Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/k4rvhMvz8otDQkpWYee8ckphw6s.roa
File: k4rvhMvz8otDQkpWYee8ckphw6s.roa (raw, json)
Hash identifier: UZUH8ap9/MLy0fASWeVeUrVZsjIiq1TZDbiw/wKqcpE=
Subject key identifier: 93:8A:EF:84:CB:F3:F2:8B:43:42:4A:56:61:E7:BC:72:4A:61:C3:AB
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 0194222037A0492663F68A396A7313D882A0
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/k4rvhMvz8otDQkpWYee8ckphw6s.roa
Signing time: Wed 01 Jan 2025 13:48:44 +0000
ROA not before: Wed 01 Jan 2025 13:48:44 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200088
IP address blocks: 185.226.106.0/24 maxlen: 24
185.228.74.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:20:37:a0:49:26:63:f6:8a:39:6a:73:13:d8:82:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Jan 1 13:48:44 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=938aef84cbf3f28b43424a5661e7bc724a61c3ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:64:ce:bb:34:05:4a:65:c6:c7:e5:d4:c0:ff:
85:b0:8f:73:f0:5c:bb:fd:2b:e2:93:e6:43:7c:a9:
a8:98:27:01:2a:d2:35:64:21:78:56:82:1c:9c:3c:
2e:ae:b5:97:d3:49:97:35:a9:f3:44:80:e6:06:44:
3c:cb:06:16:ff:b0:79:34:21:cc:4a:b0:6f:0e:a5:
41:47:ad:f4:67:c5:0c:92:7a:ba:b9:af:a7:59:ff:
2e:45:38:a0:cc:74:1c:5d:26:76:35:c7:ea:c1:89:
9c:36:f8:9e:34:a6:c1:c3:09:e7:2b:dc:77:f3:d7:
10:1d:3b:f5:60:b5:8c:13:54:2c:90:34:d7:4e:10:
05:53:b0:d2:da:7f:fe:77:83:06:a5:a2:d1:fa:63:
84:e5:dd:90:2d:f2:e5:95:34:21:54:54:9c:f4:ec:
ee:2a:60:c9:b2:5d:24:e5:83:ad:ac:a7:35:8d:07:
12:63:c2:c5:5a:f3:79:11:88:7b:8d:43:da:55:75:
a2:b1:42:6d:cb:d7:4b:db:39:0b:c8:72:e4:bf:b2:
1a:10:14:28:21:ef:07:48:ec:86:3e:18:01:7f:ee:
33:ba:56:b3:22:06:43:38:fc:e1:68:10:60:cd:fe:
0d:47:a5:f1:8e:c5:3e:3d:82:57:b0:52:cc:ff:c8:
03:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:8A:EF:84:CB:F3:F2:8B:43:42:4A:56:61:E7:BC:72:4A:61:C3:AB
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/k4rvhMvz8otDQkpWYee8ckphw6s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.226.106.0/24
185.228.74.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:1e:e7:dc:a7:93:dd:b6:42:ad:d2:ec:47:b5:5a:fc:1b:37:
e5:b0:64:9b:9e:ac:ec:7c:9c:05:3d:8d:62:9f:8c:f6:c5:d6:
54:56:ba:28:da:5e:30:8c:ee:f0:1c:fa:2f:40:b6:42:b5:ee:
de:2d:6d:58:d0:6f:0b:65:c8:07:27:63:cc:a1:c3:32:23:16:
ac:1a:8b:d2:df:5d:0a:ab:e2:09:e6:e0:56:b8:fc:80:6c:29:
e2:1c:8a:8a:05:c9:79:7d:87:9d:15:5f:0d:89:07:b3:35:a7:
93:b4:80:7e:49:91:21:73:40:e2:3e:c5:cd:65:70:cb:0c:a8:
02:b9:5c:47:be:56:ef:05:e2:35:88:21:54:84:a9:dc:af:d6:
13:24:7c:9a:f0:d2:d2:f8:71:5a:40:4b:7b:a6:20:0e:7c:06:
dd:92:dc:c8:ba:f2:fd:85:66:c2:89:3e:e5:1a:94:9d:76:d9:
ce:6f:2c:48:bb:79:6d:8d:06:f3:52:16:84:88:81:38:34:1d:
8a:95:3d:26:64:af:42:d8:dd:2f:ee:1d:8e:81:1e:3b:61:82:
ae:f6:f7:ab:df:17:86:fe:94:7a:68:20:a0:c6:10:91:1f:5b:
9a:8a:b0:b1:5e:63:d0:2e:e3:03:80:34:eb:d1:d6:6e:be:69:
05:94:60:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 09:29:55 2025 by rpki-client