Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/sHJGmB30MY9UJidXCF3l4ebGDYg.roa
File: sHJGmB30MY9UJidXCF3l4ebGDYg.roa (raw, json)
Hash identifier: BLY4GfJRaZhxPRLsRcvMHppTv3wDtocraCbce7/lIv8=
Subject key identifier: B0:72:46:98:1D:F4:31:8F:54:26:27:57:08:5D:E5:E1:E6:C6:0D:88
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 019422204D86C254145A112B716ED97CF401
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/sHJGmB30MY9UJidXCF3l4ebGDYg.roa
Signing time: Wed 01 Jan 2025 13:48:49 +0000
ROA not before: Wed 01 Jan 2025 13:48:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212384
IP address blocks: 45.147.225.0/24 maxlen: 24
185.108.207.0/24 maxlen: 24
185.232.207.0/24 maxlen: 24
194.5.66.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:20:4d:86:c2:54:14:5a:11:2b:71:6e:d9:7c:f4:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Jan 1 13:48:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b07246981df4318f54262757085de5e1e6c60d88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:85:87:8c:aa:d0:3f:4d:51:2f:91:93:e0:63:
60:de:f0:2e:9b:d1:2a:f9:0e:ee:7d:df:d6:9d:df:
83:ab:42:45:78:e4:80:17:70:a1:31:8f:fa:3b:96:
1e:38:97:ce:ab:bd:56:8b:f3:d8:0c:96:d5:6a:fb:
cd:9a:56:98:de:73:be:3f:2f:5c:90:a8:93:be:d9:
ed:30:cd:b1:5a:2f:5c:97:25:f6:7d:9f:3e:fd:d2:
45:f8:fe:65:ca:be:0c:18:74:56:1f:cd:70:50:00:
68:7a:a6:5e:60:17:46:f8:14:19:b8:62:bb:f4:9d:
4d:3f:aa:1e:9f:83:56:bd:c1:df:4e:84:82:5a:94:
73:39:52:74:fe:33:e5:22:68:2f:a0:93:8d:f7:6c:
c5:ea:73:67:3e:80:44:2d:c7:52:df:d6:9b:f3:87:
c6:09:49:0b:61:8b:29:12:b8:fd:3f:39:60:1e:de:
69:1d:82:9c:85:88:93:3e:6a:c5:cf:53:8f:cf:44:
1a:ea:5c:3d:af:b4:f0:38:f2:bc:01:0d:ed:11:38:
d1:d7:60:f0:b9:85:4b:99:60:80:90:63:45:6b:93:
a0:f7:bf:64:b5:57:09:c9:ef:4b:12:45:57:da:c4:
dc:3d:20:ee:bf:78:87:f0:63:49:ba:ee:e8:c5:76:
fa:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:72:46:98:1D:F4:31:8F:54:26:27:57:08:5D:E5:E1:E6:C6:0D:88
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/sHJGmB30MY9UJidXCF3l4ebGDYg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.147.225.0/24
185.108.207.0/24
185.232.207.0/24
194.5.66.0/24
Signature Algorithm: sha256WithRSAEncryption
63:70:72:46:b4:90:02:d5:7a:56:8a:cf:43:1e:e0:0f:9d:43:
52:72:51:b3:79:8a:d6:c6:e8:01:da:e7:2a:b1:9d:fa:94:79:
b9:85:a2:0d:8d:44:64:5f:5c:c9:fc:e2:98:de:0b:0c:9f:e2:
b2:6f:10:7c:64:db:84:f3:1e:47:ff:37:67:b9:b3:6f:7d:0d:
b5:0d:f5:bc:d4:41:90:59:e1:c0:14:e6:b9:d1:9a:0d:8a:b3:
89:56:dd:bf:ad:e9:d5:0e:56:30:aa:02:cd:f1:fc:1c:f6:51:
1b:7b:22:f2:08:19:b2:a9:79:35:0d:86:43:ba:fe:7b:df:78:
8e:a3:2b:df:60:e0:78:7b:5f:6b:ca:3c:65:7e:e1:f4:f1:8f:
be:a2:a2:3a:f1:55:18:77:ef:91:3a:f8:8d:b3:d5:40:df:2e:
35:55:6f:6b:bb:28:98:ca:29:d8:81:0e:c1:ba:65:2d:af:b7:
90:16:08:30:81:ba:7a:e5:56:d9:be:2f:30:de:46:28:6a:b2:
6c:a4:15:1e:4c:7e:43:70:f9:49:d6:fc:db:46:7d:80:04:40:
bd:3a:d8:e6:fb:b6:54:5a:38:24:f0:9d:42:87:b8:7c:fd:29:
5d:51:87:c6:db:77:02:c9:cb:4b:ad:be:39:10:b2:9b:44:ad:
c9:4a:a7:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:15:28 2025 by rpki-client