Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/df1512-3fa4-40fc-8dca-6437acd8a3cf/1/YP_ojssdziwcanJcHJab_qTOmuY.roa
File: YP_ojssdziwcanJcHJab_qTOmuY.roa (raw, json)
Hash identifier: U3A2fg6Wi6oAAnLmfskViTy7rAEB6sn2k8/iuWaNKoM=
Subject key identifier: 60:FF:E8:8E:CB:1D:CE:2C:1C:6A:72:5C:1C:96:9B:FE:A4:CE:9A:E6
Certificate issuer: /CN=607c0e942bf80a7d57490cc7bb04285b02aeff7a
Certificate serial: 01942143EBF4B551E6EC2EAFA1F3D00D2BF5
Authority key identifier: 60:7C:0E:94:2B:F8:0A:7D:57:49:0C:C7:BB:04:28:5B:02:AE:FF:7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YHwOlCv4Cn1XSQzHuwQoWwKu_3o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/df1512-3fa4-40fc-8dca-6437acd8a3cf/1/YP_ojssdziwcanJcHJab_qTOmuY.roa
Signing time: Wed 01 Jan 2025 09:48:06 +0000
ROA not before: Wed 01 Jan 2025 09:48:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 198761
IP address blocks: 91.242.223.0/24 maxlen: 24
91.243.64.0/23 maxlen: 24
185.25.228.0/22 maxlen: 24
185.222.100.0/22 maxlen: 24
213.5.236.0/23 maxlen: 24
2a04:3380::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:43:eb:f4:b5:51:e6:ec:2e:af:a1:f3:d0:0d:2b:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=607c0e942bf80a7d57490cc7bb04285b02aeff7a
Validity
Not Before: Jan 1 09:48:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=60ffe88ecb1dce2c1c6a725c1c969bfea4ce9ae6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:cd:93:ae:2f:2e:94:04:3e:a5:bd:48:ed:a1:
b7:5a:c1:34:7e:bb:54:d4:6b:5f:4e:58:27:ee:88:
a2:19:3d:59:b8:2c:56:82:e5:cd:d3:8d:ca:33:0f:
c6:4f:88:df:70:92:e5:a7:cd:5b:5d:6f:2b:1c:0e:
22:ea:b5:30:87:4a:d2:0d:e6:73:cc:0d:42:f0:60:
6b:f7:64:1c:44:92:4a:81:f8:4b:13:35:2f:18:7d:
03:18:a6:ac:35:1f:73:11:d2:0d:2f:7e:35:73:2d:
18:28:da:91:ca:08:fc:c9:22:6f:3a:b6:f1:22:ee:
7b:fc:9f:0c:1b:df:89:36:ea:8b:4d:01:3a:5e:ee:
56:f4:f1:60:da:50:c1:1f:aa:a9:30:91:9f:69:06:
69:59:f4:bc:28:1a:eb:d8:fd:bc:91:ca:8b:a9:c4:
31:2f:08:d2:93:64:ab:b8:14:ac:ea:b3:61:37:16:
63:22:01:5e:2b:57:ee:d4:fc:b0:60:59:04:aa:80:
f4:5f:ba:6b:ac:ba:9d:eb:89:2e:99:71:5c:3f:65:
56:cb:d2:c9:9d:36:4f:3d:2f:2c:f5:16:87:b0:93:
85:c8:ce:11:72:6c:26:4d:f4:f0:3a:71:64:97:d7:
55:61:09:e0:25:0d:aa:33:53:28:db:53:35:40:11:
65:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:FF:E8:8E:CB:1D:CE:2C:1C:6A:72:5C:1C:96:9B:FE:A4:CE:9A:E6
X509v3 Authority Key Identifier:
keyid:60:7C:0E:94:2B:F8:0A:7D:57:49:0C:C7:BB:04:28:5B:02:AE:FF:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YHwOlCv4Cn1XSQzHuwQoWwKu_3o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/df1512-3fa4-40fc-8dca-6437acd8a3cf/1/YP_ojssdziwcanJcHJab_qTOmuY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/df1512-3fa4-40fc-8dca-6437acd8a3cf/1/YHwOlCv4Cn1XSQzHuwQoWwKu_3o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.242.223.0/24
91.243.64.0/23
185.25.228.0/22
185.222.100.0/22
213.5.236.0/23
IPv6:
2a04:3380::/29
Signature Algorithm: sha256WithRSAEncryption
3e:a9:d0:5c:6a:c5:2c:b5:c0:0e:2c:c1:e4:50:3c:3a:c1:6c:
56:bf:f3:96:0b:e6:28:70:ba:93:92:e2:0c:ab:c8:46:36:1b:
e0:1b:85:a4:65:39:44:c2:7d:8a:d8:ca:29:75:12:8d:8d:0b:
8f:04:42:4a:88:c2:df:5f:c4:46:90:4f:ee:c9:c9:d8:11:95:
03:97:94:d4:f6:12:b9:48:28:54:88:a6:24:2b:a3:b3:b3:57:
11:82:5b:10:d7:5d:ec:c1:c2:2c:5b:31:b6:be:41:ed:20:cf:
d8:05:bc:5b:bd:14:a8:19:c5:f1:74:44:b2:60:ab:87:4e:a9:
8e:1b:80:f3:1a:4f:5d:01:16:ae:b4:b5:5c:fc:f6:47:0f:19:
91:29:c5:ad:e3:60:1f:6b:a8:d8:e4:65:23:2b:a5:6b:3e:af:
99:c8:cf:4b:71:ba:55:97:f1:45:5e:90:d2:bc:ed:b7:d8:c9:
b4:b2:f9:0b:cf:d0:e0:b8:8c:f4:42:f0:19:f4:26:e3:93:aa:
55:ea:aa:73:ca:3f:97:4f:3e:8b:ce:ed:4a:1c:b1:24:17:86:
73:a0:7f:ac:27:67:b1:4d:5a:bc:2d:f1:97:97:7a:4b:7c:cc:
60:8a:df:9a:a3:9c:e4:57:e7:38:ba:bd:94:f4:f0:57:a5:15:
e0:23:90:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 03:27:06 2025 by rpki-client