Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/l9xnKLotbhySSJ7knmigmr_ehUk.roa
File: l9xnKLotbhySSJ7knmigmr_ehUk.roa (raw, json)
Hash identifier: bB6SEAIy3A+pb6BYFharXZTYSNw34eJigw30ydblrFw=
Subject key identifier: 97:DC:67:28:BA:2D:6E:1C:92:48:9E:E4:9E:68:A0:9A:BF:DE:85:49
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 019589DC4933CF5F0BF0519E8016A4266AFE
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/l9xnKLotbhySSJ7knmigmr_ehUk.roa
Signing time: Wed 12 Mar 2025 10:17:50 +0000
ROA not before: Wed 12 Mar 2025 10:17:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 137517
IP address blocks: 185.225.1.0/24 maxlen: 24
194.124.69.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:89:dc:49:33:cf:5f:0b:f0:51:9e:80:16:a4:26:6a:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Mar 12 10:17:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=97dc6728ba2d6e1c92489ee49e68a09abfde8549
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:69:18:c2:d8:d0:04:30:37:b1:70:fd:50:eb:
15:80:f6:5c:c5:b5:96:39:85:aa:a6:57:6d:e7:72:
17:d7:69:a4:8f:e7:ca:3f:cc:f3:1d:ac:5d:a3:d8:
89:e4:46:6a:5d:85:a4:ed:a5:40:27:84:d7:91:dc:
28:07:2e:81:33:b9:ad:23:6c:cc:c8:2b:47:25:b9:
b1:17:20:06:44:e8:33:f1:92:e8:fc:2b:24:97:ba:
31:d2:b5:a0:1b:d1:2c:08:88:1a:9b:20:f8:90:9e:
41:5b:07:9c:1f:71:ea:a5:4c:4b:5c:48:05:af:67:
0b:61:a4:57:4c:5e:4e:16:1c:91:38:97:6f:4e:96:
d8:59:65:63:a5:3e:f9:3d:ff:4d:ec:63:aa:66:40:
f0:ef:9c:c4:95:24:7d:7a:62:8c:ce:dd:76:6a:b0:
b7:d2:29:32:4e:5d:8e:50:f6:0c:41:d0:b1:ca:35:
0a:d2:04:46:a8:02:1c:ee:d9:2c:73:b5:60:5c:fa:
69:9d:6c:b7:59:5c:5f:10:30:d4:91:0c:4a:3a:65:
3d:21:65:43:98:2c:35:e8:02:3f:25:04:c7:ed:22:
f3:79:68:1d:73:8f:11:9c:1c:93:95:57:ba:87:64:
98:a2:b5:49:c0:8b:8d:cd:32:47:a2:71:6e:5c:24:
22:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:DC:67:28:BA:2D:6E:1C:92:48:9E:E4:9E:68:A0:9A:BF:DE:85:49
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/l9xnKLotbhySSJ7knmigmr_ehUk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.225.1.0/24
194.124.69.0/24
Signature Algorithm: sha256WithRSAEncryption
48:73:69:33:49:e4:23:a8:3d:43:93:56:d5:24:82:b2:fe:45:
00:6d:26:92:26:2e:f3:0b:a6:43:8e:41:2e:b0:e7:b5:0b:d5:
ce:13:39:86:47:f0:f8:fe:07:20:3e:9f:85:f6:08:6d:74:48:
48:39:47:80:93:83:75:e8:2c:c7:10:4a:ec:61:00:6f:a5:49:
57:f6:64:8b:5d:a1:40:43:66:56:61:fe:01:08:b5:de:c8:e3:
1e:95:f4:c2:fb:a6:42:7b:d8:91:0e:9c:d8:70:64:39:42:7a:
01:48:68:af:fb:b2:3f:99:d5:d4:3d:8f:63:4a:b7:67:96:9f:
4d:b0:28:a2:21:c1:91:a6:00:fd:5d:d9:d4:d2:f4:28:ff:c6:
d9:61:9f:0e:f9:49:20:4d:b3:34:ba:09:ab:8b:5d:d2:d9:b7:
0f:3f:32:55:78:40:3b:be:94:a3:24:b8:c9:5b:c7:3b:25:a8:
07:26:cd:85:0f:7c:05:b1:a9:03:2b:85:17:ab:d2:20:e8:e3:
65:8f:34:07:e5:e8:01:4c:28:5f:b5:d7:fb:a3:9a:38:63:4a:
8a:5f:15:d2:d9:33:5d:90:32:cb:3a:d2:ce:de:cd:75:0c:eb:
ba:02:98:b1:7d:12:74:24:3e:1f:e7:bb:b1:75:b6:fe:e5:eb:
b5:f2:c7:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 20:54:37 2025 by rpki-client