Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/594fa8-d315-4a38-a631-dec02488c37c/1/_4Ndkg3UKi9vHxY0SVHFR9i7YHI.roa
File: _4Ndkg3UKi9vHxY0SVHFR9i7YHI.roa (raw, json)
Hash identifier: gVwQ/KDnz7z975mDXEiOOePjhBe/QBZrgXsjy6HuzNg=
Subject key identifier: FF:83:5D:92:0D:D4:2A:2F:6F:1F:16:34:49:51:C5:47:D8:BB:60:72
Certificate issuer: /CN=65226ee5ea0406592df975c6f4c84f10f14d15cb
Certificate serial: 0194228D4FC3735998E4550E0D0FB0954763
Authority key identifier: 65:22:6E:E5:EA:04:06:59:2D:F9:75:C6:F4:C8:4F:10:F1:4D:15:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZSJu5eoEBlkt-XXG9MhPEPFNFcs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/594fa8-d315-4a38-a631-dec02488c37c/1/_4Ndkg3UKi9vHxY0SVHFR9i7YHI.roa
Signing time: Wed 01 Jan 2025 15:47:53 +0000
ROA not before: Wed 01 Jan 2025 15:47:53 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 59397
IP address blocks: 185.75.128.0/22 maxlen: 22
185.75.129.0/24 maxlen: 24
185.75.130.0/24 maxlen: 24
185.75.131.0/24 maxlen: 24
2a03:4d22::/32 maxlen: 32
2a03:4d25::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:4f:c3:73:59:98:e4:55:0e:0d:0f:b0:95:47:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65226ee5ea0406592df975c6f4c84f10f14d15cb
Validity
Not Before: Jan 1 15:47:53 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ff835d920dd42a2f6f1f16344951c547d8bb6072
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:3b:0d:d6:4e:f3:5c:3d:61:f0:20:15:9f:f0:
6d:d7:34:ad:7c:b2:3a:33:a9:6f:6d:2a:eb:40:e1:
cb:7e:ab:99:4a:20:f7:c6:28:a0:16:ec:9a:a3:96:
c8:64:3a:46:a9:a9:64:53:7a:b5:52:0d:e5:ef:94:
6b:12:95:01:62:cc:a5:37:58:2b:41:0a:52:a0:0d:
88:bb:24:ed:38:75:cc:c4:1d:e4:75:dc:c0:68:0a:
57:a6:61:3d:22:aa:fa:0b:95:d4:ae:e6:c1:dd:2d:
47:fa:4c:35:f6:37:75:bd:b6:43:f3:aa:db:dc:2c:
d3:ae:9f:bb:4e:a5:f7:1d:8d:b3:ca:4d:64:09:d4:
8d:14:3e:67:0d:e3:3f:82:50:21:80:e1:de:9a:fc:
69:26:eb:c4:2f:1c:39:eb:7c:7a:d0:2c:b7:4a:86:
5a:e4:93:39:94:ba:ed:b6:7b:d3:57:87:cc:4e:26:
60:0a:5c:12:c6:8e:54:90:21:6d:e2:36:e2:74:fa:
6a:38:7d:d3:c0:7d:6a:49:72:21:c2:9b:f9:d6:93:
f1:f4:73:5d:ec:08:01:2a:40:c4:70:8b:97:67:79:
0b:56:04:11:45:bc:ef:00:5b:89:85:ab:ba:e9:7f:
65:31:b8:da:55:dd:4e:9c:d7:40:99:32:e3:00:b9:
ab:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:83:5D:92:0D:D4:2A:2F:6F:1F:16:34:49:51:C5:47:D8:BB:60:72
X509v3 Authority Key Identifier:
keyid:65:22:6E:E5:EA:04:06:59:2D:F9:75:C6:F4:C8:4F:10:F1:4D:15:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZSJu5eoEBlkt-XXG9MhPEPFNFcs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/594fa8-d315-4a38-a631-dec02488c37c/1/_4Ndkg3UKi9vHxY0SVHFR9i7YHI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/594fa8-d315-4a38-a631-dec02488c37c/1/ZSJu5eoEBlkt-XXG9MhPEPFNFcs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.75.128.0/22
IPv6:
2a03:4d22::/32
2a03:4d25::/32
Signature Algorithm: sha256WithRSAEncryption
9e:e1:53:22:33:e0:9a:49:37:23:69:23:92:38:15:25:04:3c:
eb:2f:44:26:1f:10:7f:6b:46:ab:4c:8d:0e:40:91:0d:1a:31:
38:ed:2a:17:2f:39:56:3b:fc:f2:a6:22:d1:cd:62:1b:72:02:
d8:6d:16:48:d6:c7:4f:51:09:65:9c:af:ec:04:98:b1:4f:15:
18:b5:73:97:51:40:01:b4:a5:30:62:9d:93:05:3d:e0:ac:fd:
97:5b:e6:75:5f:aa:14:b0:5c:3d:50:cc:e4:60:5a:5c:74:c3:
da:5e:ce:0b:6d:d4:d7:55:d2:ec:f8:3c:e3:08:a5:62:8a:41:
8e:5a:f4:fb:20:09:6e:5f:ed:a9:f6:27:3e:48:9d:7c:9c:23:
5e:45:5c:03:30:e0:d4:36:f3:e4:d2:63:00:77:8c:af:75:2d:
5f:05:84:81:2f:0d:6d:c6:12:8a:00:64:71:8b:9e:db:d2:91:
76:a2:f8:90:da:97:5b:cf:c1:d7:4f:6d:a7:33:60:23:6b:d1:
d7:0b:2a:30:d9:10:ef:35:c2:80:c9:16:5e:a5:ca:06:18:6d:
98:6f:46:1e:00:a7:93:55:d4:12:e5:7b:60:e1:3a:e9:ba:5c:
76:91:9d:bf:f6:82:ac:d3:3c:fb:35:49:58:6d:74:93:be:0d:
3e:08:16:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 01:41:13 2025 by rpki-client