Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/kEGnIPaz0jpCMaLK-AxSl_Uj73c.roa
File: kEGnIPaz0jpCMaLK-AxSl_Uj73c.roa (raw, json)
Hash identifier: ERYv4aRHlZMCu94mvKtHpC5oPqAIDuluPNPAgq+uHNk=
Subject key identifier: 90:41:A7:20:F6:B3:D2:3A:42:31:A2:CA:F8:0C:52:97:F5:23:EF:77
Certificate issuer: /CN=b72945f57103153a07854e74e227f2aec1c5f430
Certificate serial: 0195CE514E5D6E8086CBB4FC824D95B8150A
Authority key identifier: B7:29:45:F5:71:03:15:3A:07:85:4E:74:E2:27:F2:AE:C1:C5:F4:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/kEGnIPaz0jpCMaLK-AxSl_Uj73c.roa
Signing time: Tue 25 Mar 2025 17:19:49 +0000
ROA not before: Tue 25 Mar 2025 17:19:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57043
IP address blocks: 185.24.150.0/24 maxlen: 24
212.16.78.0/24 maxlen: 24
212.16.94.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:ce:51:4e:5d:6e:80:86:cb:b4:fc:82:4d:95:b8:15:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b72945f57103153a07854e74e227f2aec1c5f430
Validity
Not Before: Mar 25 17:19:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9041a720f6b3d23a4231a2caf80c5297f523ef77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:d1:14:d9:fd:80:cf:3a:32:bf:8a:18:69:ca:
b3:50:9a:93:21:a6:27:59:b2:3a:0c:96:6c:eb:13:
a0:1c:fc:a2:9b:14:a6:48:b3:7b:90:de:d2:48:16:
50:4e:01:0a:af:2a:a7:67:78:05:65:11:64:f1:57:
9f:69:23:aa:3f:96:15:63:af:2b:69:93:35:44:46:
69:9a:54:a0:f8:d2:dc:5a:23:5d:7e:01:64:e2:21:
a7:df:6f:24:d3:ae:e7:ae:cd:60:08:ae:21:c2:35:
1a:9f:ab:39:7f:76:40:36:7c:4b:4d:a3:f4:eb:37:
cc:48:ca:2c:63:f7:d7:eb:fd:a5:8c:d6:b2:e0:e0:
c9:cf:96:59:e1:f8:00:c6:d9:49:05:1e:4b:9f:d2:
61:50:1a:76:f8:b9:91:50:fa:8a:5e:70:44:58:17:
59:a3:99:03:cd:18:46:0c:16:b8:ee:61:7c:59:b0:
e9:74:17:8f:9b:b5:c4:ef:28:f2:04:ec:6d:ae:49:
78:38:64:f9:7b:20:fe:62:fe:bc:38:37:d5:4b:93:
b1:ce:2a:61:7a:84:78:7e:4f:90:25:99:55:f5:a7:
3e:5b:7f:7f:58:39:04:7a:6d:b8:19:84:88:af:0a:
9f:1d:11:43:a7:49:6c:25:f3:7e:12:00:7e:db:bd:
2f:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:41:A7:20:F6:B3:D2:3A:42:31:A2:CA:F8:0C:52:97:F5:23:EF:77
X509v3 Authority Key Identifier:
keyid:B7:29:45:F5:71:03:15:3A:07:85:4E:74:E2:27:F2:AE:C1:C5:F4:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/kEGnIPaz0jpCMaLK-AxSl_Uj73c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.24.150.0/24
212.16.78.0/24
212.16.94.0/24
Signature Algorithm: sha256WithRSAEncryption
22:86:9b:11:67:65:7e:68:20:ba:29:5b:96:bc:c8:88:68:fd:
71:25:19:52:18:26:7d:4d:47:45:12:2f:69:8c:a7:25:64:0d:
b3:9a:8f:5f:27:02:d2:5a:4b:08:b1:85:b5:3e:cd:93:97:dd:
e5:d8:d0:af:ee:3f:65:d0:52:3e:6c:24:e6:32:27:40:47:c5:
13:e5:26:45:c0:90:9e:54:dc:08:c0:4f:02:e1:32:fd:18:b6:
1a:88:65:b4:e9:9d:8d:52:6e:1e:1a:9f:47:39:51:b3:f9:87:
3c:d6:d4:8e:19:2a:f8:92:24:34:0b:a6:5f:53:32:11:02:4a:
8b:66:06:e9:27:e2:da:86:97:82:91:72:30:f2:09:d6:43:f7:
98:28:ee:ba:09:a0:49:06:f1:56:db:f7:98:1e:e9:7c:24:77:
df:c4:f8:7c:7d:47:3a:7d:fd:ca:81:73:bd:08:7e:fb:cf:35:
9d:c0:6c:09:6a:ad:4f:12:8b:21:2f:a2:97:68:3d:7a:e9:d3:
52:7b:4d:d8:0f:70:d7:fc:88:54:df:f0:b0:9e:32:2c:f3:1b:
5a:b3:68:32:c3:65:33:df:13:c3:7c:70:de:66:60:0f:1c:d9:
04:9c:74:7f:bc:e3:7c:a3:9c:5e:d7:63:e6:2a:4f:ea:1e:f6:
e7:a8:fa:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 18:57:05 2025 by rpki-client