Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/fbc141-99fc-4f83-b585-0fe6f55db3f6/1/yO3ImEa01zpDmLG6tX70-TkpvRo.roa
File: yO3ImEa01zpDmLG6tX70-TkpvRo.roa (raw, json)
Hash identifier: RSJIqaRU6YhdiXZuFYexny4+76aM6Lhla9gt2T8Ziok=
Subject key identifier: C8:ED:C8:98:46:B4:D7:3A:43:98:B1:BA:B5:7E:F4:F9:39:29:BD:1A
Certificate issuer: /CN=029e98336f6a6cc9dbcf1ecb4895580f094e3e2b
Certificate serial: 019421B21D036F19CBD9101E7F86BF1E6655
Authority key identifier: 02:9E:98:33:6F:6A:6C:C9:DB:CF:1E:CB:48:95:58:0F:09:4E:3E:2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ap6YM29qbMnbzx7LSJVYDwlOPis.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/fbc141-99fc-4f83-b585-0fe6f55db3f6/1/yO3ImEa01zpDmLG6tX70-TkpvRo.roa
Signing time: Wed 01 Jan 2025 11:48:28 +0000
ROA not before: Wed 01 Jan 2025 11:48:28 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8697
IP address blocks: 185.98.224.0/22 maxlen: 24
212.34.0.0/19 maxlen: 24
213.139.32.0/19 maxlen: 24
2a00:18d8::/29 maxlen: 64
2a00:18d8::/32 maxlen: 64
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b2:1d:03:6f:19:cb:d9:10:1e:7f:86:bf:1e:66:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=029e98336f6a6cc9dbcf1ecb4895580f094e3e2b
Validity
Not Before: Jan 1 11:48:28 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c8edc89846b4d73a4398b1bab57ef4f93929bd1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:64:bb:6b:c1:40:75:b9:68:ca:d1:9f:0d:ce:
11:44:44:9e:70:e0:28:27:e4:d3:e0:b2:66:70:c8:
3b:a4:08:9c:10:44:24:b0:75:e9:fb:50:4d:d7:97:
30:57:4f:dd:7a:b7:5e:1a:f2:50:55:0e:74:6a:45:
45:01:37:42:33:7b:0b:f3:1c:73:0f:69:b3:9e:a5:
39:a2:8e:55:25:cb:32:10:2e:eb:3d:89:dd:1c:d4:
9e:8b:82:47:2a:86:5c:97:d9:81:31:98:c4:c0:76:
7d:5b:0a:34:b1:d3:ba:dd:5e:e2:93:21:8f:fc:64:
e3:24:9c:15:4c:ad:1b:ce:d1:19:ec:80:e9:f7:ee:
bc:4c:25:69:70:43:b1:5c:fd:80:eb:a2:7d:b8:5c:
2a:6c:69:49:75:9f:c1:bf:4c:9f:ec:60:4e:29:d7:
d5:16:c3:78:8c:d7:fe:6e:5d:3b:c8:82:42:37:78:
6e:05:ba:07:c5:c7:25:45:47:15:48:54:51:96:fa:
38:9b:03:c9:11:d1:6a:d8:f1:47:a1:c0:40:21:b5:
17:9e:49:be:81:7e:98:a2:cb:70:7a:e2:bf:06:66:
6c:1b:8e:e5:f0:0c:e3:dd:9e:e7:d9:ae:ff:33:2e:
17:21:9f:25:a2:98:e0:70:94:7f:40:91:56:73:29:
c9:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:ED:C8:98:46:B4:D7:3A:43:98:B1:BA:B5:7E:F4:F9:39:29:BD:1A
X509v3 Authority Key Identifier:
keyid:02:9E:98:33:6F:6A:6C:C9:DB:CF:1E:CB:48:95:58:0F:09:4E:3E:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ap6YM29qbMnbzx7LSJVYDwlOPis.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/fbc141-99fc-4f83-b585-0fe6f55db3f6/1/yO3ImEa01zpDmLG6tX70-TkpvRo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/fbc141-99fc-4f83-b585-0fe6f55db3f6/1/Ap6YM29qbMnbzx7LSJVYDwlOPis.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.98.224.0/22
212.34.0.0/19
213.139.32.0/19
IPv6:
2a00:18d8::/29
Signature Algorithm: sha256WithRSAEncryption
ab:a3:5b:2f:2a:e1:0e:bb:3d:1a:1b:e9:75:a5:ac:23:7c:d3:
82:1f:92:8b:72:ec:b8:70:ff:e6:f4:78:e9:49:a3:3a:1b:a6:
04:55:1a:35:37:58:9d:8b:d8:77:34:ae:fa:94:a0:22:5e:c5:
64:61:5e:86:bd:37:b6:84:cc:59:bd:27:d6:ea:37:e6:73:71:
9c:2f:70:59:79:01:55:9e:10:39:ca:0a:0f:0c:0a:f0:3a:67:
f7:99:5d:ce:1a:77:6e:d0:c5:65:8e:ec:91:c4:fa:7f:a2:5b:
ff:15:90:4f:23:58:46:47:2d:db:b2:76:db:4a:8f:5d:f3:50:
1c:59:89:43:ff:1c:4c:4a:d8:2d:56:88:7d:88:d3:a7:f1:e6:
1d:d4:ab:d9:02:dc:ca:c3:37:97:2f:d5:38:6a:50:d3:2a:4c:
0b:33:a6:f9:3f:4d:8d:68:0d:b8:ef:da:2d:d1:49:17:cd:83:
c2:3e:8e:de:02:fd:ae:60:b5:20:27:9d:99:7e:5d:75:5b:15:
c4:4d:4a:ce:24:e1:33:5c:9a:65:35:e2:08:3c:93:0c:52:ae:
1b:fe:7a:60:4e:e4:05:d9:6d:0d:fc:ed:64:54:98:cf:cd:cc:
20:7f:76:80:06:1c:3a:fd:2a:35:dd:ed:45:d6:62:c5:d0:36:
3d:99:28:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:45 2025 by rpki-client on console.sobornost.net