Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/73764d-f250-4e3d-bb6f-21c4c6d6b6cb/1/yMsvkbq8K0IM2cns7HVpjbtpaM8.roa
File: yMsvkbq8K0IM2cns7HVpjbtpaM8.roa (raw, json)
Hash identifier: TJjLQAcsYRitHc7okesLeLJv1CF6d2BgyzzxAXCqX+s=
Subject key identifier: C8:CB:2F:91:BA:BC:2B:42:0C:D9:C9:EC:EC:75:69:8D:BB:69:68:CF
Certificate issuer: /CN=ea641eade1955dd4b907916b99e021039ecc33e8
Certificate serial: 019424B33CD14B6E6DEC8F6EDF503F9CD448
Authority key identifier: EA:64:1E:AD:E1:95:5D:D4:B9:07:91:6B:99:E0:21:03:9E:CC:33:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6mQereGVXdS5B5FrmeAhA57MM-g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/73764d-f250-4e3d-bb6f-21c4c6d6b6cb/1/yMsvkbq8K0IM2cns7HVpjbtpaM8.roa
Signing time: Thu 02 Jan 2025 01:48:33 +0000
ROA not before: Thu 02 Jan 2025 01:48:33 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 203180
IP address blocks: 185.142.172.0/22 maxlen: 24
2a0d:540::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:3c:d1:4b:6e:6d:ec:8f:6e:df:50:3f:9c:d4:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ea641eade1955dd4b907916b99e021039ecc33e8
Validity
Not Before: Jan 2 01:48:33 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c8cb2f91babc2b420cd9c9ecec75698dbb6968cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:af:a9:8f:af:d0:0d:90:91:43:5e:37:e1:02:
11:a9:a4:6b:29:95:38:64:3d:70:11:af:43:ed:d7:
fa:e2:0b:c0:19:a0:46:1a:1d:9a:22:da:d1:1b:1c:
60:f4:13:37:33:f5:b6:73:a7:c2:d7:f7:a9:e1:54:
6b:27:ba:63:45:9e:eb:ab:2a:2a:81:33:77:ef:2e:
1a:7c:c5:03:b8:9a:91:13:5e:c4:69:ca:80:a0:2e:
b3:a4:7e:a0:94:a4:4d:1d:63:0c:0a:0b:ed:33:72:
dd:95:a9:e0:aa:34:0d:f2:3a:32:7a:de:2c:f5:2b:
d1:90:e8:62:8e:03:92:a1:66:2e:08:2e:1d:eb:41:
7a:e0:10:a3:a5:cd:e2:1c:5e:fb:c0:0b:96:cc:63:
37:89:34:58:28:23:fd:e4:41:cd:84:8e:be:e9:a4:
8a:b6:52:0a:85:46:14:b0:27:fb:63:2b:0f:78:eb:
31:7b:2b:47:c5:83:f7:5b:9d:fd:21:12:25:8f:5d:
41:25:d0:fe:b7:b8:29:48:48:1f:d4:f6:1c:2d:32:
b1:f0:4e:0a:f1:fb:ae:17:1f:c1:1c:42:87:32:21:
6f:ab:47:be:6a:61:e5:0a:b8:03:38:22:d1:a9:08:
70:30:c5:b4:60:21:53:24:ab:01:70:55:a3:b9:39:
58:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:CB:2F:91:BA:BC:2B:42:0C:D9:C9:EC:EC:75:69:8D:BB:69:68:CF
X509v3 Authority Key Identifier:
keyid:EA:64:1E:AD:E1:95:5D:D4:B9:07:91:6B:99:E0:21:03:9E:CC:33:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6mQereGVXdS5B5FrmeAhA57MM-g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/73764d-f250-4e3d-bb6f-21c4c6d6b6cb/1/yMsvkbq8K0IM2cns7HVpjbtpaM8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/73764d-f250-4e3d-bb6f-21c4c6d6b6cb/1/6mQereGVXdS5B5FrmeAhA57MM-g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.142.172.0/22
IPv6:
2a0d:540::/29
Signature Algorithm: sha256WithRSAEncryption
5f:66:f3:fc:64:b2:58:9c:b5:0b:0b:c9:ff:e8:01:fa:af:d8:
3b:96:f8:63:a9:41:71:86:1a:25:48:33:4a:b1:5b:83:19:be:
67:d6:4d:17:45:76:12:27:dd:f4:8e:d8:5e:5f:20:92:b6:a0:
c3:a3:ef:8d:57:33:48:af:54:66:75:83:44:a7:67:ea:2a:71:
02:86:04:77:ab:e1:52:8e:7a:34:ed:c2:57:12:ab:aa:34:3d:
d4:36:68:2b:f3:67:42:c3:2d:7f:31:3f:88:a3:1e:d4:2c:7d:
fa:6d:84:c4:ad:c5:dc:4f:59:5a:82:ec:30:2c:8b:fb:4c:18:
9b:77:e9:c8:eb:87:21:89:de:47:ce:24:a6:d5:38:cb:70:c9:
69:83:bd:49:96:06:66:5b:5e:4a:b2:d7:64:9b:03:45:12:96:
28:9b:bc:8f:30:4d:cc:28:93:6c:04:71:40:9b:89:c5:0a:25:
46:d3:f7:74:be:2a:d5:8c:8f:07:cc:41:e2:e5:d4:f9:1b:d6:
58:7f:ce:d3:62:4e:d3:cd:8a:95:07:db:c9:f5:c0:42:cb:4e:
43:b4:a2:bc:34:b2:63:95:d7:96:ce:be:c2:c9:97:bb:57:9a:
77:a8:cd:e7:11:e0:26:13:ee:78:db:73:7b:ff:e9:9e:f0:a8:
bc:6a:9e:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:53:39 2025 by rpki-client