Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/0df28d-924d-4b4e-94b8-824ffc6942f4/1/yZlOT6r0_6wmgpAAvcSq6qfpXoA.roa
File: yZlOT6r0_6wmgpAAvcSq6qfpXoA.roa (raw, json)
Hash identifier: CFuI4jvHDVJgJ7TNYXPE3aUuvYsSM/+AObIDbJtCPww=
Subject key identifier: C9:99:4E:4F:AA:F4:FF:AC:26:82:90:00:BD:C4:AA:EA:A7:E9:5E:80
Certificate issuer: /CN=d689cb71891c6d94bd9e6f14f16e7e37c2c728bf
Certificate serial: 0194258FBC97BBC48FAD12FD65164C19422D
Authority key identifier: D6:89:CB:71:89:1C:6D:94:BD:9E:6F:14:F1:6E:7E:37:C2:C7:28:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1onLcYkcbZS9nm8U8W5-N8LHKL8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/0df28d-924d-4b4e-94b8-824ffc6942f4/1/yZlOT6r0_6wmgpAAvcSq6qfpXoA.roa
Signing time: Thu 02 Jan 2025 05:49:24 +0000
ROA not before: Thu 02 Jan 2025 05:49:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 203448
IP address blocks: 185.134.172.0/22 maxlen: 24
185.134.172.0/24 maxlen: 24
185.134.173.0/24 maxlen: 24
185.134.174.0/24 maxlen: 24
2a0d:40c0::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:bc:97:bb:c4:8f:ad:12:fd:65:16:4c:19:42:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d689cb71891c6d94bd9e6f14f16e7e37c2c728bf
Validity
Not Before: Jan 2 05:49:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c9994e4faaf4ffac26829000bdc4aaeaa7e95e80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:86:2c:60:ff:73:1f:84:7e:8a:96:68:7f:e6:
ec:4f:e4:a8:81:f9:8c:28:f6:00:ff:77:2e:7c:f7:
d7:34:82:02:7a:62:58:fc:02:c1:f8:36:a7:60:96:
2a:cb:94:d6:75:3e:6e:cb:af:7e:db:e1:f2:d7:81:
70:39:48:2f:6f:0c:b7:bb:b5:3d:60:ec:ee:6c:bd:
19:97:53:1b:9b:6e:5f:0f:af:bd:77:94:3d:c3:07:
f8:b9:e5:61:5e:a6:1f:09:55:ff:a1:20:90:e3:f8:
5d:a1:6d:c8:da:00:e2:e7:be:8a:e3:49:a0:29:3b:
2c:f0:51:81:d5:77:1a:5b:3e:27:fa:66:e7:e5:84:
e3:d7:29:c7:2b:0f:f3:17:19:aa:c8:94:a9:57:e3:
8d:c3:fe:e6:90:19:42:79:54:74:4a:23:93:ca:0e:
ff:c0:0e:2f:c4:17:4d:33:57:cf:48:f7:3d:84:69:
4f:00:65:db:73:e5:2c:4e:28:b2:87:65:0a:3f:7e:
94:91:9b:50:11:80:37:53:2f:b1:32:a4:cc:8e:bb:
b1:ce:30:ea:d5:7f:9a:14:95:66:2e:91:b0:5a:60:
bd:c3:f5:41:f8:7c:fa:56:aa:91:a3:3a:fe:04:b1:
9c:da:b6:a0:cc:51:eb:05:73:38:2c:ec:0f:dc:36:
07:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:99:4E:4F:AA:F4:FF:AC:26:82:90:00:BD:C4:AA:EA:A7:E9:5E:80
X509v3 Authority Key Identifier:
keyid:D6:89:CB:71:89:1C:6D:94:BD:9E:6F:14:F1:6E:7E:37:C2:C7:28:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1onLcYkcbZS9nm8U8W5-N8LHKL8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/0df28d-924d-4b4e-94b8-824ffc6942f4/1/yZlOT6r0_6wmgpAAvcSq6qfpXoA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/0df28d-924d-4b4e-94b8-824ffc6942f4/1/1onLcYkcbZS9nm8U8W5-N8LHKL8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.134.172.0/22
IPv6:
2a0d:40c0::/32
Signature Algorithm: sha256WithRSAEncryption
37:b3:5e:47:aa:c2:ed:48:ee:50:cf:cd:19:55:27:2d:8f:b3:
8a:c0:41:8d:d8:ce:82:3b:4b:15:8f:31:64:61:be:53:5e:3a:
bc:b4:0f:05:d5:54:93:53:b7:7c:1e:68:d6:32:1a:e7:ce:8c:
3e:da:4c:5b:ff:f5:95:ae:d7:4f:25:25:c7:d3:38:ce:7d:6e:
fd:43:24:ce:08:4d:53:f4:3c:54:e5:0f:25:4f:d8:60:03:db:
53:d6:62:bc:5a:ff:bf:90:56:65:9e:6b:72:e5:13:60:ac:d2:
b2:29:df:9b:df:3f:9b:c9:8d:a6:54:b7:14:88:d6:1b:72:f6:
12:ff:92:7b:64:fd:85:c6:fb:ae:3d:77:03:c8:84:16:ae:1c:
f6:8a:67:3d:13:e1:df:95:7f:94:8f:5c:f2:aa:93:cd:0b:3b:
32:82:28:29:38:3b:cc:96:61:45:71:a5:b6:4f:1b:02:74:f3:
3a:b3:d2:d3:b5:51:a0:33:25:c3:be:f1:32:92:dc:0e:c7:0d:
f0:2e:11:0f:16:dc:39:a1:15:bf:44:50:c8:8e:5d:bc:51:4f:
69:38:28:4f:4d:61:ea:eb:bb:13:f8:f7:06:87:f2:df:d7:f6:
fa:6a:dd:14:48:5a:6a:8a:08:91:68:63:3a:1c:75:19:31:df:
4c:0f:37:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 07:50:08 2025 by rpki-client