Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/1ar54z11_SA5Hh7p8ey8HJG-EkE.roa
File: 1ar54z11_SA5Hh7p8ey8HJG-EkE.roa (raw, json)
Hash identifier: 20nXKbQL1bzUZ6kB0Sg15OcG/7zk7sDWpARaJt1JQ7Y=
Subject key identifier: D5:AA:F9:E3:3D:75:FD:20:39:1E:1E:E9:F1:EC:BC:1C:91:BE:12:41
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 019422203BA4973D94989C3EDADEDDF1CBEB
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/1ar54z11_SA5Hh7p8ey8HJG-EkE.roa
Signing time: Wed 01 Jan 2025 13:48:45 +0000
ROA not before: Wed 01 Jan 2025 13:48:45 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202673
IP address blocks: 185.221.20.0/24 maxlen: 24
185.223.82.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:20:3b:a4:97:3d:94:98:9c:3e:da:de:dd:f1:cb:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Jan 1 13:48:45 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d5aaf9e33d75fd20391e1ee9f1ecbc1c91be1241
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:51:2e:7f:1f:ae:e7:6c:8e:89:12:7a:a4:35:
79:b0:bf:df:71:e4:a2:5f:37:79:57:38:d8:c4:30:
ca:86:31:6d:c4:af:75:75:ce:46:45:f1:c1:ed:cf:
58:ba:54:5b:3b:47:3b:bc:23:8e:14:1c:98:fb:ee:
23:3d:52:dc:a1:38:34:aa:67:be:3c:04:c4:c2:4f:
4f:b6:f2:60:a4:4a:e0:f2:77:29:df:30:2c:87:63:
a1:27:6e:72:e6:a4:6e:e7:2d:c9:bc:59:40:21:5c:
1b:e2:24:64:fa:fe:a9:9c:3f:0c:81:00:66:fe:57:
93:75:8f:75:c1:49:39:d2:eb:7c:e3:4b:48:dd:b2:
f4:4d:40:3e:a7:8c:8c:39:be:64:cd:bd:2c:5f:41:
9a:ed:74:41:66:8b:01:21:10:fe:5e:04:b2:c1:0b:
9a:49:17:ba:40:11:ef:c7:67:4f:9b:fa:97:6b:98:
ea:15:3a:48:ac:e7:fe:ac:30:bd:ad:c4:74:60:32:
1a:7e:d2:a0:c6:be:1c:30:32:ac:dd:0c:1e:a7:a6:
f9:3d:9f:35:40:6a:f3:60:95:49:b6:18:f1:36:23:
08:bf:c0:04:ca:c8:97:34:d5:e3:c7:d1:50:79:4d:
51:fe:3f:b1:a1:0c:f9:24:d6:6c:0a:30:fc:e8:b7:
a0:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:AA:F9:E3:3D:75:FD:20:39:1E:1E:E9:F1:EC:BC:1C:91:BE:12:41
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/1ar54z11_SA5Hh7p8ey8HJG-EkE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.221.20.0/24
185.223.82.0/24
Signature Algorithm: sha256WithRSAEncryption
19:b0:af:d4:9f:84:b7:2e:4c:bb:63:3e:6a:7d:22:18:d0:ab:
0d:d4:a0:47:ab:48:9e:29:11:35:c3:53:68:2c:84:48:9e:75:
65:65:cc:1e:60:6b:e5:8c:e0:13:ee:fe:ba:07:a4:cb:d6:82:
c4:b9:f6:74:74:ed:a4:f5:2a:7b:e6:17:23:31:d6:58:e9:91:
ea:3b:b4:16:13:42:17:4d:39:d8:39:14:69:53:2b:21:85:93:
71:cf:17:fa:fc:5b:b0:9d:79:81:ac:ef:a2:ab:72:0b:c7:26:
d1:93:83:fd:25:c6:c1:99:ee:13:e2:26:38:a9:b9:25:e1:9d:
53:a8:d2:2a:8b:68:25:ec:f3:05:a2:1d:34:3b:09:1f:ed:37:
12:77:a3:f7:9a:7f:c0:8b:40:6b:0e:7b:d5:73:80:07:0c:dc:
b4:e0:f0:c0:eb:b6:26:18:ff:e6:d2:6f:ed:aa:e9:36:4d:5d:
a5:d1:ec:a9:e5:b9:f0:9b:35:da:84:cd:61:2a:3e:3f:a7:ab:
ab:3e:d3:67:bf:1d:fc:1b:6a:20:cb:55:e8:9d:45:e2:3c:6d:
ed:85:4b:2b:5f:38:d0:e3:be:1d:c2:c7:d5:3c:a2:43:db:27:
a5:51:26:a8:0f:37:c9:03:9d:bf:f5:77:a3:2f:c8:5d:a0:19:
76:11:93:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:00:03 2025 by rpki-client