Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/b9LZtPjPcGkqch-QIMPmNiY1GfY.roa
File: b9LZtPjPcGkqch-QIMPmNiY1GfY.roa (raw, json)
Hash identifier: wVwwQPvK556ifQMFCqlsaWU8LCMEwKfjuZYfw4kZ7Ug=
Subject key identifier: 6F:D2:D9:B4:F8:CF:70:69:2A:72:1F:90:20:C3:E6:36:26:35:19:F6
Certificate issuer: /CN=2455d7fee4a499ecaf11d2d3da8e389de323412f
Certificate serial: 0194258F5F6D6097289DAAFCA144C623E6CE
Authority key identifier: 24:55:D7:FE:E4:A4:99:EC:AF:11:D2:D3:DA:8E:38:9D:E3:23:41:2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JFXX_uSkmeyvEdLT2o44neMjQS8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/b9LZtPjPcGkqch-QIMPmNiY1GfY.roa
Signing time: Thu 02 Jan 2025 05:49:00 +0000
ROA not before: Thu 02 Jan 2025 05:49:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 41956
IP address blocks: 185.6.148.0/24 maxlen: 24
185.6.149.0/24 maxlen: 24
185.6.150.0/24 maxlen: 24
185.6.151.0/24 maxlen: 24
212.30.40.0/24 maxlen: 24
212.30.52.0/24 maxlen: 24
212.30.53.0/24 maxlen: 24
212.30.54.0/24 maxlen: 24
212.30.55.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:5f:6d:60:97:28:9d:aa:fc:a1:44:c6:23:e6:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2455d7fee4a499ecaf11d2d3da8e389de323412f
Validity
Not Before: Jan 2 05:49:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6fd2d9b4f8cf70692a721f9020c3e636263519f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:87:5f:c9:d2:43:19:99:0c:4d:e0:4c:5f:86:
f5:a8:a2:ca:41:cd:41:3c:50:82:7d:ea:78:0c:13:
ef:68:87:16:58:fa:10:fd:50:81:f7:9b:c4:9b:a1:
6d:4f:42:34:cb:ff:d5:f0:d6:37:dd:f3:60:ed:38:
ea:6a:79:09:af:d4:22:8d:56:e0:43:95:ef:9c:d3:
5a:df:e3:1a:4d:0f:61:dd:12:d1:40:69:84:84:72:
ad:5d:dc:d6:d4:ac:cb:9c:e9:80:b1:40:08:59:34:
aa:e9:ab:a1:6b:62:d8:0a:ef:63:6c:4c:30:77:06:
1b:dc:c8:ed:4d:bf:e5:e1:a6:16:14:1a:af:96:03:
1f:ed:2d:6f:2b:44:c7:d8:b0:e8:1b:23:f0:57:3e:
cd:eb:c9:66:ba:d1:80:f3:9e:ce:43:a2:ac:e3:bb:
08:f9:fc:50:10:26:b0:ac:01:c4:0b:59:40:8c:1f:
7c:4a:41:97:42:6f:25:28:a8:27:2d:4b:0a:82:5d:
b2:69:bd:36:02:10:56:c3:16:65:3e:6d:d8:3e:b9:
f6:b5:ea:6b:a5:58:a7:c9:7a:bd:a0:cb:3a:40:61:
87:e6:cb:2a:4c:bc:3b:bc:66:61:e4:9c:61:50:c8:
33:21:9d:dd:75:41:8b:0f:f7:00:4a:fd:41:64:0d:
c9:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:D2:D9:B4:F8:CF:70:69:2A:72:1F:90:20:C3:E6:36:26:35:19:F6
X509v3 Authority Key Identifier:
keyid:24:55:D7:FE:E4:A4:99:EC:AF:11:D2:D3:DA:8E:38:9D:E3:23:41:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JFXX_uSkmeyvEdLT2o44neMjQS8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/b9LZtPjPcGkqch-QIMPmNiY1GfY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/JFXX_uSkmeyvEdLT2o44neMjQS8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.6.148.0/22
212.30.40.0/24
212.30.52.0/22
Signature Algorithm: sha256WithRSAEncryption
99:1c:c6:c2:f6:a9:7d:50:e0:2c:33:c4:24:0e:63:d0:6a:63:
6e:15:35:36:b5:f9:a5:f0:cf:ac:dc:d8:47:af:bb:0f:93:c7:
fb:80:ce:92:69:49:fe:ed:40:ef:65:6f:93:b6:e0:5b:9e:c8:
9b:3d:c1:25:0f:5f:d4:f1:e7:3c:22:e2:27:5a:71:94:89:41:
3f:ff:2c:d1:26:5c:4d:1e:58:32:61:ec:f0:8c:d8:48:07:a7:
e3:22:03:bf:51:34:af:9d:00:ca:ed:3d:05:fb:ac:31:7b:fb:
4b:f7:e0:ae:b2:fb:23:a7:8e:04:94:b7:35:3b:f2:2a:d9:b1:
10:d5:09:3a:eb:22:b1:42:53:34:2b:d2:75:cf:d7:57:26:e4:
2d:e3:f2:97:11:39:92:93:bb:76:9d:25:6d:0d:f2:db:17:2c:
bc:50:90:fd:b7:02:1f:91:46:d9:07:0c:66:c7:e8:be:d0:87:
06:9f:57:26:1c:62:86:e9:69:a2:26:10:6a:33:ce:b9:cc:15:
6b:c5:55:2d:84:61:48:85:63:93:c6:a4:48:db:31:ae:f6:2d:
88:21:0a:83:be:3c:b6:96:13:d0:78:1b:ad:5b:89:31:b7:18:
2b:e3:29:97:8f:51:27:9d:dc:e8:a4:a9:f4:d2:02:d2:91:0d:
05:2d:c8:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 15:50:00 2025 by rpki-client