Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/1icboM0e1V3gk-rREqiS0Hp04Fc.roa
File: 1icboM0e1V3gk-rREqiS0Hp04Fc.roa (raw, json)
Hash identifier: jr+xSu+SjeBFPrluRHTkZgdI09wUvXFVyRrb5ciUvJw=
Subject key identifier: D6:27:1B:A0:CD:1E:D5:5D:E0:93:EA:D1:12:A8:92:D0:7A:74:E0:57
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 019422204AFC9D5B58C166144375383CACB6
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/1icboM0e1V3gk-rREqiS0Hp04Fc.roa
Signing time: Wed 01 Jan 2025 13:48:49 +0000
ROA not before: Wed 01 Jan 2025 13:48:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211826
IP address blocks: 185.209.39.0/24 maxlen: 24
185.209.72.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:20:4a:fc:9d:5b:58:c1:66:14:43:75:38:3c:ac:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Jan 1 13:48:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d6271ba0cd1ed55de093ead112a892d07a74e057
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:76:25:e3:1c:32:d5:cd:20:87:87:c6:71:20:
75:00:35:48:07:95:a0:19:23:66:fb:1e:fc:b8:52:
a8:5f:cd:9f:f2:1b:7e:88:89:34:ca:8f:fb:ce:03:
3b:d7:1e:0c:9e:a9:85:d1:0b:8c:f5:82:fa:6e:5c:
43:0c:61:c7:31:7a:ca:2a:32:ca:dd:93:a4:1e:eb:
5f:79:52:12:2f:d9:0a:7f:d7:ca:96:5f:e7:32:5d:
79:3d:fd:b8:3c:0e:96:ce:e0:e4:65:40:30:6d:23:
f1:a2:94:9c:30:b3:d3:57:80:60:8d:76:ef:5f:d9:
f9:5b:bf:2e:6f:83:65:a6:17:6c:5b:fd:27:1a:4f:
e9:34:09:ba:4f:3e:6b:75:40:aa:66:99:d1:d5:84:
58:3c:8f:b2:27:df:0a:2a:ca:ab:9d:2d:6a:f6:82:
bc:d2:6e:0a:9d:3a:af:3b:1f:73:d2:3c:60:f2:9f:
42:fc:fc:a5:c7:89:d1:ca:bf:d7:4a:a0:b4:c2:91:
9a:14:47:5c:a6:7a:e3:15:62:e6:e6:38:05:01:fe:
5f:e8:00:da:8f:59:ee:b8:d8:66:73:eb:b9:79:eb:
f3:9f:6e:d6:05:e3:49:a6:b6:07:31:d4:fe:bb:ad:
3f:21:85:69:a6:00:e8:77:04:54:9a:42:25:ee:ab:
0b:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:27:1B:A0:CD:1E:D5:5D:E0:93:EA:D1:12:A8:92:D0:7A:74:E0:57
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/1icboM0e1V3gk-rREqiS0Hp04Fc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.209.39.0/24
185.209.72.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:6a:1c:d8:65:ae:93:25:38:02:6b:0d:23:93:c0:e7:95:c6:
fa:65:2a:0a:c5:23:b8:ff:b0:62:35:1b:9a:c7:61:02:91:7c:
9c:17:e2:30:3a:f5:46:48:0e:de:db:2e:04:f0:45:86:37:2b:
5c:44:08:95:87:2d:c9:43:9f:0a:22:54:5c:35:81:52:f3:5d:
d1:87:ed:e4:90:c9:60:4c:6b:30:22:12:14:cb:3a:94:85:69:
6f:d0:d2:7b:70:ff:62:48:2b:80:5c:86:39:3d:73:40:51:a2:
a4:bf:76:1e:64:22:e8:f9:02:2a:14:d9:61:12:21:ca:d4:74:
67:bb:c7:93:18:44:93:81:23:9a:6a:e5:50:c1:83:9d:08:35:
ea:53:6f:44:b3:af:0b:9a:4f:2f:a8:bb:9f:7a:23:2f:6b:90:
0a:cb:0d:f7:bb:be:9f:ec:56:a1:1d:3a:21:b8:f9:86:65:78:
d4:1e:34:c8:a6:7d:97:03:d2:34:50:74:b0:95:0b:43:70:b7:
b6:ff:fa:b7:47:00:2b:11:b9:0d:48:4e:11:86:d3:e0:9a:e0:
23:c5:a5:c6:32:a9:52:87:f4:e5:61:9e:9c:60:5b:9f:b0:15:
02:2f:44:65:e9:9c:3e:18:fe:04:02:a5:10:35:c0:79:62:d5:
8b:bc:bd:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 04:54:12 2025 by rpki-client