Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/c58671-3d4e-4775-af21-20af3d1b8ef9/1/YVg_2iB1D0i_33LG7yJEAknUwCM.roa
File: YVg_2iB1D0i_33LG7yJEAknUwCM.roa (raw, json)
Hash identifier: LAKKZLtOPGoM/C7ZDpXW5Qjmcc0Ag72bwBoz/cyOViA=
Subject key identifier: 61:58:3F:DA:20:75:0F:48:BF:DF:72:C6:EF:22:44:02:49:D4:C0:23
Certificate issuer: /CN=97a23bb0aca9d226d05adfac08554181c48ef82e
Certificate serial: 019427471FA5B0F7A083032A45CE9D877C14
Authority key identifier: 97:A2:3B:B0:AC:A9:D2:26:D0:5A:DF:AC:08:55:41:81:C4:8E:F8:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l6I7sKyp0ibQWt-sCFVBgcSO-C4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/c58671-3d4e-4775-af21-20af3d1b8ef9/1/YVg_2iB1D0i_33LG7yJEAknUwCM.roa
Signing time: Thu 02 Jan 2025 13:49:20 +0000
ROA not before: Thu 02 Jan 2025 13:49:20 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205243
IP address blocks: 185.215.200.0/22 maxlen: 22
185.224.200.0/22 maxlen: 22
2a0b:adc0::/29 maxlen: 29
2a0d:3c00::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:1f:a5:b0:f7:a0:83:03:2a:45:ce:9d:87:7c:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97a23bb0aca9d226d05adfac08554181c48ef82e
Validity
Not Before: Jan 2 13:49:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=61583fda20750f48bfdf72c6ef22440249d4c023
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:2b:bf:4c:6b:a7:7d:b0:94:23:64:3c:60:34:
2b:51:4d:99:bc:60:11:8c:93:87:10:f8:30:ba:07:
88:d1:db:d8:0e:e2:a4:c5:bb:4c:8d:f4:cb:ff:ce:
5d:b6:bb:d6:89:0b:26:7f:98:6e:24:b0:f4:b3:cd:
14:8d:23:51:52:1c:89:86:18:b8:ce:fa:ce:fe:b1:
c3:c6:98:33:d7:45:9d:2d:24:b2:14:50:5f:62:0e:
a1:77:10:11:ee:b6:a3:f0:11:5f:93:c1:eb:90:73:
f8:8d:c1:14:72:47:74:40:d8:3b:43:12:26:7d:f3:
92:55:72:2c:ea:96:35:fe:ca:91:20:26:05:67:57:
4f:2e:b8:07:ff:c1:91:a8:d2:32:12:2e:9d:e0:6c:
a0:ab:10:3d:6f:06:c4:1f:bd:93:36:ce:99:00:a6:
8c:e6:00:d2:2d:ef:6e:63:58:63:d6:d1:ff:fd:c6:
80:c7:c2:1b:f7:96:94:14:d3:c6:f4:62:4a:ca:43:
50:b0:e9:a4:54:4c:e6:f1:ef:b9:3a:43:12:6e:5e:
d5:c7:d8:6a:e0:74:b1:6c:ed:90:74:a5:d0:62:02:
dd:77:aa:b9:89:2c:71:d8:22:02:a0:dc:47:c5:c6:
14:90:61:cf:05:88:64:3b:3e:27:63:77:e7:fc:93:
6f:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:58:3F:DA:20:75:0F:48:BF:DF:72:C6:EF:22:44:02:49:D4:C0:23
X509v3 Authority Key Identifier:
keyid:97:A2:3B:B0:AC:A9:D2:26:D0:5A:DF:AC:08:55:41:81:C4:8E:F8:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l6I7sKyp0ibQWt-sCFVBgcSO-C4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/c58671-3d4e-4775-af21-20af3d1b8ef9/1/YVg_2iB1D0i_33LG7yJEAknUwCM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/c58671-3d4e-4775-af21-20af3d1b8ef9/1/l6I7sKyp0ibQWt-sCFVBgcSO-C4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.215.200.0/22
185.224.200.0/22
IPv6:
2a0b:adc0::/29
2a0d:3c00::/29
Signature Algorithm: sha256WithRSAEncryption
8b:70:de:dd:04:b1:2c:33:97:fa:ec:b5:50:ef:d0:70:de:41:
5e:21:d7:5f:27:e4:1c:fa:69:d8:32:c2:89:c5:d3:e4:9f:9a:
1f:92:95:95:90:7b:61:6a:a4:60:39:bd:f6:0c:78:a7:14:c6:
8b:ec:7f:d8:c4:0c:73:ea:a2:c2:0d:f0:e8:f6:cc:36:d7:9f:
15:74:da:1b:d8:66:f3:90:2d:35:f1:72:98:39:f5:3b:ea:fc:
7f:0f:27:ff:e0:e8:46:2e:ff:94:08:cb:bc:49:5d:66:b2:ca:
82:6d:a0:bf:ca:78:3a:03:6b:60:68:ff:97:30:9d:b6:08:04:
b6:a5:d8:cf:51:4e:27:ab:47:9a:a9:06:d1:d3:fe:17:76:90:
bb:42:48:24:65:81:b1:ca:27:4e:f7:cf:a7:a8:db:2c:1e:17:
5e:07:89:5d:bf:25:8c:98:8f:0d:a4:e3:3b:70:17:73:a6:8c:
6d:52:71:91:f6:24:25:c9:18:ac:fb:69:2f:43:e8:46:ae:4b:
ec:c4:32:86:42:57:d1:e3:b1:35:e3:5b:71:23:e2:9b:4c:54:
47:2d:1d:7b:ee:2b:90:6a:d6:5b:b6:89:c1:d1:c3:87:c3:e1:
f4:03:71:88:b3:68:bb:2a:52:91:30:2b:44:82:43:14:7f:3b:
9e:a3:02:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 15:37:00 2025 by rpki-client