Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/578788-250f-47f2-bd3e-272ccc17dfea/1/y7dJRRp79aTyhXJq7SLE893fmyk.roa
File: y7dJRRp79aTyhXJq7SLE893fmyk.roa (raw, json)
Hash identifier: QjKSW2+AFDFFoGHFdC8m0Zba5598T5O0nbfB4lqoZ3k=
Subject key identifier: CB:B7:49:45:1A:7B:F5:A4:F2:85:72:6A:ED:22:C4:F3:DD:DF:9B:29
Certificate issuer: /CN=b710b9be1e2db37482e1f8f25b35fda5380d32c6
Certificate serial: 01942143C9EBFF6E97211C7665099452E067
Authority key identifier: B7:10:B9:BE:1E:2D:B3:74:82:E1:F8:F2:5B:35:FD:A5:38:0D:32:C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/txC5vh4ts3SC4fjyWzX9pTgNMsY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/578788-250f-47f2-bd3e-272ccc17dfea/1/y7dJRRp79aTyhXJq7SLE893fmyk.roa
Signing time: Wed 01 Jan 2025 09:47:58 +0000
ROA not before: Wed 01 Jan 2025 09:47:58 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206516
IP address blocks: 185.184.96.0/22 maxlen: 24
185.184.96.0/23 maxlen: 24
185.184.98.0/23 maxlen: 24
2a0b:3080::/32 maxlen: 32
2a0b:3080:10::/44 maxlen: 44
2a0b:3080:8010::/44 maxlen: 44
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:43:c9:eb:ff:6e:97:21:1c:76:65:09:94:52:e0:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b710b9be1e2db37482e1f8f25b35fda5380d32c6
Validity
Not Before: Jan 1 09:47:58 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cbb749451a7bf5a4f285726aed22c4f3dddf9b29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:8f:87:dc:bc:be:d9:5c:93:71:c3:44:bb:79:
59:e9:47:b1:70:2a:80:4a:90:c4:00:37:dc:65:f2:
39:3c:dd:e1:0c:22:35:d8:0d:48:c9:40:18:8a:36:
2a:4d:32:09:89:5b:dd:4e:a7:72:25:4a:77:62:aa:
e5:98:1c:56:23:50:7b:6a:8f:a2:86:d3:76:b5:38:
7e:38:2a:5b:38:8b:15:73:da:97:d7:ad:ed:dd:21:
88:91:3c:a7:23:b3:e1:45:64:31:9a:8c:cb:4c:b0:
cf:e3:54:65:00:55:2c:09:aa:01:0a:e0:d7:64:18:
e1:25:e7:f6:f0:e1:27:e8:5d:6e:37:22:d2:04:d3:
9b:7d:56:a2:21:79:0a:6e:99:9f:67:f3:16:a5:f4:
3f:d1:36:76:f7:c5:a7:9d:39:d0:b1:1f:bb:00:be:
9d:2c:51:09:b9:b9:58:2a:db:ef:96:37:39:d3:d0:
e8:39:7f:e7:0f:ec:e1:5f:b7:fc:81:bd:7f:7d:e8:
c5:d4:a7:3f:43:68:ac:84:72:df:2e:2b:3d:dd:4f:
a3:3c:6d:b2:6e:b5:51:80:29:c3:04:0b:a4:c6:bb:
10:c7:d3:2d:1a:81:50:5a:22:dd:72:6a:1f:f9:15:
77:e1:74:87:85:ab:33:e2:61:d3:44:33:f0:f8:e7:
97:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:B7:49:45:1A:7B:F5:A4:F2:85:72:6A:ED:22:C4:F3:DD:DF:9B:29
X509v3 Authority Key Identifier:
keyid:B7:10:B9:BE:1E:2D:B3:74:82:E1:F8:F2:5B:35:FD:A5:38:0D:32:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/txC5vh4ts3SC4fjyWzX9pTgNMsY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/578788-250f-47f2-bd3e-272ccc17dfea/1/y7dJRRp79aTyhXJq7SLE893fmyk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/578788-250f-47f2-bd3e-272ccc17dfea/1/txC5vh4ts3SC4fjyWzX9pTgNMsY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.184.96.0/22
IPv6:
2a0b:3080::/32
Signature Algorithm: sha256WithRSAEncryption
d3:4a:76:2e:c6:ef:7b:a4:f4:20:9a:ab:d4:db:76:32:db:94:
aa:0b:87:a7:39:ae:20:6a:d4:e7:dc:e0:6e:d2:ee:a2:80:02:
1a:9a:e4:62:55:6f:d9:1d:e4:48:6c:a6:00:51:c3:a2:fc:78:
32:8c:4e:c2:53:86:23:0a:9b:f2:08:e1:9c:d4:85:99:8b:32:
95:e9:1f:93:0e:ea:fd:06:c4:4d:c3:57:b6:70:55:8d:9f:4b:
cb:0b:a5:0c:fc:40:2f:d8:df:cd:db:89:a8:ea:28:2f:42:44:
68:19:3c:da:04:c6:4e:59:73:66:3a:e4:1c:e9:5d:a9:70:28:
69:2d:84:85:a5:a3:16:4d:e5:e1:ec:80:ab:25:f6:c9:2f:24:
38:28:64:6c:92:ff:94:e8:3e:1b:b8:35:34:59:75:bf:ca:01:
13:ea:b0:65:c1:60:ca:ed:51:28:42:df:04:f0:b8:9a:9b:86:
93:36:84:ef:ce:c0:9f:aa:03:5a:1a:82:8b:f4:50:c6:dd:61:
89:de:84:e1:b4:3a:5b:cb:e8:88:4a:1a:4f:a7:ca:ea:8b:26:
6a:e5:1b:1c:dc:cd:8c:66:17:82:e2:48:8b:16:59:c9:18:f7:
bd:89:72:f4:8d:3c:8e:e1:c0:f1:76:92:60:e2:a7:c2:57:0c:
35:64:e6:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:03:49 2025 by rpki-client