Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/9YunG8P-Nv7jCIj5y63yLlRSLsA.roa
File: 9YunG8P-Nv7jCIj5y63yLlRSLsA.roa (raw, json)
Hash identifier: dqbqifBj3pMvbLBXPIn6V1mL+ZkEcXH5TWKrIrYJul0=
Subject key identifier: F5:8B:A7:1B:C3:FE:36:FE:E3:08:88:F9:CB:AD:F2:2E:54:52:2E:C0
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 01943CD3298508A939F873CB401975E1CA31
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/9YunG8P-Nv7jCIj5y63yLlRSLsA.roa
Signing time: Mon 06 Jan 2025 18:14:19 +0000
ROA not before: Mon 06 Jan 2025 18:14:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 20473
IP address blocks: 185.194.177.0/24 maxlen: 24
185.209.38.0/24 maxlen: 24
185.209.73.0/24 maxlen: 24
185.210.235.0/24 maxlen: 24
185.218.20.0/24 maxlen: 24
185.222.29.0/24 maxlen: 24
185.222.30.0/24 maxlen: 24
185.227.144.0/24 maxlen: 24
185.246.112.0/24 maxlen: 24
193.58.146.0/24 maxlen: 24
194.76.172.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:3c:d3:29:85:08:a9:39:f8:73:cb:40:19:75:e1:ca:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Jan 6 18:14:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f58ba71bc3fe36fee30888f9cbadf22e54522ec0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:92:fc:c8:a0:4b:2c:60:25:2b:eb:51:3f:5c:
51:db:5d:02:da:dc:c7:a3:69:f6:00:23:bb:ae:ba:
9c:29:25:2f:92:83:07:f4:90:d2:35:84:fe:b8:0c:
a3:71:3c:4b:09:b8:d0:2e:fe:87:cd:47:ef:68:7b:
c3:71:5d:f4:8c:b5:13:22:bd:67:38:d1:af:2d:8d:
b2:59:14:6a:98:52:f6:d4:d8:d3:e9:ca:69:29:b1:
c0:7c:53:a1:61:02:15:af:c6:72:b4:85:c8:ba:a6:
a2:6e:ea:46:c9:2b:1f:ea:57:61:93:1d:6a:62:7b:
b4:be:ff:ce:a0:1b:e8:fd:bb:f3:51:3f:bc:a8:ac:
37:b4:ea:7e:fb:4b:b9:d2:c0:e3:36:ef:4a:64:b3:
c1:a8:e8:35:51:b7:d5:c3:8a:86:c2:09:9e:dc:52:
ec:ca:47:88:24:51:42:c0:f9:24:75:7a:74:74:23:
cd:32:d7:10:c7:74:f0:28:64:b5:50:48:2c:5c:47:
0e:c7:cd:db:79:cc:72:9b:9f:2b:c4:36:ce:ba:2d:
52:c7:aa:2d:bc:a7:ca:8f:cd:a2:a1:a1:3d:8c:94:
96:8e:65:74:ee:39:a0:ec:74:cc:ae:70:e1:4b:db:
77:a7:4a:2d:f5:eb:0d:2c:f8:d4:c4:fe:03:f7:11:
c6:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:8B:A7:1B:C3:FE:36:FE:E3:08:88:F9:CB:AD:F2:2E:54:52:2E:C0
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/9YunG8P-Nv7jCIj5y63yLlRSLsA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.194.177.0/24
185.209.38.0/24
185.209.73.0/24
185.210.235.0/24
185.218.20.0/24
185.222.29.0-185.222.30.255
185.227.144.0/24
185.246.112.0/24
193.58.146.0/24
194.76.172.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:18:f0:17:20:e2:f8:02:c8:28:de:c9:fb:b0:78:1a:b5:93:
34:b1:a2:1e:70:ff:c9:a7:ce:60:ce:64:81:58:62:67:1b:8b:
37:ef:8f:7e:7b:24:df:25:f8:ce:bd:00:80:af:dd:be:a8:8d:
d6:f0:4c:ca:e8:9b:ed:bd:b7:0f:88:89:22:32:dd:46:ba:5b:
e2:7c:1d:af:d9:8f:d8:39:63:0d:c1:c2:4f:31:42:e7:62:61:
5b:61:f4:e4:eb:c7:c9:a0:e7:0c:72:f0:3f:da:d3:ac:bd:71:
96:26:cc:67:c7:d5:9b:db:92:d8:14:3a:ae:1d:bf:5b:f0:27:
a5:68:c8:f8:2d:ce:cf:8c:5f:fd:dc:1b:5d:47:90:31:f1:01:
41:31:71:24:47:27:60:9a:ba:f0:c6:a6:7a:dc:5a:ce:31:d3:
69:33:ba:dc:7b:ae:ea:8d:06:6e:76:cf:9c:bc:bf:2a:ed:39:
e3:9d:46:96:a0:b2:94:9f:8c:34:73:d6:84:2e:8b:78:d5:6a:
03:f7:a5:8e:c1:f9:fa:ac:e7:b8:ce:96:8c:40:6d:51:3c:c3:
63:4b:8e:df:2a:7b:48:ad:20:bf:83:e0:a0:1e:cc:17:7e:8e:
87:b6:c3:69:77:2c:9d:47:89:63:c5:4b:57:c3:a4:fa:54:15:
26:99:d5:6b
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Apr 25 08:18:40 2025 by rpki-client