:6b:57:11:a4:e0:bf:50:5c:0b:03:72:1d:4d:
0a:ad:8b:5f:d6:40:b2:ed:aa:53:18:c2:5c:9a:4e:
97:23:5a:0b:86:bc:74:d5:a2:a5:54:e1:8d:99:b2:
96:5b:4a:4b:50:8a:65:97:93:5d:85:94:47:28:d4:
fc:1c:6b:10:d2:e3:fb:28:96:90:eb:7f:15:41:61:
2b:f7:9d:4f:0a:91:7b:11:00:03:fd:f8:57:92:aa:
aa:94:3e:24:c0:78:cc:6a:3b:5d:49:8e:bd:88:b5:
43:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:80:1F:0F:80:55:FB:A8:AB:46:52:90:4B:03:28:5C:78:E6:D0:C7
X509v3 Authority Key Identifier:
keyid:CC:C4:78:DD:9C:CD:61:62:F8:24:88:AC:6F:C5:0C:21:D3:69:F2:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zMR43ZzNYWL4JIisb8UMIdNp8qA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/ee3e3f-3a45-43eb-a5de-4285998392d3/1/sYAfD4BV-6irRlKQSwMoXHjm0Mc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/ee3e3f-3a45-43eb-a5de-4285998392d3/1/zMR43ZzNYWL4JIisb8UMIdNp8qA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.122.141.0/24
185.122.143.0/24
Signature Algorithm: sha256WithRSAEncryption
97:89:8a:e0:f2:c1:7d:eb:77:90:46:4b:d2:e3:55:cb:3e:cc:
c7:d7:e7:03:b5:e9:20:a5:49:12:97:c8:99:1c:93:bc:c4:03:
7d:3b:d7:c5:99:10:e9:18:53:00:16:23:6c:25:8c:36:ce:5b:
a9:f3:01:54:87:af:10:02:2d:ab:85:a2:c4:8d:65:e8:4d:a7:
3d:27:b8:5a:b7:5f:79:df:ce:51:f5:bc:4e:d6:ff:9b:16:4e:
59:71:8c:f9:22:b3:3d:3f:11:33:f6:58:df:c1:23:e3:4b:8c:
1f:e2:d3:61:59:3c:80:47:5d:07:82:44:27:e8:06:01:b4:59:
ad:ef:7f:b6:d3:12:48:f8:35:2b:f6:dc:ce:e5:b3:5d:24:ab:
96:02:9f:43:2b:25:c3:2a:59:75:7f:81:ef:55:47:85:c5:ad:
9f:f1:e7:bf:cc:d3:3c:8d:38:1c:ae:5f:11:d0:47:dd:68:1a:
f1:7d:dc:46:07:3b:df:4a:6f:60:42:8b:87:fe:7a:57:ef:cf:
55:8a:b2:0f:b2:8c:6b:8e:3a:33:c9:1f:51:59:0a:6c:ec:a5:
e9:42:7f:be:c7:7b:89:7e:c1:f8:ae:c4:3f:6f:84:c6:ca:06:
0a:6c:7f:33:42:ef:dc:98:20:25:b8:7f:e8:20:69:5e:15:28:
af:d5:f9:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 08:23:19 2025 by rpki-client