Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/953550-0266-4f2e-8dc3-7f4bd9b54e62/1/VntpOhfdioRatCH4o3GkTZdOjlc.roa
File: VntpOhfdioRatCH4o3GkTZdOjlc.roa (raw, json)
Hash identifier: gcIiYrJNp2HrQ1a0bBTw3kNV/tkPu/21t2SyNmL8svY=
Subject key identifier: 56:7B:69:3A:17:DD:8A:84:5A:B4:21:F8:A3:71:A4:4D:97:4E:8E:57
Certificate issuer: /CN=724518a57069cafd83e21b5c60fb262d8edf342b
Certificate serial: 0194236A3E62478B4E6EB7349702C64516A2
Authority key identifier: 72:45:18:A5:70:69:CA:FD:83:E2:1B:5C:60:FB:26:2D:8E:DF:34:2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ckUYpXBpyv2D4htcYPsmLY7fNCs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/953550-0266-4f2e-8dc3-7f4bd9b54e62/1/VntpOhfdioRatCH4o3GkTZdOjlc.roa
Signing time: Wed 01 Jan 2025 19:49:12 +0000
ROA not before: Wed 01 Jan 2025 19:49:12 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 203185
IP address blocks: 185.118.228.0/24 maxlen: 24
185.118.229.0/24 maxlen: 24
185.118.230.0/24 maxlen: 24
185.118.231.0/24 maxlen: 24
2a06:9600:1::/48 maxlen: 48
2a06:9600:2::/48 maxlen: 48
2a06:9600:faff::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:6a:3e:62:47:8b:4e:6e:b7:34:97:02:c6:45:16:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=724518a57069cafd83e21b5c60fb262d8edf342b
Validity
Not Before: Jan 1 19:49:12 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=567b693a17dd8a845ab421f8a371a44d974e8e57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:af:81:03:82:34:83:26:84:11:ed:28:7e:68:
0f:5d:12:19:31:ed:48:ac:69:81:7c:66:27:65:e9:
53:3d:cb:78:9f:96:7f:4e:48:5c:28:fe:74:b7:c2:
61:e4:70:2c:fb:b8:5d:08:6a:d8:34:58:1e:f3:e1:
f2:80:68:31:91:2b:18:1d:cd:d1:cc:ac:f7:3b:b2:
5f:57:7e:29:05:69:ba:66:4d:12:fd:d1:dd:9b:86:
f2:09:ee:2b:09:40:7c:f6:70:09:4e:4a:1a:b0:3d:
83:6a:55:ac:ab:ae:85:9c:f7:a1:7a:4c:1a:2e:3f:
b7:26:ed:05:da:bd:bb:5f:45:a6:db:8b:21:df:81:
95:30:d6:55:10:8e:8d:61:37:fa:f3:78:96:3e:9a:
99:2b:e6:09:2b:b8:c1:d7:b5:13:0d:c7:df:aa:ba:
ef:5c:b3:e8:9f:9f:38:d1:33:87:b7:ac:f9:e7:ae:
71:1b:c1:b7:15:f9:5e:ea:de:ed:f2:f6:9c:cd:7b:
b3:5c:c5:b9:a6:64:a2:cb:ab:8e:c1:c9:12:e5:a5:
d8:0c:38:14:c7:05:68:b1:df:ab:2a:79:57:be:8c:
e1:b5:a4:e1:91:8e:ed:2c:88:c0:d8:70:69:c0:0c:
ac:e3:cc:43:3c:b1:20:82:51:2a:c2:0c:81:b7:9b:
48:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:7B:69:3A:17:DD:8A:84:5A:B4:21:F8:A3:71:A4:4D:97:4E:8E:57
X509v3 Authority Key Identifier:
keyid:72:45:18:A5:70:69:CA:FD:83:E2:1B:5C:60:FB:26:2D:8E:DF:34:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ckUYpXBpyv2D4htcYPsmLY7fNCs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/953550-0266-4f2e-8dc3-7f4bd9b54e62/1/VntpOhfdioRatCH4o3GkTZdOjlc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/953550-0266-4f2e-8dc3-7f4bd9b54e62/1/ckUYpXBpyv2D4htcYPsmLY7fNCs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.118.228.0/22
IPv6:
2a06:9600:1::-2a06:9600:2:ffff:ffff:ffff:ffff:ffff
2a06:9600:faff::/48
Signature Algorithm: sha256WithRSAEncryption
64:00:4b:fe:e4:b0:75:1e:e1:d4:13:e3:e7:e9:dc:f0:0f:a8:
46:41:fe:ec:b0:74:f2:b1:a2:99:39:7e:9f:e1:3c:85:c6:cb:
d2:30:06:b9:c5:89:ae:48:3c:54:ae:b0:52:25:d3:93:f5:6b:
18:54:8a:37:dc:4f:6d:ec:81:75:01:77:80:ca:eb:be:22:b0:
aa:53:31:44:bf:99:26:cc:75:d1:e2:5f:95:ec:2e:22:96:bd:
ac:67:23:c0:19:bc:4a:a6:dc:25:75:ef:95:84:47:be:60:3b:
4a:4d:2a:63:76:d5:4e:04:dd:7f:cf:e5:9b:69:33:f1:79:bc:
fe:2c:ba:d5:b6:44:d6:59:78:b3:5c:5b:23:fb:98:4a:1a:83:
69:66:2f:d9:50:d0:52:d5:08:6e:0f:a7:1d:27:a7:53:d5:5f:
37:a7:9e:2a:04:59:71:81:93:97:55:a2:4b:25:17:49:a7:34:
52:79:7d:fb:80:9b:3f:1e:e9:45:e3:b1:3a:de:ab:46:1a:fc:
9f:89:a0:69:59:86:65:12:91:d9:84:62:5a:f6:a5:f0:e8:b8:
24:cf:88:e7:db:73:4f:78:89:85:3f:b5:79:73:d2:b4:3a:9a:
11:0e:84:3c:ad:ac:ab:fa:c1:ef:9b:07:81:fd:02:c6:ea:95:
e9:27:0f:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:35:20 2025 by rpki-client