Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/3364ed-c5f9-4631-b95c-f26b1551e0f5/1/sVlKP1Ez4yOOYTsMgLnAcyZHYTU.roa
File: sVlKP1Ez4yOOYTsMgLnAcyZHYTU.roa (raw, json)
Hash identifier: mT+vrCCIUAj9n7MDoEWrY5NvNhQ+rHxeB5vfIpdtYvU=
Subject key identifier: B1:59:4A:3F:51:33:E3:23:8E:61:3B:0C:80:B9:C0:73:26:47:61:35
Certificate issuer: /CN=2f1e253977bf583e0e420ec977a8ecf4ed154dbe
Certificate serial: 018CC725A537EDB1E5EA3A6C4C252532A4EF
Authority key identifier: 2F:1E:25:39:77:BF:58:3E:0E:42:0E:C9:77:A8:EC:F4:ED:15:4D:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Lx4lOXe_WD4OQg7Jd6js9O0VTb4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/3364ed-c5f9-4631-b95c-f26b1551e0f5/1/sVlKP1Ez4yOOYTsMgLnAcyZHYTU.roa
Signing time: Mon 01 Jan 2024 22:29:42 +0000
ROA not before: Mon 01 Jan 2024 22:29:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 60729
IP address blocks: 185.220.101.0/24 maxlen: 24
185.220.102.0/24 maxlen: 24
2a0b:f4c1:2::/48 maxlen: 48
2a0b:f4c1::/40 maxlen: 48
2a0b:f4c2::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:25:a5:37:ed:b1:e5:ea:3a:6c:4c:25:25:32:a4:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f1e253977bf583e0e420ec977a8ecf4ed154dbe
Validity
Not Before: Jan 1 22:29:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b1594a3f5133e3238e613b0c80b9c07326476135
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:36:1f:d1:b3:b1:9b:c3:18:8d:d3:11:42:2e:
7f:66:a9:fd:19:a6:b8:35:10:91:a0:d0:1f:d0:83:
a8:99:13:9f:fd:8c:bf:12:06:6f:35:0f:8b:28:37:
2f:4a:d1:43:b8:87:ab:2b:cd:96:73:91:9c:26:a3:
c1:a5:f3:0f:a0:51:91:c6:0d:14:55:d9:d4:e3:06:
ba:4c:68:b7:cb:e5:b0:31:6f:ba:71:ae:ac:da:5b:
05:d6:af:93:73:5a:25:c4:01:89:88:1b:e2:70:38:
17:ad:f2:7b:17:01:06:b6:4f:1f:35:76:cd:93:6a:
c2:4e:11:a0:41:2d:88:1a:df:1a:c1:be:63:33:0b:
1f:06:b9:35:fb:f8:aa:95:96:8a:1a:55:14:86:56:
05:ab:80:95:a3:2f:af:88:b9:08:a6:fb:f4:63:94:
94:c8:52:3b:2c:7c:47:4b:b7:f6:ea:08:a8:d5:9b:
25:fb:b3:e2:98:8c:03:46:f8:53:2e:18:12:88:23:
1e:b7:83:37:94:7c:35:5d:0e:09:c3:0c:51:0d:32:
8d:06:cb:b9:6d:32:97:e7:ba:4a:92:96:17:57:39:
3f:3b:a8:39:9b:9c:ed:7b:e1:55:90:45:68:04:17:
ab:4a:16:7d:f8:c8:09:f9:b7:40:75:cf:25:58:79:
cd:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:59:4A:3F:51:33:E3:23:8E:61:3B:0C:80:B9:C0:73:26:47:61:35
X509v3 Authority Key Identifier:
keyid:2F:1E:25:39:77:BF:58:3E:0E:42:0E:C9:77:A8:EC:F4:ED:15:4D:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lx4lOXe_WD4OQg7Jd6js9O0VTb4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/3364ed-c5f9-4631-b95c-f26b1551e0f5/1/sVlKP1Ez4yOOYTsMgLnAcyZHYTU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/3364ed-c5f9-4631-b95c-f26b1551e0f5/1/Lx4lOXe_WD4OQg7Jd6js9O0VTb4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.220.101.0-185.220.102.255
IPv6:
2a0b:f4c1::/40
2a0b:f4c2::/40
Signature Algorithm: sha256WithRSAEncryption
53:e2:8a:54:65:a4:3c:ee:e2:13:86:46:88:e4:24:62:78:a0:
59:da:03:a9:a0:0d:4f:fa:03:28:47:b8:1e:43:92:08:6e:ce:
05:2b:4d:6a:c5:87:85:4d:1c:0b:7e:6a:7a:16:db:06:d4:43:
fe:45:27:88:2a:f3:bb:f8:eb:03:63:4d:61:ee:f7:ac:eb:7e:
0f:a9:58:f6:ea:ef:8d:e0:96:e7:10:cc:74:01:a2:05:3b:b9:
87:de:ee:42:fa:90:a0:65:fc:fd:98:6f:5e:d3:b0:f2:49:44:
db:4a:b1:e1:c6:54:51:61:d7:e9:04:bd:b1:4a:c7:a4:a8:74:
6b:b6:8b:bc:fc:11:07:6b:c2:8e:17:37:31:a7:81:bb:ef:3e:
bf:b1:ea:26:08:fc:f3:05:9c:18:06:8f:74:e4:d9:62:53:51:
69:71:15:d2:d9:aa:2d:02:41:16:7c:05:23:58:10:e7:5f:e0:
d5:79:44:e3:73:0b:63:72:02:26:ea:3e:d7:1c:e4:77:61:72:
8d:50:d7:b5:aa:eb:39:28:8c:39:5b:9b:e8:8e:75:79:96:69:
77:ad:dc:c5:75:ef:62:d2:fc:22:cf:31:c2:f3:cf:1f:e3:9d:
98:b8:fe:36:26:dc:27:27:ef:97:a7:c0:bc:92:d0:39:6c:49:
98:2f:69:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 07:32:37 2025 by rpki-client