Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/6c8c31-f999-4056-aa1b-234d0754239d/1/YF_8BljowlmU3n9MOrd56EKDy3I.roa
File: YF_8BljowlmU3n9MOrd56EKDy3I.roa (raw, json)
Hash identifier: 5hFRnx4Cut7X+n+05i8/H1CgpRmoRUaN3KMI2gJMlwI=
Subject key identifier: 60:5F:FC:06:58:E8:C2:59:94:DE:7F:4C:3A:B7:79:E8:42:83:CB:72
Certificate issuer: /CN=075dc3f225722b809abe98778c3bfd7009e1cf4f
Certificate serial: 01942143EAB07613EF343890C97E907E4A36
Authority key identifier: 07:5D:C3:F2:25:72:2B:80:9A:BE:98:77:8C:3B:FD:70:09:E1:CF:4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B13D8iVyK4Cavph3jDv9cAnhz08.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/6c8c31-f999-4056-aa1b-234d0754239d/1/YF_8BljowlmU3n9MOrd56EKDy3I.roa
Signing time: Wed 01 Jan 2025 09:48:06 +0000
ROA not before: Wed 01 Jan 2025 09:48:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48298
IP address blocks: 94.199.40.0/21 maxlen: 21
94.199.41.0/24 maxlen: 24
94.199.42.0/24 maxlen: 24
94.199.43.0/24 maxlen: 24
94.199.44.0/24 maxlen: 24
94.199.45.0/24 maxlen: 24
94.199.46.0/24 maxlen: 24
94.199.47.0/24 maxlen: 24
185.17.212.0/22 maxlen: 22
2a01:5bc0::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:43:ea:b0:76:13:ef:34:38:90:c9:7e:90:7e:4a:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=075dc3f225722b809abe98778c3bfd7009e1cf4f
Validity
Not Before: Jan 1 09:48:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=605ffc0658e8c25994de7f4c3ab779e84283cb72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:09:58:c3:e5:d8:a4:9c:7e:c5:19:34:06:75:
39:46:d9:61:92:09:45:00:dd:78:6e:14:42:5b:f9:
42:df:01:64:91:8b:b5:bb:5d:28:3d:10:ae:4b:1c:
0f:1b:02:38:40:35:a0:3e:74:74:70:1f:ad:4f:b6:
89:e7:1b:ae:d4:20:aa:d7:0c:59:a9:27:77:99:6a:
26:b5:e8:20:03:4e:a0:0d:6a:5c:1d:e3:22:f0:70:
4d:ec:63:e6:79:38:a3:bf:ab:b5:fc:59:f2:9a:bf:
6d:06:2b:c9:a4:a2:5f:e1:11:d5:f5:29:73:58:51:
e3:94:92:34:d1:9b:b1:92:95:73:bb:3d:77:19:56:
27:da:d5:79:2b:f4:09:eb:73:e0:03:60:34:5f:6d:
c5:a9:3c:88:e3:bf:61:bf:96:7b:67:f5:12:74:57:
c4:40:68:76:c5:58:f7:de:80:26:f2:df:fb:c1:e9:
62:4d:98:5c:b9:a7:f2:b4:7f:d5:a7:fa:f6:1a:a4:
ae:67:19:51:58:30:17:cd:1c:f2:99:27:67:d7:cf:
d9:d6:c4:27:b8:4c:49:a1:38:12:56:3b:67:43:57:
f9:48:5a:de:1e:86:7b:4a:b4:33:ce:09:93:6e:b4:
f7:fd:10:44:6f:c6:7b:87:48:f8:4e:b9:1a:c2:c4:
82:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:5F:FC:06:58:E8:C2:59:94:DE:7F:4C:3A:B7:79:E8:42:83:CB:72
X509v3 Authority Key Identifier:
keyid:07:5D:C3:F2:25:72:2B:80:9A:BE:98:77:8C:3B:FD:70:09:E1:CF:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B13D8iVyK4Cavph3jDv9cAnhz08.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/6c8c31-f999-4056-aa1b-234d0754239d/1/YF_8BljowlmU3n9MOrd56EKDy3I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/6c8c31-f999-4056-aa1b-234d0754239d/1/B13D8iVyK4Cavph3jDv9cAnhz08.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.199.40.0/21
185.17.212.0/22
IPv6:
2a01:5bc0::/32
Signature Algorithm: sha256WithRSAEncryption
0b:2d:76:20:e2:85:a9:b6:de:1d:cd:16:e5:58:c9:14:94:35:
73:4b:49:d5:ee:f0:2f:74:c1:ee:e1:2e:ea:72:a8:8a:55:f0:
e3:9e:7f:3f:d5:cc:c0:91:a9:cf:b1:7c:54:3f:54:7a:06:9d:
c3:0d:22:99:d9:20:f0:ef:50:21:7c:97:60:6d:92:6b:f8:4f:
3e:84:c5:3b:11:cb:a3:7b:2f:34:3a:de:15:12:fc:3d:0d:3c:
95:c1:76:b3:f9:10:cf:24:91:34:a9:07:e8:b8:a0:02:b9:8c:
19:17:09:f0:89:63:07:d9:e1:ff:1f:8e:e8:d4:5a:d3:64:1f:
b0:ab:8e:24:ea:97:94:51:12:ed:a3:9e:61:9f:c6:4d:2c:c9:
e0:69:a7:67:8e:68:a3:8e:2d:51:8f:97:1d:88:25:0e:95:19:
08:4e:1a:2f:fa:af:31:71:ad:01:bd:90:41:4a:33:99:c5:29:
9a:9e:70:2d:be:39:e4:a2:11:ef:8d:2e:5c:ad:57:38:a3:f9:
41:79:3a:0a:d5:f1:3a:2f:ad:57:ec:87:9e:06:0e:f7:09:ff:
0c:9d:37:b4:d0:5b:b5:e3:a1:b2:f9:4b:04:74:f8:c3:64:a4:
2f:c9:3a:91:11:93:c1:93:5e:53:f2:e5:9c:7d:ad:dc:8a:30:
34:05:2e:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 17:03:31 2025 by rpki-client