Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/25b7b8-c302-4dda-898a-4825e18d7301/1/ysLpSrgnmmTzkhRVlzuv5FBWJwk.roa
File: ysLpSrgnmmTzkhRVlzuv5FBWJwk.roa (raw, json)
Hash identifier: +DWvNK3pPfAt+iVhG8TMJlLT0Gf6syZ46fMRz7iZ4B8=
Subject key identifier: CA:C2:E9:4A:B8:27:9A:64:F3:92:14:55:97:3B:AF:E4:50:56:27:09
Certificate issuer: /CN=79bb7749abde6f5da4eb1c6ed1c57681617846b0
Certificate serial: 019427477A527506E49832C0DA2FF5146564
Authority key identifier: 79:BB:77:49:AB:DE:6F:5D:A4:EB:1C:6E:D1:C5:76:81:61:78:46:B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ebt3Saveb12k6xxu0cV2gWF4RrA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/25b7b8-c302-4dda-898a-4825e18d7301/1/ysLpSrgnmmTzkhRVlzuv5FBWJwk.roa
Signing time: Thu 02 Jan 2025 13:49:43 +0000
ROA not before: Thu 02 Jan 2025 13:49:43 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 15623
IP address blocks: 185.157.0.0/23 maxlen: 23
185.157.2.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:7a:52:75:06:e4:98:32:c0:da:2f:f5:14:65:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79bb7749abde6f5da4eb1c6ed1c57681617846b0
Validity
Not Before: Jan 2 13:49:43 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cac2e94ab8279a64f3921455973bafe450562709
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:7e:3e:d6:3d:7b:85:aa:69:5d:19:98:b9:81:
95:49:6b:2e:87:97:70:3a:6a:a5:11:b7:66:a4:e0:
7b:8f:7d:82:a1:15:1c:9b:48:2e:78:cb:88:ba:48:
09:6b:a5:64:fe:86:6a:90:22:b2:02:f8:db:13:3a:
7d:ea:64:91:f2:ff:85:38:32:b8:d6:c7:69:cb:4b:
8a:48:fe:da:96:1e:a3:8b:3f:8a:96:60:ea:27:c6:
a0:c8:76:3b:91:30:78:6b:e3:c6:e4:81:c8:0b:72:
4f:67:8f:4a:eb:72:bb:d6:bc:ea:59:35:97:dc:f3:
f6:db:e8:52:23:9c:33:61:0a:91:52:cc:d1:fa:db:
6d:d0:e7:1d:a7:14:8f:f3:2c:de:c4:19:0a:4c:0a:
ef:1e:1a:3c:79:91:7a:17:06:38:2a:30:af:ea:a3:
de:bc:df:59:c3:0c:0c:08:e9:d3:4f:92:57:b4:4a:
92:45:e7:00:8f:3e:31:50:e1:e6:5c:d4:19:8f:0d:
36:eb:d1:a0:09:a8:0d:11:00:7c:4a:be:cd:a0:54:
b5:a6:b8:2b:96:9c:21:ed:f0:d1:08:92:83:e4:96:
e6:d7:44:c8:02:a5:ca:ed:57:d4:59:14:6b:d4:28:
3e:78:d5:6f:4c:9e:dc:83:71:71:c3:39:f7:95:f1:
33:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:C2:E9:4A:B8:27:9A:64:F3:92:14:55:97:3B:AF:E4:50:56:27:09
X509v3 Authority Key Identifier:
keyid:79:BB:77:49:AB:DE:6F:5D:A4:EB:1C:6E:D1:C5:76:81:61:78:46:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ebt3Saveb12k6xxu0cV2gWF4RrA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/25b7b8-c302-4dda-898a-4825e18d7301/1/ysLpSrgnmmTzkhRVlzuv5FBWJwk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/25b7b8-c302-4dda-898a-4825e18d7301/1/ebt3Saveb12k6xxu0cV2gWF4RrA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.157.0.0-185.157.2.255
Signature Algorithm: sha256WithRSAEncryption
4a:51:1e:1d:d3:86:c6:ba:ce:df:1d:16:04:b3:f6:3c:94:34:
fe:4d:0f:97:18:92:3b:20:05:da:f5:6b:b5:7d:62:07:97:0c:
fa:97:4d:5a:4a:d7:c7:fe:e9:4c:88:f6:8c:13:1a:63:69:43:
c3:95:f4:fe:6b:7a:4a:96:7a:b3:76:ca:4f:69:15:41:0d:ca:
93:f2:08:96:49:84:44:e1:78:00:d1:22:87:ad:db:cb:c8:17:
97:95:a4:b7:65:2a:47:d3:8e:31:1a:f4:7e:7e:f7:58:b0:34:
15:80:14:23:21:35:bf:91:4b:1d:dd:00:b5:01:fc:6b:ca:f8:
30:4a:12:5d:8c:19:77:c1:a7:09:a7:e9:6c:6d:da:47:b5:98:
33:01:5e:a1:65:dd:fe:c2:a4:ee:ce:15:d4:54:37:38:dd:f9:
a0:20:fc:8d:61:11:d5:51:40:1b:c2:b1:a3:01:b1:a2:43:ff:
aa:82:5a:21:97:1d:6a:72:c8:df:39:b9:24:05:0b:68:93:9c:
7a:2d:09:ba:fb:10:79:ef:7a:d7:0b:35:b9:b4:6b:61:e9:ad:
a9:fd:73:f8:e9:57:e3:68:0c:5e:15:f6:1e:d6:c9:2b:f0:39:
a0:0d:ee:50:66:53:76:61:55:ac:c3:48:77:9d:c4:b1:90:5c:
23:23:3d:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:20:00 2025 by rpki-client