Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/e4ccb1-ca25-4099-8273-3993aa324e1f/1/YY5vnq-WY3ttKAPBwWUwZDNoZ94.roa
File: YY5vnq-WY3ttKAPBwWUwZDNoZ94.roa (raw, json)
Hash identifier: otf25hemgRYV3JPKjRYvJ8q5HrlB5I1ctES0TPSG1ck=
Subject key identifier: 61:8E:6F:9E:AF:96:63:7B:6D:28:03:C1:C1:65:30:64:33:68:67:DE
Certificate issuer: /CN=6ce97cf4d8d0bc17b3af1d62c4d71488661bd212
Certificate serial: 019498557BF8FA35EF95D0E3CD06D29C8FD3
Authority key identifier: 6C:E9:7C:F4:D8:D0:BC:17:B3:AF:1D:62:C4:D7:14:88:66:1B:D2:12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bOl89NjQvBezrx1ixNcUiGYb0hI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/e4ccb1-ca25-4099-8273-3993aa324e1f/1/YY5vnq-WY3ttKAPBwWUwZDNoZ94.roa
Signing time: Fri 24 Jan 2025 12:42:06 +0000
ROA not before: Fri 24 Jan 2025 12:42:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205957
IP address blocks: 185.190.148.0/23 maxlen: 23
185.190.150.0/24 maxlen: 24
194.28.102.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:98:55:7b:f8:fa:35:ef:95:d0:e3:cd:06:d2:9c:8f:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ce97cf4d8d0bc17b3af1d62c4d71488661bd212
Validity
Not Before: Jan 24 12:42:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=618e6f9eaf96637b6d2803c1c1653064336867de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:45:56:73:78:e5:68:bb:ee:89:9f:1d:8b:bc:
31:71:f1:1a:82:95:9b:12:b3:07:23:83:6a:bd:91:
b2:0c:1d:04:6a:15:7b:3e:14:8b:11:6f:ef:62:48:
59:20:29:27:38:2c:a8:c4:74:23:21:24:5f:db:a4:
a9:fb:3e:40:cc:21:04:e8:e5:eb:d1:99:46:ed:cd:
34:58:61:e5:2a:e4:17:9e:c7:4f:62:de:6d:1e:52:
5d:2d:8f:71:e5:7c:68:16:06:b0:e9:b8:c1:b7:13:
76:e6:ea:92:0e:1a:af:f8:71:bf:5b:a2:67:f6:cc:
ca:fc:f5:1e:1c:e6:66:52:62:19:72:6d:b4:a9:c5:
c5:98:d2:97:7f:56:0e:59:19:b7:d8:cc:16:d1:b9:
96:34:48:ae:fa:e0:a0:54:a8:62:6f:65:41:f8:22:
f3:68:af:ba:6a:d3:21:8e:ea:dc:57:e3:15:8c:a4:
bb:07:a5:c1:6b:f4:76:f7:cd:0c:fe:3e:a6:d3:46:
7b:36:92:77:11:d0:50:a5:2e:45:9f:a0:0e:c8:fa:
88:43:1b:ca:20:17:20:a2:69:c3:26:22:d0:48:bb:
45:42:29:8b:c9:f0:c4:29:07:5f:31:5a:8c:39:08:
ab:17:bd:10:64:1b:bb:98:f1:77:72:a6:a0:33:65:
5c:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:8E:6F:9E:AF:96:63:7B:6D:28:03:C1:C1:65:30:64:33:68:67:DE
X509v3 Authority Key Identifier:
keyid:6C:E9:7C:F4:D8:D0:BC:17:B3:AF:1D:62:C4:D7:14:88:66:1B:D2:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bOl89NjQvBezrx1ixNcUiGYb0hI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/e4ccb1-ca25-4099-8273-3993aa324e1f/1/YY5vnq-WY3ttKAPBwWUwZDNoZ94.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/e4ccb1-ca25-4099-8273-3993aa324e1f/1/bOl89NjQvBezrx1ixNcUiGYb0hI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.190.148.0-185.190.150.255
194.28.102.0/24
Signature Algorithm: sha256WithRSAEncryption
63:d6:bc:dd:7e:17:22:77:50:63:2f:5f:fe:73:d9:32:d5:df:
8a:6e:23:50:7c:1b:85:58:3a:9b:77:53:0e:96:cd:28:29:3b:
9f:28:0f:ee:aa:af:31:2a:ea:c3:1c:b5:88:cb:ac:6e:02:ce:
a9:45:d9:9d:27:36:f2:6e:2d:c1:81:77:4d:04:a5:59:e8:62:
ab:aa:48:27:99:2a:65:a4:07:31:59:60:ef:68:a4:91:ed:71:
d5:23:2e:ae:49:a7:be:b7:09:89:f0:4f:8f:34:94:42:ec:49:
8b:fc:47:17:21:5a:94:63:65:4f:07:0e:3e:21:09:71:82:76:
84:95:c0:93:e9:7f:bd:75:60:48:ae:c3:37:1c:ca:8e:51:75:
6e:e3:1c:08:a0:5f:44:3f:d5:6e:60:e5:8c:32:a6:43:e6:bc:
a3:ff:e9:f4:63:1a:89:a2:ff:5f:d0:28:a1:5c:17:46:1d:02:
1e:b3:71:5b:93:2e:10:58:9e:77:02:55:50:d8:0b:1c:db:ec:
7a:00:f7:58:5e:46:2d:3f:fe:bf:95:73:43:90:ee:aa:64:47:
45:d6:2b:30:0c:8e:3d:15:07:7e:47:31:9a:ff:a7:d6:60:23:
c0:c0:db:02:5a:ff:96:a5:2c:84:4f:d7:f2:bd:5a:dd:42:b3:
4e:0e:a4:e1
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Apr 25 12:20:47 2025 by rpki-client