Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/E_IUJB80qq2dCHp1BMLgRsNBkrc.roa
File: E_IUJB80qq2dCHp1BMLgRsNBkrc.roa (raw, json)
Hash identifier: 9uPG9z4EV2vXesUMSeCoGXSMVzbjNOc95v4tZKybv+Y=
Subject key identifier: 13:F2:14:24:1F:34:AA:AD:9D:08:7A:75:04:C2:E0:46:C3:41:92:B7
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 01951DB6F0296562251C2ACC8F57124BD079
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/E_IUJB80qq2dCHp1BMLgRsNBkrc.roa
Signing time: Wed 19 Feb 2025 10:18:02 +0000
ROA not before: Wed 19 Feb 2025 10:18:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 61317
IP address blocks: 185.199.159.0/24 maxlen: 24
185.206.248.0/24 maxlen: 24
185.206.251.0/24 maxlen: 24
185.209.36.0/23 maxlen: 24
185.210.152.0/24 maxlen: 24
185.210.153.0/24 maxlen: 24
185.210.154.0/24 maxlen: 24
185.210.155.0/24 maxlen: 24
185.218.102.0/24 maxlen: 24
185.223.76.0/24 maxlen: 24
185.225.2.0/24 maxlen: 24
185.227.145.0/24 maxlen: 24
185.232.206.0/24 maxlen: 24
185.234.20.0/22 maxlen: 24
185.234.23.0/24 maxlen: 24
185.238.228.0/22 maxlen: 24
185.240.120.0/23 maxlen: 24
185.251.231.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:1d:b6:f0:29:65:62:25:1c:2a:cc:8f:57:12:4b:d0:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Feb 19 10:18:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=13f214241f34aaad9d087a7504c2e046c34192b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:cf:fb:e0:c9:77:a7:09:f9:70:9e:17:b2:12:
c0:8a:57:d6:56:ae:41:ae:89:8e:fc:f8:44:5b:88:
86:79:03:4a:60:98:0c:94:78:d7:80:b1:0f:0e:4f:
82:2b:41:4f:99:bf:fe:e7:c3:23:c4:25:fa:4c:79:
cd:0d:52:9f:72:e3:b5:be:92:22:bd:63:86:9c:07:
0e:68:b8:65:b3:75:30:e5:4e:c0:51:17:c9:48:12:
43:ed:0f:2e:d9:f8:c9:9c:03:28:f1:87:ba:54:79:
d5:00:b2:ac:17:e9:f2:bb:f5:74:1d:6c:15:ec:ba:
e0:63:6d:5b:48:4f:35:d5:24:c6:75:4a:9c:61:5b:
3e:76:1c:a2:dc:ac:f5:3a:f8:2e:d1:7d:e3:74:8c:
47:7a:26:3b:b4:84:8d:55:0b:44:e5:1b:2b:76:43:
95:0a:72:f5:00:d1:14:3a:43:16:ee:d7:ac:b9:e5:
da:a6:df:65:83:75:5c:73:b3:c8:97:fc:5a:01:34:
6f:d5:1a:93:c8:5c:7b:38:ce:61:2c:92:00:50:6f:
43:ec:f2:b9:33:7a:5e:47:3e:30:3a:79:e3:1a:f8:
1c:cf:7e:09:0d:f8:7f:dc:4a:cb:2f:c5:92:17:29:
cd:22:d6:32:ec:1d:f1:db:d6:d7:34:56:23:46:ec:
b8:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:F2:14:24:1F:34:AA:AD:9D:08:7A:75:04:C2:E0:46:C3:41:92:B7
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/E_IUJB80qq2dCHp1BMLgRsNBkrc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.199.159.0/24
185.206.248.0/24
185.206.251.0/24
185.209.36.0/23
185.210.152.0/22
185.218.102.0/24
185.223.76.0/24
185.225.2.0/24
185.227.145.0/24
185.232.206.0/24
185.234.20.0/22
185.238.228.0/22
185.240.120.0/23
185.251.231.0/24
Signature Algorithm: sha256WithRSAEncryption
55:6f:0a:fc:68:db:03:14:8c:a4:01:c9:00:1b:ad:8d:e2:c6:
75:0e:a6:68:f7:a9:0d:b1:41:d2:1e:1f:e1:07:ea:aa:c6:f6:
b2:ed:41:48:a3:fd:6f:0f:fd:85:04:fb:c3:d7:f6:78:51:18:
f3:49:f1:5b:a1:da:3c:d5:b2:11:81:b1:62:e7:3c:34:7d:ab:
ef:d6:cf:0c:f4:4f:03:6c:fe:59:aa:a6:aa:5c:ad:73:2c:29:
5f:8a:3c:63:6b:52:f1:06:d2:de:cf:3b:be:b3:60:27:a3:86:
f3:3e:13:52:55:e9:ce:f2:56:37:48:f7:26:c8:70:74:a8:a6:
17:27:e6:11:9b:b1:bc:58:60:ce:04:6f:08:c0:63:b5:a2:59:
6e:d3:d0:44:9d:c6:9c:48:1c:4f:9b:c8:da:aa:de:e8:66:0a:
6c:5b:fa:de:8c:7a:15:f9:b4:ea:fa:89:85:88:92:da:30:88:
5b:12:26:9c:99:b1:85:4f:b9:b4:a2:f6:42:ce:9f:e0:9d:54:
35:92:ca:a8:84:12:46:74:da:c8:60:67:a0:5f:37:27:27:7b:
a3:8e:d3:b4:22:26:ab:b8:a7:1b:99:ea:fa:7d:37:23:02:c4:
70:45:6b:49:a9:30:a3:a4:f1:3b:08:68:0f:71:fb:49:5d:42:
5d:85:89:17
-----BEGIN CERTIFICATE-----
MIIFSzCCBDOgAwIBAgISAZUdtvApZWIlHCrMj1cSS9B5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwNjc4NGMxMDUwODViOWQ2YWQ1ZjczYTAzYjIwZDlhNWMx
MTRjYWYwHhcNMjUwMjE5MTAxODAyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxM2YyMTQyNDFmMzRhYWFkOWQwODdhNzUwNGMyZTA0NmMzNDE5MmI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApc/74Ml3pwn5cJ4XshLAilfWVq5B
romO/PhEW4iGeQNKYJgMlHjXgLEPDk+CK0FPmb/+58MjxCX6THnNDVKfcuO1vpIi
vWOGnAcOaLhls3Uw5U7AURfJSBJD7Q8u2fjJnAMo8Ye6VHnVALKsF+nyu/V0HWwV
7LrgY21bSE811STGdUqcYVs+dhyi3Kz1Ovgu0X3jdIxHeiY7tISNVQtE5RsrdkOV
CnL1ANEUOkMW7tesueXapt9lg3Vcc7PIl/xaATRv1RqTyFx7OM5hLJIAUG9D7PK5
M3peRz4wOnnjGvgcz34JDfh/3ErLL8WSFynNItYy7B3x29bXNFYjRuy4KwIDAQAB
o4ICVzCCAlMwHQYDVR0OBBYEFBPyFCQfNKqtnQh6dQTC4EbDQZK3MB8GA1UdIwQY
MBaAFGBnhMEFCFudatX3OgOyDZpcEUyvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgt
YjQzNDJiYTkxYWJjLzEvRV9JVUpCODBxcTJkQ0hwMUJNTGdSc05Ca3JjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgtYjQzNDJiYTkxYWJj
LzEvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMG0GCCsGAQUFBwEHAQH/BF4wXDBaBAIAATBUAwQAucefAwQA
uc74AwQAuc77AwQBudEkAwQCudKYAwQAudpmAwQAud9MAwQAueECAwQAueORAwQA
uejOAwQCueoUAwQCue7kAwQBufB4AwQAufvnMA0GCSqGSIb3DQEBCwUAA4IBAQBV
bwr8aNsDFIykAckAG62N4sZ1DqZo96kNsUHSHh/hB+qqxvay7UFIo/1vD/2FBPvD
1/Z4URjzSfFbodo81bIRgbFi5zw0favv1s8M9E8DbP5ZqqaqXK1zLClfijxja1Lx
BtLezzu+s2Ano4bzPhNSVenO8lY3SPcmyHB0qKYXJ+YRm7G8WGDOBG8IwGO1ollu
09BEncacSBxPm8jaqt7oZgpsW/rejHoV+bTq+omFiJLaMIhbEiacmbGFT7m0ovZC
zp/gnVQ1ksqohBJGdNrIYGegXzcnJ3ujjtO0IiaruKcbmer6fTcjAsRwRWtJqTCj
pPE7CGgPcftJXUJdhYkX
-----END CERTIFICATE-----
Generated at Sat Apr 12 09:29:11 2025 by rpki-client