Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/6703ca-ced4-4207-ab05-4a6f55771bd1/1/YAxMGVlnNVMBFh-Gqpd9ShmUpMs.roa
File: YAxMGVlnNVMBFh-Gqpd9ShmUpMs.roa (raw, json)
Hash identifier: inn0TlW8MH3WwBY3JfZOQs90fUrqGnIJpl+K9OSU93o=
Subject key identifier: 60:0C:4C:19:59:67:35:53:01:16:1F:86:AA:97:7D:4A:19:94:A4:CB
Certificate issuer: /CN=bab453d97ba2f4a045843e6b4a953b3e5106eaf2
Certificate serial: 019428253E6FFFFCDE4CD46380B6A1A7EE1E
Authority key identifier: BA:B4:53:D9:7B:A2:F4:A0:45:84:3E:6B:4A:95:3B:3E:51:06:EA:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/urRT2Xui9KBFhD5rSpU7PlEG6vI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/6703ca-ced4-4207-ab05-4a6f55771bd1/1/YAxMGVlnNVMBFh-Gqpd9ShmUpMs.roa
Signing time: Thu 02 Jan 2025 17:51:56 +0000
ROA not before: Thu 02 Jan 2025 17:51:56 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 29385
IP address blocks: 94.230.224.0/24 maxlen: 24
94.230.227.0/24 maxlen: 24
213.206.32.0/24 maxlen: 24
213.206.33.0/24 maxlen: 24
213.206.34.0/24 maxlen: 24
213.206.35.0/24 maxlen: 24
213.206.36.0/24 maxlen: 24
213.206.37.0/24 maxlen: 24
213.206.38.0/24 maxlen: 24
213.206.41.0/24 maxlen: 24
213.206.43.0/24 maxlen: 24
213.206.46.0/24 maxlen: 24
213.206.49.0/24 maxlen: 24
213.206.56.0/24 maxlen: 24
213.206.57.0/24 maxlen: 24
213.206.59.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:25:3e:6f:ff:fc:de:4c:d4:63:80:b6:a1:a7:ee:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bab453d97ba2f4a045843e6b4a953b3e5106eaf2
Validity
Not Before: Jan 2 17:51:56 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=600c4c195967355301161f86aa977d4a1994a4cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:1c:45:ae:cd:5f:b3:64:39:59:91:ac:79:67:
41:7f:1e:14:d6:2e:04:7d:6d:d7:21:42:be:69:a4:
4c:47:06:28:b6:6c:54:86:70:d4:98:2d:a0:7a:ca:
7a:08:c2:11:a7:74:2c:1b:5b:b1:6e:c7:34:a6:f6:
03:11:6a:d2:c9:df:07:d9:36:2c:2d:d8:6b:68:c4:
4a:d5:ff:a9:31:d7:8f:b8:ad:6a:6a:05:80:24:e0:
4e:84:84:50:d0:be:02:0e:6c:c5:f6:c3:9a:dd:82:
ea:b0:c4:3d:8c:72:fb:0a:dd:af:cc:b6:19:13:48:
26:77:3a:3d:2c:15:53:d0:0f:60:25:b5:22:18:ec:
a6:67:f6:ff:4e:0b:0a:8a:70:15:39:dc:67:e8:64:
ae:22:c2:00:89:bf:5a:69:b7:61:7f:f2:4a:8b:86:
8a:8b:ef:67:c1:1e:74:b7:69:42:ac:8d:d4:b4:14:
d4:ab:56:9d:da:c8:a6:72:c3:b7:39:f5:78:8c:0a:
38:41:67:ff:b6:c6:9d:e3:07:a0:e6:30:b2:f0:cc:
bf:ef:5c:2b:19:f3:93:bd:9b:0d:3a:cf:cc:de:5c:
56:ea:bf:6e:c7:76:f7:dd:0e:49:7f:81:b7:4b:53:
cb:5e:ea:87:0c:5c:3e:8e:e6:c3:7b:cc:4c:9a:2e:
06:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:0C:4C:19:59:67:35:53:01:16:1F:86:AA:97:7D:4A:19:94:A4:CB
X509v3 Authority Key Identifier:
keyid:BA:B4:53:D9:7B:A2:F4:A0:45:84:3E:6B:4A:95:3B:3E:51:06:EA:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/urRT2Xui9KBFhD5rSpU7PlEG6vI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/6703ca-ced4-4207-ab05-4a6f55771bd1/1/YAxMGVlnNVMBFh-Gqpd9ShmUpMs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/6703ca-ced4-4207-ab05-4a6f55771bd1/1/urRT2Xui9KBFhD5rSpU7PlEG6vI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.230.224.0/24
94.230.227.0/24
213.206.32.0-213.206.38.255
213.206.41.0/24
213.206.43.0/24
213.206.46.0/24
213.206.49.0/24
213.206.56.0/23
213.206.59.0/24
Signature Algorithm: sha256WithRSAEncryption
96:05:cb:85:6f:62:8b:72:6e:a1:e8:e2:89:0b:d4:52:b5:d6:
c6:db:96:fa:4b:0e:85:14:0f:9f:41:2b:78:49:82:13:6b:1f:
bf:91:ed:5b:ab:64:96:05:18:5d:ae:2f:ba:c9:e0:12:55:3b:
ad:6e:b0:b9:b0:9c:7f:62:13:f6:94:db:8e:81:9d:80:82:19:
5a:98:01:4a:2d:56:7d:38:49:1e:05:23:84:e7:1c:ff:e8:65:
cc:94:b9:a6:32:41:de:de:d0:65:9f:17:ab:ea:31:e1:41:e4:
c5:6c:71:fb:30:d5:10:f2:ee:f6:06:a4:4d:e6:9d:6a:64:92:
dc:6e:ed:68:19:0b:a0:dd:e8:fc:b2:6d:98:fa:85:cc:92:ae:
44:42:f0:76:0c:80:01:42:47:ee:1b:19:ea:3a:85:b1:ea:84:
8c:53:e4:63:dc:f6:83:9f:89:54:5a:23:90:04:74:b9:f1:b1:
15:db:81:f7:7f:ab:e4:d0:6f:f5:95:88:b2:dc:45:88:61:19:
53:9a:66:3f:e6:fd:80:ed:b6:05:bd:e5:ba:df:7e:55:2a:06:
e3:e0:af:5f:8b:01:4a:d0:45:1a:cf:bd:5d:4f:3b:72:61:13:
a8:d0:26:97:04:2b:dd:8e:b4:aa:fd:38:ff:d5:85:95:13:0d:
db:ac:48:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:46:35 2025 by rpki-client