Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/220318-46f1-4ebf-a795-dd4a217d606b/1/YWaaNJeo7smBlwI_T0SxJ5KX4-g.roa
File: YWaaNJeo7smBlwI_T0SxJ5KX4-g.roa (raw, json)
Hash identifier: QZs858olOtlmGTBOleulDcnrJGCjiCkhUKDy6SCkdvE=
Subject key identifier: 61:66:9A:34:97:A8:EE:C9:81:97:02:3F:4F:44:B1:27:92:97:E3:E8
Certificate issuer: /CN=bb8d64a0dc21996b1c99e68cc951694e293edefe
Certificate serial: 019424B3E0E2523EECDD2172DBD11724EDA1
Authority key identifier: BB:8D:64:A0:DC:21:99:6B:1C:99:E6:8C:C9:51:69:4E:29:3E:DE:FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u41koNwhmWscmeaMyVFpTik-3v4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/220318-46f1-4ebf-a795-dd4a217d606b/1/YWaaNJeo7smBlwI_T0SxJ5KX4-g.roa
Signing time: Thu 02 Jan 2025 01:49:15 +0000
ROA not before: Thu 02 Jan 2025 01:49:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 7155
IP address blocks: 185.71.116.0/24 maxlen: 24
185.71.117.0/24 maxlen: 24
185.71.118.0/24 maxlen: 24
185.71.119.0/24 maxlen: 24
212.50.35.0/24 maxlen: 24
212.50.42.0/24 maxlen: 24
212.50.43.0/24 maxlen: 24
212.50.45.0/24 maxlen: 24
212.50.46.0/24 maxlen: 24
212.50.47.0/24 maxlen: 24
212.50.48.0/24 maxlen: 24
212.50.49.0/24 maxlen: 24
212.50.50.0/24 maxlen: 24
212.50.51.0/24 maxlen: 24
212.50.52.0/24 maxlen: 24
212.50.53.0/24 maxlen: 24
212.50.56.0/24 maxlen: 24
212.50.57.0/24 maxlen: 24
212.50.58.0/24 maxlen: 24
212.50.59.0/24 maxlen: 24
212.50.60.0/24 maxlen: 24
212.50.62.0/24 maxlen: 24
212.50.63.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:e0:e2:52:3e:ec:dd:21:72:db:d1:17:24:ed:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb8d64a0dc21996b1c99e68cc951694e293edefe
Validity
Not Before: Jan 2 01:49:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=61669a3497a8eec98197023f4f44b1279297e3e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:9f:e7:c3:84:dd:f5:8c:42:90:a1:1d:20:7d:
2d:dc:54:64:2b:d1:a2:bc:c4:28:9c:71:84:3d:fc:
83:f3:f0:01:d1:e1:62:90:be:62:b4:65:b5:90:37:
ae:ea:21:1a:69:63:50:32:7a:60:0c:34:bc:ef:a1:
cd:82:5b:c6:cb:c2:c7:d3:60:12:0b:0d:30:d6:65:
da:73:94:90:98:30:25:d5:cd:77:d9:b6:e3:05:e2:
db:ea:ee:50:02:ad:f2:bc:e9:32:dc:2a:9d:30:4f:
69:1a:6e:e7:c0:89:c1:47:43:ea:6e:f3:96:7c:11:
6a:6c:99:1c:ef:67:72:ab:14:1d:ff:a6:78:f8:12:
60:ff:39:63:65:03:0f:65:a8:21:ba:5d:6e:c7:c5:
71:18:c1:50:bc:53:9f:c9:3f:41:9c:a8:30:84:e6:
b0:8d:92:68:96:75:36:bc:c2:b5:59:dc:77:1c:37:
9f:95:69:98:b4:58:e0:2e:aa:67:b9:2d:35:0f:3b:
ea:db:66:67:46:5f:db:d8:a5:cf:ac:3b:f6:97:87:
ab:e7:98:b5:e1:8c:d6:26:5a:09:82:54:8d:31:3e:
b7:cb:88:8f:e5:fc:b0:f6:63:4b:7b:2a:c9:11:89:
a4:b6:0f:e8:3a:be:01:be:3c:3b:1f:a5:4a:92:8f:
ab:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:66:9A:34:97:A8:EE:C9:81:97:02:3F:4F:44:B1:27:92:97:E3:E8
X509v3 Authority Key Identifier:
keyid:BB:8D:64:A0:DC:21:99:6B:1C:99:E6:8C:C9:51:69:4E:29:3E:DE:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u41koNwhmWscmeaMyVFpTik-3v4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/220318-46f1-4ebf-a795-dd4a217d606b/1/YWaaNJeo7smBlwI_T0SxJ5KX4-g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/220318-46f1-4ebf-a795-dd4a217d606b/1/u41koNwhmWscmeaMyVFpTik-3v4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.71.116.0/22
212.50.35.0/24
212.50.42.0/23
212.50.45.0-212.50.53.255
212.50.56.0-212.50.60.255
212.50.62.0/23
Signature Algorithm: sha256WithRSAEncryption
1d:78:5f:72:90:d6:b5:e8:50:52:34:a7:39:e0:be:e1:8f:eb:
cb:04:a3:d9:6d:8a:c6:c7:05:bf:62:c2:35:52:79:81:59:1b:
96:9a:5e:7e:e6:61:23:13:48:77:a4:c3:30:34:dd:5e:35:e0:
6e:90:90:c2:35:c0:15:7a:c8:4e:b2:82:bc:ce:43:05:bb:c4:
0f:b8:56:53:2f:cf:65:d6:7b:92:03:7e:0b:36:30:3b:7e:77:
eb:d5:30:5b:50:68:25:97:49:31:4b:fb:28:64:db:d2:84:74:
73:fa:41:33:b1:8c:e3:8b:5b:85:d3:7c:be:14:e5:c8:88:92:
8e:82:ac:39:fe:87:0c:0b:b9:03:55:ae:64:b5:79:f9:8e:41:
3e:c8:1a:1c:3b:1a:76:63:13:37:d4:53:86:a4:34:fd:3c:e9:
84:79:e6:6d:97:e2:e5:d5:4d:3e:5f:61:5c:c9:34:6d:fd:66:
aa:cf:26:ce:05:7a:e6:9f:00:a6:ef:f8:8b:aa:17:51:f9:71:
bd:77:ab:30:24:29:ad:ce:e0:92:1f:53:b5:a2:e7:7e:07:d5:
69:aa:64:94:83:8e:4c:1a:90:7b:2f:7e:08:96:89:13:9f:81:
64:20:eb:7f:b3:69:6a:d1:b4:81:0a:d1:b0:92:46:85:5e:8e:
f2:ec:08:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 05:04:44 2025 by rpki-client