Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/fd7f48-00d6-47df-8797-8d9094f3f5a1/1/eY3YrLangF39TsrfFYAYI-Ypyew.roa
File: eY3YrLangF39TsrfFYAYI-Ypyew.roa (raw, json)
Hash identifier: QBh3Fp11lONob0T3yDh1yiwajHFqWNsh3PoRB1MCVgk=
Subject key identifier: 79:8D:D8:AC:B6:A7:80:5D:FD:4E:CA:DF:15:80:18:23:E6:29:C9:EC
Certificate issuer: /CN=11126172bea5b0fd345406ebb4ae95ff95e3d57f
Certificate serial: 01942067DD6CB19B0B7B68DA470C622EC52E
Authority key identifier: 11:12:61:72:BE:A5:B0:FD:34:54:06:EB:B4:AE:95:FF:95:E3:D5:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ERJhcr6lsP00VAbrtK6V_5Xj1X8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/fd7f48-00d6-47df-8797-8d9094f3f5a1/1/eY3YrLangF39TsrfFYAYI-Ypyew.roa
Signing time: Wed 01 Jan 2025 05:47:45 +0000
ROA not before: Wed 01 Jan 2025 05:47:45 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205113
IP address blocks: 185.248.204.0/22 maxlen: 27
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:67:dd:6c:b1:9b:0b:7b:68:da:47:0c:62:2e:c5:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11126172bea5b0fd345406ebb4ae95ff95e3d57f
Validity
Not Before: Jan 1 05:47:45 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=798dd8acb6a7805dfd4ecadf15801823e629c9ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:b6:54:1c:80:a8:94:2d:f6:f7:0e:a0:ee:6b:
12:47:97:8c:1a:85:be:23:a0:16:90:17:95:bf:36:
1b:a6:d7:d7:94:71:82:6e:00:08:1f:ae:ed:89:4f:
cf:b7:df:c3:4d:df:6e:91:93:54:84:83:b6:17:e0:
1a:02:6c:b6:f9:1f:ae:d5:5d:28:de:8e:4a:ea:f5:
a9:18:9f:33:9e:b0:dd:3b:2f:53:8a:d1:77:41:c8:
1b:a1:88:60:de:ce:0c:b5:c0:89:c0:e0:20:5e:e8:
b6:05:fc:99:a2:14:a9:36:6b:bb:a5:78:2d:6d:f0:
95:f9:f1:a4:17:0e:a5:a1:87:ed:f3:5c:97:a6:06:
51:52:f2:60:fb:fb:29:91:e0:61:74:4f:4a:f9:36:
96:26:eb:48:7e:1b:e8:9d:84:c7:17:1f:04:13:32:
cc:0a:69:ab:1b:de:a9:0b:12:3b:de:0e:6f:e3:d0:
3a:4b:62:35:a7:48:d6:66:f6:8f:67:8c:36:19:97:
77:a7:00:e4:3b:91:f8:05:bc:4c:e9:ce:ae:f1:5e:
01:f3:b1:3f:9d:24:b2:3d:5a:9a:c0:08:85:88:4b:
b2:32:33:bb:4a:25:5c:47:92:bd:01:6c:9a:d1:39:
0d:94:98:12:ce:85:d0:03:b5:4a:cc:c0:76:25:0d:
4b:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:8D:D8:AC:B6:A7:80:5D:FD:4E:CA:DF:15:80:18:23:E6:29:C9:EC
X509v3 Authority Key Identifier:
keyid:11:12:61:72:BE:A5:B0:FD:34:54:06:EB:B4:AE:95:FF:95:E3:D5:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ERJhcr6lsP00VAbrtK6V_5Xj1X8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/fd7f48-00d6-47df-8797-8d9094f3f5a1/1/eY3YrLangF39TsrfFYAYI-Ypyew.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/fd7f48-00d6-47df-8797-8d9094f3f5a1/1/ERJhcr6lsP00VAbrtK6V_5Xj1X8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.248.204.0/22
Signature Algorithm: sha256WithRSAEncryption
6b:40:76:1f:6e:63:2a:4b:20:84:e3:03:e2:ec:40:f3:00:c5:
f5:83:97:e6:7d:56:23:69:38:3c:76:92:91:63:88:e1:61:ee:
2d:b3:6d:77:58:d8:e7:45:08:1c:c6:dc:db:91:61:2b:3c:e5:
cf:0d:d2:cf:25:9f:a6:d2:96:06:5b:6a:a4:f0:65:d9:25:2a:
0e:f4:76:c3:97:97:88:6d:1c:9a:ee:7c:4f:aa:2d:69:d0:b5:
11:a3:a5:d1:6b:2f:99:4c:b9:a6:58:58:ac:8f:53:6f:92:a9:
bd:d6:de:00:02:50:74:58:9f:a6:39:05:19:53:21:b8:f7:e4:
a6:84:31:61:d2:9d:d4:0c:04:95:5a:d8:e8:8a:61:c0:13:0d:
c0:da:ec:9a:cf:41:75:7f:d5:46:30:9d:2a:a5:fd:12:fc:53:
d0:53:91:57:8d:30:b3:7a:d9:00:09:5a:40:85:55:43:48:db:
4f:bb:8a:17:a1:4f:b0:d0:04:e6:78:ee:fa:de:cd:ba:3d:33:
3b:92:f1:35:ee:73:ec:e0:7e:49:29:90:4f:ae:57:ba:e7:77:
d3:cc:63:2a:10:51:5e:44:fc:2a:57:f7:f7:8e:63:33:cb:6f:
c5:96:20:96:c1:71:53:82:ea:fd:11:01:66:28:dc:cf:de:21:
ed:72:81:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:41:45 2025 by rpki-client