Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/c5811d-1da0-4c32-9c4c-d82a90e34c2d/1/Ll30cYUSRjJU1aCHZ1YRr-iUyf8.roa
File: Ll30cYUSRjJU1aCHZ1YRr-iUyf8.roa (raw, json)
Hash identifier: /bA9u2h5NTMZDfewDc1SRyw5qIxS43DYtdeQY6zyTlU=
Subject key identifier: 2E:5D:F4:71:85:12:46:32:54:D5:A0:87:67:56:11:AF:E8:94:C9:FF
Certificate issuer: /CN=bafed139df0fad6fde0d82869144104d204b92b5
Certificate serial: 0194282360B7DB31C2B3C14935B9A62E11E6
Authority key identifier: BA:FE:D1:39:DF:0F:AD:6F:DE:0D:82:86:91:44:10:4D:20:4B:92:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uv7ROd8PrW_eDYKGkUQQTSBLkrU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/c5811d-1da0-4c32-9c4c-d82a90e34c2d/1/Ll30cYUSRjJU1aCHZ1YRr-iUyf8.roa
Signing time: Thu 02 Jan 2025 17:49:54 +0000
ROA not before: Thu 02 Jan 2025 17:49:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 134835
IP address blocks: 185.170.208.0/24 maxlen: 24
185.170.209.0/24 maxlen: 24
185.170.210.0/24 maxlen: 24
185.170.211.0/24 maxlen: 24
2a0a:68c0::/40 maxlen: 40
2a0a:68c0:ff00::/40 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:23:60:b7:db:31:c2:b3:c1:49:35:b9:a6:2e:11:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bafed139df0fad6fde0d82869144104d204b92b5
Validity
Not Before: Jan 2 17:49:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2e5df4718512463254d5a087675611afe894c9ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:57:55:e5:b7:cb:65:90:10:09:91:b3:a3:8d:
23:58:9d:0e:59:8b:45:ae:1a:bb:bb:62:b4:e9:fd:
75:6a:3b:dc:ce:c4:49:4d:ab:8c:c5:f8:6c:5b:c8:
cb:05:72:38:36:e8:bc:61:0c:7e:58:ee:95:06:a1:
d8:34:63:e8:be:73:d4:24:e1:ac:2e:79:ae:ef:62:
f6:34:6d:96:85:3a:88:f8:84:78:e9:4f:12:d5:21:
99:07:91:d0:c4:c2:1e:bd:ac:35:77:39:81:2d:86:
70:85:c8:51:14:b3:36:6c:f3:8f:37:70:8d:9d:2a:
45:82:a3:75:07:cf:7d:42:db:42:a4:b6:2e:fe:70:
71:7a:87:ad:9d:c7:5b:1b:63:4e:94:f1:28:2f:bd:
ca:53:15:39:1d:24:bc:2e:f4:fe:80:7c:e6:d5:b8:
41:05:6a:37:46:1d:65:a8:33:b5:9b:c5:13:62:40:
20:9a:b9:f2:73:53:c9:b7:05:7a:45:31:cf:4a:b4:
4a:64:a9:22:8e:35:c6:e1:95:b9:d3:3b:29:ff:b8:
86:04:88:5d:e2:e4:38:bd:30:c0:bf:f6:09:93:24:
09:21:65:bd:39:0c:67:59:4a:8c:38:25:48:d3:9d:
e0:69:07:4c:6b:21:d8:87:33:e6:e9:1c:7a:35:03:
0b:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:5D:F4:71:85:12:46:32:54:D5:A0:87:67:56:11:AF:E8:94:C9:FF
X509v3 Authority Key Identifier:
keyid:BA:FE:D1:39:DF:0F:AD:6F:DE:0D:82:86:91:44:10:4D:20:4B:92:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uv7ROd8PrW_eDYKGkUQQTSBLkrU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/c5811d-1da0-4c32-9c4c-d82a90e34c2d/1/Ll30cYUSRjJU1aCHZ1YRr-iUyf8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/c5811d-1da0-4c32-9c4c-d82a90e34c2d/1/uv7ROd8PrW_eDYKGkUQQTSBLkrU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.170.208.0/22
IPv6:
2a0a:68c0::/40
2a0a:68c0:ff00::/40
Signature Algorithm: sha256WithRSAEncryption
66:98:3a:04:4e:12:37:75:75:75:d1:0b:3b:51:06:8f:f1:44:
86:4f:31:36:cf:be:d9:07:12:31:aa:14:ae:3b:80:ed:ca:51:
af:48:6e:10:99:bc:1d:b1:42:47:d0:50:5d:42:8c:70:3a:13:
bd:cf:90:19:d5:67:a1:23:27:39:ce:e8:f4:a1:ce:d3:c8:95:
09:3e:83:8b:80:17:ce:26:2b:8f:9e:01:fd:b0:cf:d7:69:ba:
f0:61:65:9a:b7:af:e7:2f:d2:7f:bd:c5:be:0b:b5:43:1e:c3:
63:bf:97:02:b2:e2:0b:de:5e:21:a5:75:31:8a:4a:18:77:aa:
35:f5:fc:17:df:17:45:ef:54:8d:3a:fa:51:3e:14:0f:d5:aa:
f2:64:e6:9e:76:4d:e5:8d:1b:fd:51:b4:5e:6c:a9:3b:59:b2:
6b:f7:5a:6f:c9:f3:0e:44:e0:45:4c:99:f2:26:3c:ee:47:8d:
fd:13:9a:bd:2f:a1:29:29:96:8e:62:1b:92:74:65:e0:cc:b3:
1f:5a:92:9a:aa:1f:ea:69:2b:74:40:f3:19:4e:0d:16:0c:9a:
c5:dc:63:26:d6:64:ed:04:f0:b6:34:18:b8:7a:5c:98:aa:8e:
b8:42:55:3b:65:8d:e8:cc:fa:39:b6:e4:ca:aa:79:26:21:7a:
0f:74:c8:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 14:31:50 2025 by rpki-client