Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/bf17a6-d61b-493d-9a84-9bc55f62daba/1/AkbyjYPO5ixVDwG-XwCAg4fRm7E.roa
File: AkbyjYPO5ixVDwG-XwCAg4fRm7E.roa (raw, json)
Hash identifier: gAcIevSpRGgPBGXOjkQU47jXE5lSjh7Vwo42YLBdF64=
Subject key identifier: 02:46:F2:8D:83:CE:E6:2C:55:0F:01:BE:5F:00:80:83:87:D1:9B:B1
Certificate issuer: /CN=ff5a29ccda1dc8a8a163ac27781e8ec597e76db9
Certificate serial: 019421B24A8D4F1A8CC29EC26363F0D443F9
Authority key identifier: FF:5A:29:CC:DA:1D:C8:A8:A1:63:AC:27:78:1E:8E:C5:97:E7:6D:B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_1opzNodyKihY6wneB6OxZfnbbk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/bf17a6-d61b-493d-9a84-9bc55f62daba/1/AkbyjYPO5ixVDwG-XwCAg4fRm7E.roa
Signing time: Wed 01 Jan 2025 11:48:39 +0000
ROA not before: Wed 01 Jan 2025 11:48:39 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205490
IP address blocks: 185.215.152.0/22 maxlen: 22
185.215.152.0/23 maxlen: 23
185.215.152.0/24 maxlen: 24
185.215.153.0/24 maxlen: 24
185.215.154.0/23 maxlen: 23
185.215.154.0/24 maxlen: 24
185.215.155.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b2:4a:8d:4f:1a:8c:c2:9e:c2:63:63:f0:d4:43:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff5a29ccda1dc8a8a163ac27781e8ec597e76db9
Validity
Not Before: Jan 1 11:48:39 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0246f28d83cee62c550f01be5f00808387d19bb1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:db:10:c9:ac:b0:21:c0:a5:c6:0e:24:6a:d7:
5c:23:55:ed:23:46:67:25:93:f7:b4:08:bf:91:1f:
3c:be:a7:df:66:a8:00:a0:ce:32:16:8f:05:3d:a6:
94:80:e9:ef:cd:78:87:01:44:b1:96:72:31:da:77:
f6:dc:aa:72:37:a2:d0:30:76:72:41:be:9b:56:f6:
52:35:5a:17:51:d3:1d:ed:6c:4e:be:bb:24:df:91:
ff:53:aa:db:c6:76:46:c6:be:bd:da:56:80:03:96:
dc:1b:2d:ab:b8:77:36:b5:bd:f5:07:54:a2:c2:38:
5a:2a:46:f3:4e:74:32:c0:57:ce:fc:bd:1d:88:e5:
6a:7c:80:de:82:29:23:01:c0:b8:bf:74:d1:83:65:
07:9d:ef:af:81:2b:1a:8e:b9:2c:70:39:f9:a5:96:
ce:88:be:2e:f7:d4:09:18:13:53:bf:1e:c3:dc:bb:
8e:12:9e:2a:43:4b:9b:88:7f:38:e0:58:41:57:b5:
9f:04:65:f5:6e:0b:6f:fa:e4:3b:f7:92:dc:61:89:
57:5e:8b:5d:f8:2a:c6:1c:65:76:1a:69:64:03:ea:
1f:4f:22:92:db:70:f0:3f:52:7f:03:fd:8b:8f:3c:
7c:de:ad:a4:ba:bb:4c:21:f4:b6:7a:d2:a6:28:0b:
dd:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:46:F2:8D:83:CE:E6:2C:55:0F:01:BE:5F:00:80:83:87:D1:9B:B1
X509v3 Authority Key Identifier:
keyid:FF:5A:29:CC:DA:1D:C8:A8:A1:63:AC:27:78:1E:8E:C5:97:E7:6D:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_1opzNodyKihY6wneB6OxZfnbbk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/bf17a6-d61b-493d-9a84-9bc55f62daba/1/AkbyjYPO5ixVDwG-XwCAg4fRm7E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/bf17a6-d61b-493d-9a84-9bc55f62daba/1/_1opzNodyKihY6wneB6OxZfnbbk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.215.152.0/22
Signature Algorithm: sha256WithRSAEncryption
85:8c:f3:13:0d:d8:22:a8:56:1e:7a:94:3e:0e:61:7a:d2:ad:
9d:29:3d:a6:21:93:1d:42:a4:c4:e0:16:ac:da:79:b0:1d:92:
e0:49:ca:23:ef:f0:f7:e4:e5:71:de:33:83:ad:18:d0:0f:9a:
29:35:98:e8:d3:c1:cc:e7:80:89:bc:f6:ac:03:bb:f7:9f:0d:
58:f4:ef:87:5f:f1:8f:b8:73:9e:93:5d:72:33:1d:4e:2b:3c:
1a:a6:ae:db:91:cb:38:75:23:cb:af:77:89:d9:8c:dc:97:0d:
88:68:c5:ca:72:df:3f:8d:84:5f:21:04:49:29:16:0b:52:28:
b6:2f:06:45:63:a8:1d:5d:da:4f:9a:89:46:ae:8f:aa:06:ca:
24:a0:b2:7e:f2:0e:54:c1:78:b8:fd:e3:dd:4c:b1:28:a1:0c:
1f:8d:73:6e:4b:87:b3:81:f5:58:5b:67:0f:65:23:cb:fe:07:
39:4e:a5:e6:0e:5d:5b:48:d0:88:eb:3c:d3:2e:dc:eb:fb:eb:
e2:f1:26:8b:23:16:bd:bb:85:af:94:74:d0:1e:c8:80:87:24:
10:f2:1c:dd:1c:ea:09:ad:dd:ea:e3:08:0b:cb:4f:30:b7:b9:
b6:3b:8d:39:45:b5:c8:7c:4a:31:22:4f:f1:94:72:e9:40:52:
22:69:63:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:21:11 2025 by rpki-client