Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/4rfUQ6fd5nni-5Sh17CN67SZzgU.roa
File: 4rfUQ6fd5nni-5Sh17CN67SZzgU.roa (raw, json)
Hash identifier: h8+/gj5rrqLBrFP5xlHCi8a6kuHPDjo6u9QvxhfLJ8M=
Subject key identifier: E2:B7:D4:43:A7:DD:E6:79:E2:FB:94:A1:D7:B0:8D:EB:B4:99:CE:05
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 0194222034FFF610449751B1038565BE8C9F
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/4rfUQ6fd5nni-5Sh17CN67SZzgU.roa
Signing time: Wed 01 Jan 2025 13:48:43 +0000
ROA not before: Wed 01 Jan 2025 13:48:43 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 197795
IP address blocks: 185.230.52.0/24 maxlen: 24
185.230.55.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:20:34:ff:f6:10:44:97:51:b1:03:85:65:be:8c:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Jan 1 13:48:43 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e2b7d443a7dde679e2fb94a1d7b08debb499ce05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:37:7b:26:c1:13:ec:fb:88:70:a5:10:cf:e4:
07:4b:f5:9a:04:9b:f4:fe:61:f2:b2:76:6e:66:6e:
51:10:e5:b7:72:2d:32:8c:b9:84:8e:c0:67:ce:2b:
de:c7:fc:16:17:7a:99:a7:e5:9e:e8:17:26:47:f4:
6b:50:2d:90:44:26:06:ed:54:3d:1d:fc:c9:19:84:
00:52:29:81:bd:a6:95:ee:e6:b6:f8:18:91:b1:e3:
aa:38:6a:69:7c:65:99:03:06:f2:82:cb:ba:16:c1:
c5:59:60:7b:ab:01:a7:2a:f3:f1:6a:4f:9a:e2:d0:
be:26:5d:b6:3e:4f:61:4f:2d:82:32:b5:f5:20:85:
02:79:94:4a:63:46:92:7b:5d:7a:62:fd:1a:de:4d:
94:50:a7:9c:f8:2a:2f:b8:75:fc:4c:9e:c5:81:7e:
3b:86:5a:c8:6a:d7:4f:24:7f:e8:88:90:00:8c:b6:
2b:ad:2c:fc:39:1e:f4:a0:d3:5a:ee:65:4b:25:bd:
34:4a:2e:52:c7:13:2b:5e:5a:d2:11:7b:55:76:57:
93:4d:c8:08:ec:07:e8:33:41:10:8e:5a:42:9d:9b:
df:49:51:59:e8:39:28:fe:20:89:3d:71:30:f1:1e:
ef:d6:b5:26:ed:16:1e:be:20:b4:32:53:d3:8c:94:
37:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:B7:D4:43:A7:DD:E6:79:E2:FB:94:A1:D7:B0:8D:EB:B4:99:CE:05
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/4rfUQ6fd5nni-5Sh17CN67SZzgU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.230.52.0/24
185.230.55.0/24
Signature Algorithm: sha256WithRSAEncryption
40:9c:b9:f1:21:9e:bc:d8:b8:7f:ab:92:14:44:f7:82:c1:cd:
80:bb:c6:e2:ee:df:22:40:5f:c6:78:1f:5d:35:06:79:13:0b:
2a:94:17:a3:ce:1b:9a:53:21:2f:4f:ed:04:37:ad:28:0b:89:
7d:23:83:1c:a0:15:62:ff:48:59:f0:43:b6:df:57:f0:d3:f6:
f8:7b:41:1a:d2:b4:d5:e8:25:0d:c7:2c:ad:56:4b:ae:0f:40:
53:0e:28:e9:c4:41:0c:d2:11:d3:31:00:53:8d:9b:ff:b1:de:
62:e6:9b:02:b4:d5:3d:f2:5d:25:44:63:b9:1b:6e:30:f8:a9:
dc:19:d7:85:0d:29:73:12:64:59:b5:4a:15:f2:44:81:62:3f:
88:1e:c8:97:44:5c:cc:6f:11:f6:cc:a6:41:91:22:9b:e2:28:
f3:8f:8a:bb:a8:3a:8a:6b:51:04:d1:fe:33:07:fa:fe:23:2f:
1c:90:cd:d2:2e:99:7a:0f:e8:22:21:6f:23:fd:cc:82:01:39:
5e:5e:4b:73:e1:34:5a:c9:89:14:a5:63:0f:34:ec:17:73:06:
c3:1d:bc:af:a0:a5:31:92:d3:ec:c8:2b:2c:ec:04:de:9e:59:
d2:17:64:db:49:14:df:92:a2:cb:e5:88:9f:e9:9b:bc:32:d2:
ce:bf:50:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 09:29:55 2025 by rpki-client