Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/N0ODgk1y-SAhxPlNeX0OBu9hZqk.roa
File: N0ODgk1y-SAhxPlNeX0OBu9hZqk.roa (raw, json)
Hash identifier: aGlFpoE4CG2eThXaAl6HiJlt1CBY6e+dPe5+mlHAUnI=
Subject key identifier: 37:43:83:82:4D:72:F9:20:21:C4:F9:4D:79:7D:0E:06:EF:61:66:A9
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 01942780C97D4A9B05E5D9C9AB88C05F4A1A
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/N0ODgk1y-SAhxPlNeX0OBu9hZqk.roa
Signing time: Thu 02 Jan 2025 14:52:19 +0000
ROA not before: Thu 02 Jan 2025 14:52:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214024
IP address blocks: 185.199.54.0/24 maxlen: 24
185.206.250.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:80:c9:7d:4a:9b:05:e5:d9:c9:ab:88:c0:5f:4a:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Jan 2 14:52:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=374383824d72f92021c4f94d797d0e06ef6166a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:3d:45:90:e2:c5:96:69:e3:42:05:28:db:a4:
4f:c1:c0:dd:4f:b2:04:3c:54:47:6b:df:4d:13:06:
b2:83:1c:83:1f:64:3c:5d:38:c0:60:85:35:e9:41:
9c:65:4e:ad:96:99:3b:43:aa:a5:c9:e5:5d:8e:08:
1c:e8:68:f7:80:82:12:00:62:c5:01:33:a6:c5:61:
26:4b:c6:88:8a:88:68:43:d6:ab:b1:a7:98:77:6e:
c9:2c:21:c4:d9:dd:d6:33:d4:ac:1f:74:c8:11:82:
07:ed:aa:57:c4:2d:ad:8f:56:2c:66:bb:0a:7a:da:
ee:54:58:e7:52:8f:17:03:97:b7:2b:a0:15:4b:f7:
26:40:f6:2e:c0:e2:cc:ad:60:11:1f:4e:11:b9:27:
9d:f3:5f:3b:34:b3:a3:ad:a8:d1:18:fb:f6:14:6c:
ae:1a:48:58:0a:1b:f7:9f:7a:10:89:9e:82:e0:a6:
38:5b:98:35:a3:83:99:85:f2:62:78:a4:ec:49:a5:
e1:b5:6e:5a:91:dc:4c:3d:f2:47:98:37:ba:7c:03:
d1:1d:5a:0a:39:08:bc:b9:42:09:80:a0:49:30:2c:
a9:38:2a:53:b8:68:f5:62:f6:f2:13:69:c6:ce:60:
34:ab:d2:dd:f9:ed:d6:49:76:4f:f7:9a:ae:65:48:
32:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:43:83:82:4D:72:F9:20:21:C4:F9:4D:79:7D:0E:06:EF:61:66:A9
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/N0ODgk1y-SAhxPlNeX0OBu9hZqk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.199.54.0/24
185.206.250.0/24
Signature Algorithm: sha256WithRSAEncryption
36:dc:c5:8e:20:d4:8f:90:df:9c:f2:6d:c1:6f:c9:f4:75:22:
af:a5:a7:a8:9c:d9:45:3b:d8:b0:ea:28:a5:d1:31:55:27:ce:
b8:56:78:27:02:00:1b:6c:46:c6:5f:34:28:84:e4:86:69:e3:
7d:84:dd:a6:34:75:fb:7a:04:a3:2e:5f:80:26:c6:b8:48:65:
a2:8b:03:d7:7e:07:e4:67:6f:a5:6f:61:e0:8e:e9:92:71:33:
f4:39:15:dd:5a:f2:00:57:b4:1d:f9:77:6f:09:94:ea:3d:b6:
f6:36:7c:90:93:1d:4b:8a:61:6c:56:ba:e5:89:40:03:c6:25:
91:3c:50:af:0c:22:24:e4:8d:b1:18:18:75:c8:68:1b:9c:1f:
d9:a2:53:f2:00:22:6d:43:76:c0:b3:a8:8c:5d:32:fc:4f:91:
69:7d:c6:42:f6:dc:69:2b:31:c9:c2:fb:11:bd:86:45:c2:36:
0a:9a:97:1e:3a:26:11:e8:44:68:22:01:74:8e:ea:39:1e:9e:
2a:b9:f5:54:d6:3a:20:5a:f7:b7:87:b2:24:9a:67:95:7c:c1:
3f:2f:2d:f7:6f:b5:f6:f7:fe:f2:2f:40:bd:5f:75:94:de:33:
44:6e:71:34:79:f1:4b:9b:0e:db:81:8e:63:e6:f6:e3:76:f7:
22:1b:2e:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 22:43:28 2025 by rpki-client