Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/pyM8h6_NqDLh2ROV47AlL0XjwtE.roa
File: pyM8h6_NqDLh2ROV47AlL0XjwtE.roa (raw, json)
Hash identifier: pRPq1FOpg5vWxys9ZSkrUDmybz+Ds51b+4s0XuvJ3+4=
Subject key identifier: A7:23:3C:87:AF:CD:A8:32:E1:D9:13:95:E3:B0:25:2F:45:E3:C2:D1
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 0194222050854C2A816C9A73FD3D32DC3A92
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/pyM8h6_NqDLh2ROV47AlL0XjwtE.roa
Signing time: Wed 01 Jan 2025 13:48:50 +0000
ROA not before: Wed 01 Jan 2025 13:48:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212862
IP address blocks: 185.196.40.0/24 maxlen: 24
185.196.41.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:20:50:85:4c:2a:81:6c:9a:73:fd:3d:32:dc:3a:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Jan 1 13:48:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a7233c87afcda832e1d91395e3b0252f45e3c2d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:90:c3:45:7e:19:0c:e7:53:3d:ed:59:84:ea:
b8:36:70:fd:79:85:cc:d1:d7:42:79:b5:cb:78:ef:
9d:6c:c5:3f:0d:8d:1e:dc:f4:1a:c2:8f:98:2d:15:
b9:1e:d7:1d:92:9d:0f:14:73:42:6a:da:80:8b:17:
33:bb:96:8c:71:8c:cd:e4:66:c4:db:6c:0c:33:0c:
30:04:e7:86:e0:25:b6:71:d5:e0:13:45:1e:81:68:
7a:42:a1:b8:f9:2c:f9:54:bc:03:a8:dd:c1:c4:4b:
23:f5:89:aa:d5:9d:13:2b:b8:a1:f1:b6:9d:70:51:
fc:8c:cf:28:5f:c4:af:92:0f:13:1e:6a:fb:c9:2f:
b7:ba:35:5d:33:43:cb:ae:2e:f2:00:b5:40:eb:d1:
af:e3:5b:85:fd:76:9f:d7:4a:1e:63:26:58:d7:5f:
62:25:db:3c:aa:af:fe:67:fa:09:8b:1d:a5:3d:90:
d8:39:ef:59:14:e2:4f:e0:87:dd:72:2b:02:a4:ff:
ce:98:fc:5d:5e:d3:b6:57:c7:48:1a:d4:55:47:fd:
6b:92:9d:b1:b3:0d:63:1e:2a:d8:51:a4:ef:2a:4d:
d3:e2:22:2e:a3:42:96:71:57:f8:c6:08:48:e3:0f:
22:de:04:bc:73:30:eb:bc:e4:13:8e:29:66:93:69:
0d:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:23:3C:87:AF:CD:A8:32:E1:D9:13:95:E3:B0:25:2F:45:E3:C2:D1
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/pyM8h6_NqDLh2ROV47AlL0XjwtE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.196.40.0/23
Signature Algorithm: sha256WithRSAEncryption
ab:67:a5:b0:7c:10:21:6b:7a:6d:e5:33:22:7b:36:80:50:a7:
f6:18:83:8a:b3:cf:2c:ad:f7:82:8f:f3:a0:71:96:3e:4b:91:
6a:9d:f4:e0:52:ad:8f:32:68:b4:7f:3f:7c:40:71:a7:28:eb:
66:b6:1c:c1:1a:8f:7e:f9:04:71:fe:bd:15:2e:f7:3b:b4:5e:
92:aa:2b:62:52:0b:da:38:f2:47:6f:13:01:e0:33:96:5a:32:
16:76:d5:71:cc:d2:90:53:17:f4:85:98:8f:0f:96:c8:d6:d7:
75:92:55:d8:32:55:76:2e:05:e3:d7:8a:38:e5:8e:3a:91:31:
61:28:a6:89:62:ae:bf:89:d3:6b:49:3b:9e:8f:92:f6:20:0e:
7d:b5:cb:60:b7:5e:93:4b:bd:4a:5c:67:48:16:aa:50:37:90:
dc:ef:91:44:b7:7a:40:aa:cb:93:cb:22:04:0e:b2:2c:9e:bf:
44:b4:f8:a8:57:75:3f:4a:65:d4:38:7b:85:3d:57:74:92:d1:
bf:36:c0:b0:73:99:21:4e:b6:07:92:6c:ef:5f:98:49:4d:11:
83:61:02:3f:21:cd:c7:a8:d0:25:d9:7c:f6:92:49:d3:9f:69:
6a:b0:9c:8a:84:37:da:d9:9a:e2:fc:b0:de:fd:2d:9e:ed:33:
fb:5a:ac:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 09:28:25 2025 by rpki-client