Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/RYbhKK7tHxgiB0iumuvbe70aYcA.roa
File: RYbhKK7tHxgiB0iumuvbe70aYcA.roa (raw, json)
Hash identifier: mcLHW1Svayr+vckxiFQNEPmqrcbbkQS8jqyrHHktDY4=
Subject key identifier: 45:86:E1:28:AE:ED:1F:18:22:07:48:AE:9A:EB:DB:7B:BD:1A:61:C0
Certificate issuer: /CN=b72945f57103153a07854e74e227f2aec1c5f430
Certificate serial: 0194221FFEB56883B8FB003D0C972F3F498F
Authority key identifier: B7:29:45:F5:71:03:15:3A:07:85:4E:74:E2:27:F2:AE:C1:C5:F4:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/RYbhKK7tHxgiB0iumuvbe70aYcA.roa
Signing time: Wed 01 Jan 2025 13:48:29 +0000
ROA not before: Wed 01 Jan 2025 13:48:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44620
IP address blocks: 185.24.151.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:fe:b5:68:83:b8:fb:00:3d:0c:97:2f:3f:49:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b72945f57103153a07854e74e227f2aec1c5f430
Validity
Not Before: Jan 1 13:48:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4586e128aeed1f18220748ae9aebdb7bbd1a61c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:fc:30:48:2a:46:3e:60:68:49:29:d9:ce:56:
de:b2:6a:99:dd:90:6f:0b:bc:45:82:6e:fe:4d:2b:
24:e2:07:63:50:07:fe:80:5a:ad:12:3f:9f:9e:94:
76:79:c5:84:77:4c:b2:e0:ba:be:51:87:d9:50:dd:
ca:41:90:c1:1b:44:b0:4a:55:fc:fc:b1:93:43:15:
2a:bc:2e:29:a4:cb:a1:d5:2d:86:40:4b:92:81:e6:
07:a6:7a:97:c8:14:5d:a2:ad:ea:20:f8:c6:46:76:
1a:bd:b7:98:41:97:77:36:d3:96:ed:45:75:04:f2:
c7:ab:d6:22:a7:48:ce:fb:5c:e5:cd:5f:a3:33:48:
b9:6b:eb:e4:3a:1c:df:a8:41:a4:eb:48:e0:95:12:
3c:37:79:38:c2:97:b6:bd:ac:15:6e:11:67:5e:38:
00:22:d0:53:ce:33:61:0b:3f:2e:4a:d2:f5:7e:bc:
4c:27:8a:4e:05:23:3e:43:54:f8:35:b1:61:fb:35:
d9:6e:6c:ab:bb:e0:56:63:33:0a:b4:a4:25:d4:56:
00:e4:ce:0c:1e:ff:5b:04:44:e9:3d:e9:de:7b:91:
65:d1:64:11:a5:1b:3e:13:6f:20:2b:44:a4:5a:ab:
11:4d:66:08:ef:b5:93:97:89:db:59:c6:a5:90:13:
41:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:86:E1:28:AE:ED:1F:18:22:07:48:AE:9A:EB:DB:7B:BD:1A:61:C0
X509v3 Authority Key Identifier:
keyid:B7:29:45:F5:71:03:15:3A:07:85:4E:74:E2:27:F2:AE:C1:C5:F4:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/RYbhKK7tHxgiB0iumuvbe70aYcA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.24.151.0/24
Signature Algorithm: sha256WithRSAEncryption
78:67:04:c3:72:c0:c7:36:b7:e0:c6:f9:20:36:43:31:37:d8:
5d:e1:94:ed:a5:f5:c3:7e:74:f9:a3:87:41:4b:13:2a:88:87:
55:18:ba:e0:e7:f3:71:38:6b:ff:60:43:5f:9f:90:e3:ba:17:
32:09:93:39:86:30:28:35:8b:77:f5:10:86:59:78:fc:68:16:
fb:12:26:ad:63:cc:11:e3:30:7b:5b:57:b6:e3:1f:ca:98:60:
c4:04:68:51:04:b9:c0:74:ae:5a:84:71:a5:2d:a4:14:5f:19:
6d:35:6a:ce:0d:d1:9b:61:2d:5e:25:b7:ee:fb:96:fb:51:45:
3d:66:0d:39:39:6f:60:fa:a5:96:da:f3:7b:4e:95:a0:a0:cb:
e6:5f:3b:24:fe:64:dc:b3:fd:60:96:a3:26:41:31:d7:c7:5d:
d9:b5:39:85:f5:0c:5f:9a:cf:25:bf:83:3e:31:5c:ee:a6:55:
c9:81:87:2e:80:8f:04:74:4d:91:0e:05:a4:90:82:99:eb:d0:
f3:e8:e9:5c:68:6e:2d:a9:5c:27:45:e9:74:3a:03:3e:3f:b7:
20:83:df:df:90:33:de:9b:dd:28:9b:c1:cf:e6:99:dc:f2:d0:
38:7b:b8:76:9e:d6:e2:05:eb:33:21:98:3b:d2:53:f5:d2:2b:
67:be:2e:52
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQiH/61aIO4+wA9DJcvP0mPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI3Mjk0NWY1NzEwMzE1M2EwNzg1NGU3NGUyMjdmMmFlYzFj
NWY0MzAwHhcNMjUwMTAxMTM0ODI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0NTg2ZTEyOGFlZWQxZjE4MjIwNzQ4YWU5YWViZGI3YmJkMWE2MWMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuvwwSCpGPmBoSSnZzlbesmqZ3ZBv
C7xFgm7+TSsk4gdjUAf+gFqtEj+fnpR2ecWEd0yy4Lq+UYfZUN3KQZDBG0SwSlX8
/LGTQxUqvC4ppMuh1S2GQEuSgeYHpnqXyBRdoq3qIPjGRnYavbeYQZd3NtOW7UV1
BPLHq9Yip0jO+1zlzV+jM0i5a+vkOhzfqEGk60jglRI8N3k4wpe2vawVbhFnXjgA
ItBTzjNhCz8uStL1frxMJ4pOBSM+Q1T4NbFh+zXZbmyru+BWYzMKtKQl1FYA5M4M
Hv9bBETpPenee5Fl0WQRpRs+E28gK0SkWqsRTWYI77WTl4nbWcalkBNBSQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFEWG4Siu7R8YIgdIrprr23u9GmHAMB8GA1UdIwQY
MBaAFLcpRfVxAxU6B4VOdOIn8q7BxfQwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdHlsRjlYRURGVG9IaFU1MDRpZnlyc0hGOURBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS81ZjY5MDYtM2ZiMC00ZGZmLThkMDEt
MmEwOWNjNTNhODA1LzEvUlliaEtLN3RIeGdpQjBpdW11dmJlNzBhWWNBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MS81ZjY5MDYtM2ZiMC00ZGZmLThkMDEtMmEwOWNjNTNhODA1
LzEvdHlsRjlYRURGVG9IaFU1MDRpZnlyc0hGOURBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuRiXMA0G
CSqGSIb3DQEBCwUAA4IBAQB4ZwTDcsDHNrfgxvkgNkMxN9hd4ZTtpfXDfnT5o4dB
SxMqiIdVGLrg5/NxOGv/YENfn5DjuhcyCZM5hjAoNYt39RCGWXj8aBb7EiatY8wR
4zB7W1e24x/KmGDEBGhRBLnAdK5ahHGlLaQUXxltNWrODdGbYS1eJbfu+5b7UUU9
Zg05OW9g+qWW2vN7TpWgoMvmXzsk/mTcs/1glqMmQTHXx13ZtTmF9Qxfms8lv4M+
MVzuplXJgYcugI8EdE2RDgWkkIKZ69Dz6OlcaG4tqVwnRel0OgM+P7cgg9/fkDPe
m90om8HP5pnc8tA4e7h2ntbiBeszIZg70lP10itnvi5S
-----END CERTIFICATE-----
Generated at Fri Apr 25 10:04:10 2025 by rpki-client