Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/eb239a-33c8-4dbd-bc96-3259496e7c5f/1/vTC9p3PC9Sr-6CSUS1JMeqiU2sQ.roa
File: vTC9p3PC9Sr-6CSUS1JMeqiU2sQ.roa (raw, json)
Hash identifier: 0S6BlPD4HKWlcw9ojIgnqq/eNxxen8WpKyysWDOAX8Y=
Subject key identifier: BD:30:BD:A7:73:C2:F5:2A:FE:E8:24:94:4B:52:4C:7A:A8:94:DA:C4
Certificate issuer: /CN=624039399017fa093dc8d503799f6ca403f0bd05
Certificate serial: 04C0C6FE
Authority key identifier: 62:40:39:39:90:17:FA:09:3D:C8:D5:03:79:9F:6C:A4:03:F0:BD:05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YkA5OZAX-gk9yNUDeZ9spAPwvQU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/eb239a-33c8-4dbd-bc96-3259496e7c5f/1/vTC9p3PC9Sr-6CSUS1JMeqiU2sQ.roa
Signing time: Fri 18 Mar 2022 17:33:36 +0000
ROA not before: Fri 18 Mar 2022 17:33:36 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61317
IP address blocks: 85.209.228.0/24 maxlen: 24
85.209.230.0/24 maxlen: 24
45.95.212.0/22 maxlen: 24
2.59.60.0/24 maxlen: 24
194.31.195.0/24 maxlen: 24
194.31.194.0/23 maxlen: 23
194.31.196.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 79742718 (0x4c0c6fe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=624039399017fa093dc8d503799f6ca403f0bd05
Validity
Not Before: Mar 18 17:33:36 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=bd30bda773c2f52afee824944b524c7aa894dac4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:48:34:76:37:c7:e9:f5:63:ae:9b:41:53:81:
c7:62:9a:e9:39:36:34:7f:3b:bb:58:41:a2:87:a3:
42:d2:20:9c:5c:c9:25:b0:c9:67:7b:f4:41:b2:13:
16:28:96:08:a8:7e:4f:fd:8e:ff:ac:b8:a0:dd:b1:
d0:a8:6e:cf:f0:78:19:ed:fa:51:59:b3:6a:ac:8b:
69:06:de:d5:7f:a8:12:8d:5c:66:f0:81:02:9a:18:
ce:60:43:2a:10:29:19:27:52:6a:a4:5f:c4:1d:fb:
6d:66:61:84:b7:56:ac:34:82:89:6c:48:08:44:d2:
30:50:62:45:66:1a:1b:22:56:ac:ee:6e:a7:5b:c3:
8f:63:7a:9f:90:34:44:5e:84:70:ca:4d:a6:98:b4:
7e:57:6b:63:c7:be:a1:c4:ab:8c:98:02:56:d3:6e:
cd:2f:91:ac:d6:d5:f7:c9:b5:5d:33:a8:00:24:b0:
79:61:f6:ec:bf:90:f6:8f:c1:15:c0:03:cf:1f:9f:
4d:f1:51:b4:20:e6:15:34:65:fc:aa:7f:0e:77:25:
e3:76:fc:06:2e:15:db:5a:61:bb:39:82:3a:c2:5b:
49:96:56:ff:16:43:4f:2c:ec:97:df:08:a1:51:a2:
c7:1b:7a:51:48:e0:60:5f:8f:e3:db:47:0b:80:75:
a6:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:30:BD:A7:73:C2:F5:2A:FE:E8:24:94:4B:52:4C:7A:A8:94:DA:C4
X509v3 Authority Key Identifier:
keyid:62:40:39:39:90:17:FA:09:3D:C8:D5:03:79:9F:6C:A4:03:F0:BD:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YkA5OZAX-gk9yNUDeZ9spAPwvQU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/eb239a-33c8-4dbd-bc96-3259496e7c5f/1/vTC9p3PC9Sr-6CSUS1JMeqiU2sQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/eb239a-33c8-4dbd-bc96-3259496e7c5f/1/YkA5OZAX-gk9yNUDeZ9spAPwvQU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.59.60.0/24
45.95.212.0/22
85.209.228.0/24
85.209.230.0/24
194.31.194.0-194.31.197.255
Signature Algorithm: sha256WithRSAEncryption
7b:d9:b9:20:01:70:1a:04:98:05:66:b7:42:6a:c3:21:9d:92:
eb:73:a6:74:55:75:8a:ec:6e:45:ac:02:bb:aa:5c:67:d2:4f:
ec:66:44:6e:55:7d:0a:61:fc:e5:35:46:4d:14:51:d3:3d:33:
47:58:fe:7e:95:78:01:d6:72:f9:f8:60:6b:cd:6a:95:ac:34:
cc:d4:ca:8b:4e:94:62:10:85:53:56:0b:bd:be:5a:1c:8f:de:
68:b2:8f:96:1c:12:fc:dc:6b:99:60:cf:f3:16:68:54:7c:ff:
a3:a5:1e:9f:ca:62:c2:51:04:e7:e0:7d:7b:7d:da:80:67:32:
6c:69:a5:d7:ca:41:7d:02:69:03:fb:d5:46:1c:0b:4c:7e:5c:
65:d5:f1:c1:04:10:47:28:e9:96:7f:e3:42:89:20:4f:58:98:
70:41:7e:c3:6b:b8:80:66:60:0a:6c:3d:7e:23:4b:60:87:ec:
b4:04:06:22:64:d3:8e:42:fa:5c:44:6b:92:f9:23:bb:1b:a6:
be:1d:1d:c8:9b:32:99:5e:95:21:3f:d8:b3:cb:f8:0d:3b:eb:
89:3d:5e:e5:73:d3:a9:a1:c0:d4:10:b5:74:32:55:c1:01:a6:
9f:d2:f5:28:b3:0a:e5:50:09:97:a3:72:e6:b5:73:d6:92:11:
62:d0:6f:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:35:44 2025 by rpki-client