Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/iT6-Gffr6giHjto_RhJnUPD-VYw.roa
File: iT6-Gffr6giHjto_RhJnUPD-VYw.roa (raw, json)
Hash identifier: vb8i6emV8yN1bZTeLi72FObsItFb9plIjKpMPjDCBM0=
Subject key identifier: 89:3E:BE:19:F7:EB:EA:08:87:8E:DA:3F:46:12:67:50:F0:FE:55:8C
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 019422202A3E46C0FF851FDC0E5CB2576C79
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/iT6-Gffr6giHjto_RhJnUPD-VYw.roa
Signing time: Wed 01 Jan 2025 13:48:40 +0000
ROA not before: Wed 01 Jan 2025 13:48:40 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 59816
IP address blocks: 185.199.158.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:20:2a:3e:46:c0:ff:85:1f:dc:0e:5c:b2:57:6c:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Jan 1 13:48:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=893ebe19f7ebea08878eda3f46126750f0fe558c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:e3:0e:7b:8e:00:2f:bb:b4:94:28:90:be:96:
89:34:67:27:4f:2f:c0:f2:4d:11:8d:c2:72:64:9a:
ea:eb:65:59:f5:08:59:b9:fd:d4:20:39:5c:af:78:
51:5c:eb:19:c8:b9:44:e5:d7:af:70:8c:92:f2:cc:
77:c9:19:12:a7:85:c6:22:8b:fe:e0:53:cf:ba:b7:
4a:50:e8:7d:02:51:12:2a:b0:49:7b:f6:38:f3:35:
f2:60:e9:44:1d:42:dd:3d:f1:dc:f8:69:79:29:bc:
15:89:f8:b2:1c:a5:a2:6c:52:4b:e7:2a:c9:6f:83:
03:8a:43:69:ea:3e:e6:5e:c7:7e:b9:f1:a2:9f:0a:
d4:c9:78:d3:ef:20:66:3e:12:88:84:b0:d3:45:98:
f9:fa:ed:4a:59:45:e7:2b:f2:5a:77:50:2b:ca:0f:
3e:82:37:0a:2c:4a:58:7b:e4:f8:8e:a8:1b:d1:69:
3d:df:20:03:3a:30:6f:5c:9f:7a:45:dc:b8:71:09:
ee:d6:2a:90:45:b6:53:23:5a:39:67:89:fa:55:eb:
d8:3f:4c:d1:00:9d:02:0c:ff:08:af:63:f4:79:89:
92:ae:a4:d5:65:5a:15:67:ee:76:e9:d3:3e:c0:17:
06:09:c4:93:d1:65:be:42:7a:05:88:ac:16:25:69:
94:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:3E:BE:19:F7:EB:EA:08:87:8E:DA:3F:46:12:67:50:F0:FE:55:8C
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/iT6-Gffr6giHjto_RhJnUPD-VYw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.199.158.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:01:10:c4:a5:47:5b:b9:60:f4:3f:95:9c:b3:c2:8c:b0:66:
83:de:c4:1c:8d:3f:64:2d:b0:94:2c:9d:71:27:c0:59:60:aa:
af:92:dd:52:13:f4:39:61:ad:24:3d:1f:00:7f:be:37:13:35:
52:c7:f6:67:ef:0f:c5:f7:46:4b:18:3d:3b:c5:e6:3a:9d:1d:
46:fb:03:d4:59:ee:81:5e:cc:51:1a:31:43:67:96:75:46:c8:
a7:eb:6f:1a:02:55:61:cc:90:05:30:5e:9a:da:81:7b:31:2d:
4f:d8:41:3d:ef:b0:19:93:5d:94:c0:7d:f3:6d:e0:ec:a3:23:
30:5d:79:50:2d:6d:19:9a:7a:38:70:9f:77:7c:23:cd:73:a4:
6a:c0:99:ce:21:8b:a6:16:ec:7b:b7:4f:99:37:2c:d3:76:1b:
a7:d1:72:c6:6e:5b:32:40:2e:de:b9:17:75:81:aa:a0:84:88:
92:04:78:e4:a4:62:58:9a:d9:06:0b:df:1f:69:9c:23:e6:8f:
bd:8b:32:26:c6:58:aa:ac:89:a3:b6:b3:c2:f2:fc:0c:d3:68:
00:e2:e7:ba:96:23:10:77:9f:69:b9:0a:25:4b:27:bd:2f:86:
8a:d1:c1:b4:60:b6:fa:13:a0:ae:bb:c7:2c:e3:b3:e4:d4:e6:
69:a6:86:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 01:10:38 2025 by rpki-client