Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/354430-54bc-455e-b0d1-7cd508f73364/1/ymEXcJVVoGyICrDxKsSN1clsK5E.roa
File: ymEXcJVVoGyICrDxKsSN1clsK5E.roa (raw, json)
Hash identifier: AJjBik7pMke5JpIJlFEXV/dLTYXuYObLdzj39aIHrMw=
Subject key identifier: CA:61:17:70:95:55:A0:6C:88:0A:B0:F1:2A:C4:8D:D5:C9:6C:2B:91
Certificate issuer: /CN=8f9a4670146ad880f14bada4b2762b613ddf1d18
Certificate serial: 019424457A037C8DBE63D5C087AA9855EEDE
Authority key identifier: 8F:9A:46:70:14:6A:D8:80:F1:4B:AD:A4:B2:76:2B:61:3D:DF:1D:18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j5pGcBRq2IDxS62ksnYrYT3fHRg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/354430-54bc-455e-b0d1-7cd508f73364/1/ymEXcJVVoGyICrDxKsSN1clsK5E.roa
Signing time: Wed 01 Jan 2025 23:48:40 +0000
ROA not before: Wed 01 Jan 2025 23:48:40 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60901
IP address blocks: 185.241.86.0/24 maxlen: 24
185.241.87.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:45:7a:03:7c:8d:be:63:d5:c0:87:aa:98:55:ee:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f9a4670146ad880f14bada4b2762b613ddf1d18
Validity
Not Before: Jan 1 23:48:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ca6117709555a06c880ab0f12ac48dd5c96c2b91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:5f:1f:f7:7f:62:71:1f:fa:68:5a:f4:d7:1f:
f6:dd:87:2a:0a:92:f0:61:65:e1:e5:54:4d:e1:aa:
ce:9f:ec:88:c7:b1:da:3c:a2:cc:68:8d:ff:cc:88:
0e:7b:20:3e:c1:db:83:b6:6e:a7:5e:26:b5:f0:83:
8a:98:0a:4e:43:8c:cf:17:6d:77:11:eb:5c:69:d9:
a4:2f:3a:7f:df:2b:3f:5a:47:c3:b5:ec:86:9b:bb:
15:a4:71:73:fe:54:9a:f0:da:4f:f6:ec:37:25:f0:
65:92:f1:a9:db:43:80:05:f5:34:57:b3:dd:07:97:
26:50:b2:18:ff:6f:45:29:7c:8a:ea:10:b6:df:3f:
99:4c:d7:62:05:dc:cb:3f:6f:4d:cc:c5:38:f3:e9:
d8:36:8d:b3:54:1b:d9:fe:cd:40:b8:6d:62:76:e5:
c6:ac:80:7c:ea:d2:d3:78:58:be:d6:fc:88:4b:87:
2f:13:ec:aa:55:9a:81:1c:30:75:b4:66:36:ed:35:
85:d5:5d:c8:2f:dc:10:fe:71:b8:7c:2d:7c:4e:a9:
ad:5d:8b:11:38:d0:29:73:bb:35:d3:bc:2a:31:a0:
d9:9f:d0:52:de:e0:8f:41:21:be:d1:3f:51:86:72:
a1:bd:10:3f:25:4c:00:8d:bd:8c:5f:55:d3:4f:58:
a0:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:61:17:70:95:55:A0:6C:88:0A:B0:F1:2A:C4:8D:D5:C9:6C:2B:91
X509v3 Authority Key Identifier:
keyid:8F:9A:46:70:14:6A:D8:80:F1:4B:AD:A4:B2:76:2B:61:3D:DF:1D:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j5pGcBRq2IDxS62ksnYrYT3fHRg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/354430-54bc-455e-b0d1-7cd508f73364/1/ymEXcJVVoGyICrDxKsSN1clsK5E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/354430-54bc-455e-b0d1-7cd508f73364/1/j5pGcBRq2IDxS62ksnYrYT3fHRg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.241.86.0/23
Signature Algorithm: sha256WithRSAEncryption
10:81:5a:cc:c3:32:26:f1:79:03:4e:ed:73:a6:b4:c1:39:62:
50:74:1e:72:63:c0:c4:ed:81:9b:b7:98:97:53:a6:f2:9b:7f:
4f:93:71:9f:83:76:ed:58:17:4d:b8:aa:d3:bd:2c:f9:05:e2:
bf:87:a5:23:93:57:65:81:d5:c3:99:13:00:ce:d8:79:c0:8b:
87:ee:41:80:cc:5a:79:92:4b:d6:c9:64:fb:49:b9:6e:e9:e2:
0d:99:8a:ee:61:dd:e8:1f:af:04:df:3e:77:06:19:b2:0d:cc:
64:98:fb:f6:f4:65:b3:db:a5:c7:62:18:03:5a:12:86:4c:a5:
77:03:d3:a3:0f:10:86:54:a2:29:d5:c3:7c:ce:1c:2c:8f:56:
26:35:fa:58:71:8d:db:f0:42:d4:ea:4c:69:1b:83:5f:ec:da:
94:c6:c2:29:be:31:8c:b3:3d:d7:4d:bb:ed:df:81:e1:4e:70:
9b:31:ed:5b:cc:f4:41:c5:3b:56:e0:44:33:02:a9:ad:56:e1:
54:2c:be:d6:69:59:20:8f:40:e2:17:5c:7c:e5:8a:dd:6a:b1:
8a:3f:ea:18:1d:6a:5f:a9:66:09:bc:b1:fa:83:2b:8e:de:b5:
d9:80:d5:05:38:0b:b9:91:7b:12:18:8d:21:07:ca:dc:f6:0e:
a6:73:d5:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:17:21 2025 by rpki-client