Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/YrhD-rdp96hl5g6dR6nlMDlZDiA.roa
File: YrhD-rdp96hl5g6dR6nlMDlZDiA.roa (raw, json)
Hash identifier: MhYx3RMQ0HgbpUBivjrNaAY3momEGFnGVlGKUpLZXCk=
Subject key identifier: 62:B8:43:FA:B7:69:F7:A8:65:E6:0E:9D:47:A9:E5:30:39:59:0E:20
Certificate issuer: /CN=7508475ff0d8ec960336016e0e04221a98e5ecf2
Certificate serial: 019427B56691AB8D6F40400372D38A2E84F4
Authority key identifier: 75:08:47:5F:F0:D8:EC:96:03:36:01:6E:0E:04:22:1A:98:E5:EC:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/YrhD-rdp96hl5g6dR6nlMDlZDiA.roa
Signing time: Thu 02 Jan 2025 15:49:47 +0000
ROA not before: Thu 02 Jan 2025 15:49:47 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 61400
IP address blocks: 185.39.205.0/24 maxlen: 24
2a09:6281::/32 maxlen: 32
2a09:6282::/32 maxlen: 32
2a09:6283::/32 maxlen: 32
2a09:6287::/32 maxlen: 32
2a09:e2c0::/32 maxlen: 32
2a09:e2c1::/32 maxlen: 32
2a09:e2c2::/32 maxlen: 32
2a09:e2c3::/32 maxlen: 32
2a09:e2c4::/32 maxlen: 32
2a09:e2c5::/32 maxlen: 32
2a09:e2c6::/32 maxlen: 32
2a09:e2c7::/32 maxlen: 32
2a10:4102::/32 maxlen: 32
2a10:4106::/32 maxlen: 32
2a11:4b45::/32 maxlen: 32
2a12:c300::/30 maxlen: 30
2a12:c300::/32 maxlen: 32
2a12:c301::/32 maxlen: 32
2a12:c302::/32 maxlen: 32
2a12:c303::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:66:91:ab:8d:6f:40:40:03:72:d3:8a:2e:84:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7508475ff0d8ec960336016e0e04221a98e5ecf2
Validity
Not Before: Jan 2 15:49:47 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=62b843fab769f7a865e60e9d47a9e53039590e20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:1e:1f:82:23:1e:1e:f0:9b:0d:47:f0:36:2a:
d2:39:a8:1e:b3:d9:da:70:c2:19:bf:d6:c7:cc:dc:
9d:b1:dd:9e:e6:50:92:3b:74:df:a6:fa:d1:c2:b9:
1c:53:bf:6c:81:9d:92:82:ae:4a:15:61:10:bb:79:
7d:41:c9:e1:21:bd:b9:14:af:20:ae:18:65:8b:86:
c2:7d:56:ee:b0:d4:7e:62:21:b1:72:3f:e2:82:ea:
95:d5:5a:c3:10:a1:5b:90:50:54:5d:8e:ee:fb:69:
04:cc:a7:a9:d0:0e:ec:b0:18:04:51:56:06:5d:ab:
c8:23:f6:49:84:04:4b:c1:6e:d9:1c:71:99:33:3f:
1f:55:22:ea:15:51:63:e0:d9:91:ed:bd:c6:b6:d9:
42:4e:59:c5:fa:ff:e7:48:44:1d:fb:3e:62:be:6f:
7c:dd:3c:3c:bb:20:b1:b6:c4:45:b0:ec:b3:b9:87:
ea:3d:29:3a:48:66:5b:85:96:71:d1:87:73:4a:10:
a0:5d:c0:59:31:b7:14:54:d4:c7:2d:bd:29:2b:ba:
f1:d7:af:dd:d1:37:75:3c:4d:d3:9a:ec:ec:66:e7:
61:65:31:1a:99:d1:a4:2f:fd:54:e8:06:4d:c3:90:
36:56:f5:2b:32:82:f3:76:39:08:f5:b5:53:fb:ba:
16:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:B8:43:FA:B7:69:F7:A8:65:E6:0E:9D:47:A9:E5:30:39:59:0E:20
X509v3 Authority Key Identifier:
keyid:75:08:47:5F:F0:D8:EC:96:03:36:01:6E:0E:04:22:1A:98:E5:EC:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/YrhD-rdp96hl5g6dR6nlMDlZDiA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/dQhHX_DY7JYDNgFuDgQiGpjl7PI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.39.205.0/24
IPv6:
2a09:6281::-2a09:6283:ffff:ffff:ffff:ffff:ffff:ffff
2a09:6287::/32
2a09:e2c0::/29
2a10:4102::/32
2a10:4106::/32
2a11:4b45::/32
2a12:c300::/30
Signature Algorithm: sha256WithRSAEncryption
03:98:df:4f:7d:40:32:ed:48:66:aa:e3:02:7f:49:d5:fb:59:
80:20:8b:a0:16:52:d7:e8:fb:c5:af:91:00:64:58:f5:88:25:
bf:0e:e9:49:2e:b7:ab:05:6b:b2:e8:82:73:68:5a:79:d7:dc:
00:72:d3:f0:60:4b:a2:e5:f8:ea:02:81:c0:38:23:30:f3:74:
b0:40:ed:87:64:bb:00:93:aa:cd:f7:ef:be:67:bf:2e:03:a9:
e9:88:fa:2c:1d:96:14:6a:c0:e3:f1:7d:cb:90:2b:0d:e4:06:
c7:09:ba:02:7b:2c:2e:c8:d2:d2:0a:b1:cc:92:7e:31:fa:c5:
ff:f6:6e:3c:a3:51:25:86:d3:d5:0c:69:a6:88:6c:c8:71:59:
5d:6e:89:d6:81:11:95:85:fb:5d:91:d1:c1:00:0a:e7:66:7a:
09:0a:5f:1a:ca:01:13:54:19:e3:d5:2b:69:e9:97:a7:44:50:
2f:b9:16:c1:c2:b7:6b:1c:d9:0e:c0:8b:af:82:24:4d:2c:f4:
ba:5f:61:33:c7:62:01:e0:40:97:e0:0b:ea:3a:ee:0e:d4:b5:
4c:43:23:20:8b:a3:49:e2:21:b5:e1:e3:25:59:d3:07:13:ea:
d8:31:a2:78:b3:1d:b6:a1:20:ab:17:06:20:b8:36:3a:fc:cf:
26:e4:39:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 19:10:31 2025 by rpki-client