Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/9wrMpPuBx59IZhRvv3EvhKx8RSY.roa
File: 9wrMpPuBx59IZhRvv3EvhKx8RSY.roa (raw, json)
Hash identifier: P3E4HGj5ZIlNlVk7n/NMpKBd3ylFyVb1vVTeXzzk3pg=
Subject key identifier: F7:0A:CC:A4:FB:81:C7:9F:48:66:14:6F:BF:71:2F:84:AC:7C:45:26
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 019422205F1B9708147CBFC9B9C245378C76
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/9wrMpPuBx59IZhRvv3EvhKx8RSY.roa
Signing time: Wed 01 Jan 2025 13:48:54 +0000
ROA not before: Wed 01 Jan 2025 13:48:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 396356
IP address blocks: 185.223.152.0/24 maxlen: 24
185.255.124.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:20:5f:1b:97:08:14:7c:bf:c9:b9:c2:45:37:8c:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Jan 1 13:48:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f70acca4fb81c79f4866146fbf712f84ac7c4526
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:04:20:c8:b7:83:7b:80:0a:31:92:21:11:26:
51:69:98:f1:c0:cb:54:e3:4b:a8:99:ea:00:19:b8:
e7:b7:89:97:ad:76:ad:ae:47:f1:25:b8:5e:21:b4:
66:3f:4c:df:2d:bc:ad:36:54:ea:f4:2a:c7:2f:c0:
d4:37:3d:f1:87:d3:67:f7:d0:c3:36:78:3c:62:ce:
b1:85:73:14:46:c9:ff:04:1b:2d:ae:73:9c:75:e7:
7b:39:46:b1:e0:43:62:dc:60:76:03:2b:7f:38:d2:
9d:b3:88:e3:5e:34:ed:31:82:cd:f4:89:3f:17:8c:
e5:af:4c:3e:c9:7e:33:63:b3:33:aa:1c:2e:06:f8:
29:7b:7f:1c:8f:08:6a:f8:16:0f:d9:74:b4:7d:88:
34:35:ee:0f:6b:8b:e2:fd:f7:0f:0e:79:a6:65:b1:
96:18:a1:d5:35:d9:4d:a2:15:cf:9f:a3:52:d9:da:
8a:9e:18:d3:dd:f2:9a:eb:d0:1d:69:6c:3b:61:41:
9f:ef:82:12:f1:e5:ac:77:00:dd:ee:55:0e:00:b4:
f2:34:c7:a9:19:55:a2:58:68:cc:8a:8c:e4:9d:f9:
fb:7b:24:ce:ac:a0:ed:e1:e3:bc:6f:58:5f:fd:5d:
86:e1:11:ca:4b:49:d8:e5:1e:92:31:3e:bf:85:07:
63:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:0A:CC:A4:FB:81:C7:9F:48:66:14:6F:BF:71:2F:84:AC:7C:45:26
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/9wrMpPuBx59IZhRvv3EvhKx8RSY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.223.152.0/24
185.255.124.0/24
Signature Algorithm: sha256WithRSAEncryption
69:43:2c:c4:d8:77:29:60:2d:c0:6d:fe:d6:d2:01:f5:6f:57:
ab:a3:3d:8e:a1:06:a8:a5:44:0f:b8:78:cf:fa:8a:59:08:08:
8c:da:ae:f1:9d:c6:94:10:a6:34:58:34:f9:1c:79:69:40:8c:
a8:c1:2c:e7:04:a2:de:fd:14:07:62:86:6b:57:10:e3:05:73:
e9:1a:d7:e5:67:4c:03:ac:a4:61:28:89:89:e8:27:87:b4:9e:
19:9e:9f:00:42:d5:34:5d:66:52:0f:24:ba:64:41:c7:04:92:
cc:ff:73:0d:d2:c8:f3:c2:8a:d1:cb:72:82:a8:cf:de:4b:89:
4c:6f:6b:b2:50:db:a3:58:a2:43:8b:9b:db:2d:93:eb:65:17:
d5:d1:7f:7b:d4:cf:e4:c0:ae:b0:be:cc:35:58:d0:f6:f0:9a:
e8:3e:62:17:5d:bf:28:2b:3c:73:7a:fa:f6:55:6d:1e:0a:24:
91:c8:06:06:9c:23:2e:45:da:c4:5f:fb:a8:f3:bc:a5:be:d0:
8a:be:97:c5:36:6a:2c:bf:91:54:7d:77:83:d7:a9:e9:ab:aa:
79:bb:39:80:62:83:fa:47:bf:11:c8:27:bc:ac:ac:c1:4e:78:
19:ec:5f:a1:65:93:f6:72:1d:f3:fa:8a:5e:45:e8:e5:da:96:
f2:45:44:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:14:20 2025 by rpki-client