Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/1bVapWbFn9iACpJtblnwsnQ0oC0.roa
File: 1bVapWbFn9iACpJtblnwsnQ0oC0.roa (raw, json)
Hash identifier: RjUFFGOEfzoNfcWn6L0GaGd8IM606Tx8LsS0pEU4GLU=
Subject key identifier: D5:B5:5A:A5:66:C5:9F:D8:80:0A:92:6D:6E:59:F0:B2:74:34:A0:2D
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 0195EB70739599D6A06C6BF99B78AAD515AB
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/1bVapWbFn9iACpJtblnwsnQ0oC0.roa
Signing time: Mon 31 Mar 2025 09:02:50 +0000
ROA not before: Mon 31 Mar 2025 09:02:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 61317
IP address blocks: 185.199.159.0/24 maxlen: 24
185.206.248.0/24 maxlen: 24
185.206.251.0/24 maxlen: 24
185.209.36.0/23 maxlen: 24
185.210.152.0/24 maxlen: 24
185.210.153.0/24 maxlen: 24
185.210.154.0/24 maxlen: 24
185.210.155.0/24 maxlen: 24
185.218.102.0/24 maxlen: 24
185.223.76.0/24 maxlen: 24
185.225.2.0/24 maxlen: 24
185.227.145.0/24 maxlen: 24
185.234.20.0/22 maxlen: 24
185.234.23.0/24 maxlen: 24
185.238.228.0/22 maxlen: 24
185.240.120.0/23 maxlen: 24
185.251.231.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:eb:70:73:95:99:d6:a0:6c:6b:f9:9b:78:aa:d5:15:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Mar 31 09:02:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d5b55aa566c59fd8800a926d6e59f0b27434a02d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:d5:30:16:5f:e4:0e:16:12:0c:f7:66:13:89:
3e:cb:1a:4c:f5:66:a7:14:a3:7d:1a:3e:27:79:96:
4c:32:e9:6d:ca:a5:32:f4:2d:36:71:83:fe:cd:03:
71:4e:60:de:e3:f9:7f:58:35:bc:f3:0e:c5:7b:19:
e4:5b:a3:b5:6d:50:32:4f:11:fd:c7:6a:29:cc:31:
45:16:13:25:1d:00:d9:04:87:c9:bd:e7:7b:64:de:
33:38:a2:42:c1:bf:be:7f:bf:7e:da:9f:bc:7e:e6:
18:51:1c:b0:78:46:f0:2a:95:3f:81:f9:c3:63:d6:
08:2e:d2:a7:06:d4:9b:4d:c3:25:ea:16:d3:97:3d:
d5:82:56:e4:b6:26:ee:46:24:63:09:f9:4e:67:55:
4f:c2:30:85:86:fb:54:5e:f9:42:74:6f:26:30:e3:
64:f3:34:d3:f9:1d:45:58:41:db:42:fc:17:34:be:
6e:12:fb:85:57:02:62:dd:9d:e6:ea:ce:f5:98:e2:
e0:34:66:ee:02:aa:fc:65:ef:f7:1e:c6:c3:67:3b:
a6:69:22:06:d7:66:42:df:d0:08:76:60:a9:82:0e:
1f:b5:b0:b3:ee:b7:e7:c5:1b:a6:45:8b:cb:ca:1b:
bb:54:cb:3a:d6:6e:54:ba:09:ef:96:a8:ea:06:8b:
9f:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:B5:5A:A5:66:C5:9F:D8:80:0A:92:6D:6E:59:F0:B2:74:34:A0:2D
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/1bVapWbFn9iACpJtblnwsnQ0oC0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.199.159.0/24
185.206.248.0/24
185.206.251.0/24
185.209.36.0/23
185.210.152.0/22
185.218.102.0/24
185.223.76.0/24
185.225.2.0/24
185.227.145.0/24
185.234.20.0/22
185.238.228.0/22
185.240.120.0/23
185.251.231.0/24
Signature Algorithm: sha256WithRSAEncryption
af:1d:b0:60:8f:f1:65:3b:96:7e:ad:db:ef:14:d9:43:0e:2b:
f7:d8:05:99:9b:34:55:e9:56:81:9f:6c:69:f4:e5:90:b3:7d:
45:67:94:12:15:c6:ee:81:90:f1:0b:10:1a:0e:9d:0a:a0:de:
4b:bd:78:95:95:8e:82:5a:73:73:dc:97:da:e8:db:8d:55:ff:
91:1f:4c:ec:dc:f3:c4:df:d2:e7:84:43:8e:9c:82:20:5d:9c:
6c:52:12:f5:66:f9:ab:99:09:45:8f:86:75:d7:e2:82:a0:a0:
85:b6:1a:3a:13:b4:ec:1e:d7:40:1e:07:eb:4d:6c:40:09:7c:
3a:f8:3e:3e:e3:67:60:0f:99:0e:d0:fc:4f:a8:d7:23:51:b0:
ba:d0:97:b6:f4:00:12:b6:a6:b7:ca:6e:76:dd:57:52:a1:62:
75:bd:25:b3:b8:4d:06:04:34:0f:ef:7e:69:83:f1:c9:a6:34:
db:e7:a0:2f:06:26:a1:a7:9b:43:86:30:a2:da:5e:0a:bd:3c:
5b:6d:67:9b:95:c6:f0:08:25:cd:ea:18:c5:15:50:c3:42:bd:
6b:86:36:dd:10:a0:20:e5:cb:64:f3:a1:52:b9:56:80:92:c7:
36:b3:84:91:a2:50:b2:6c:d2:39:98:bd:b8:f2:a7:b7:a8:be:
03:ff:f2:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:12 2025 by rpki-client on console.sobornost.net