Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/78c577-8f98-40b2-b01d-10777f9e3685/1/isc6BCjToI_oFbMf0jYX-ynn-ak.roa
File: isc6BCjToI_oFbMf0jYX-ynn-ak.roa (raw, json)
Hash identifier: XnxC31mu4h2nbud6+tfa/Ol2F+NbnVuQI1Ua6CJm+PY=
Subject key identifier: 8A:C7:3A:04:28:D3:A0:8F:E8:15:B3:1F:D2:36:17:FB:29:E7:F9:A9
Certificate issuer: /CN=532d1e41424819bcc0cd637d8ee141fea585d00d
Certificate serial: 019424459D625373BCE4B9095A6B4FB375E2
Authority key identifier: 53:2D:1E:41:42:48:19:BC:C0:CD:63:7D:8E:E1:41:FE:A5:85:D0:0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Uy0eQUJIGbzAzWN9juFB_qWF0A0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/78c577-8f98-40b2-b01d-10777f9e3685/1/isc6BCjToI_oFbMf0jYX-ynn-ak.roa
Signing time: Wed 01 Jan 2025 23:48:49 +0000
ROA not before: Wed 01 Jan 2025 23:48:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 201403
IP address blocks: 185.49.50.0/24 maxlen: 24
185.49.51.0/24 maxlen: 24
2a04:b700:185d::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:45:9d:62:53:73:bc:e4:b9:09:5a:6b:4f:b3:75:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=532d1e41424819bcc0cd637d8ee141fea585d00d
Validity
Not Before: Jan 1 23:48:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8ac73a0428d3a08fe815b31fd23617fb29e7f9a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:2e:a7:ab:44:ec:81:5d:40:c8:f4:c1:15:40:
64:0f:45:95:a4:ed:73:1e:17:9b:52:3a:ad:05:0b:
81:0b:11:7f:db:47:27:16:89:5d:a5:90:5e:5b:bb:
7a:bb:11:27:f4:ea:c8:1a:8f:77:5e:74:09:73:80:
c7:fe:5b:b9:79:ce:bc:fb:30:7b:74:3d:9c:19:72:
f1:e9:d6:a8:2f:2d:46:04:0e:30:18:c5:6b:20:da:
ed:06:6e:3f:8e:83:20:a7:0c:0d:8e:fc:27:57:d6:
08:b5:da:49:b2:2d:d9:a6:33:2d:ff:5c:56:24:d4:
ed:e0:e1:45:87:c6:06:0c:71:41:a9:83:df:b6:66:
70:1e:10:61:d3:30:30:92:a1:c2:4e:d7:a6:80:e8:
35:b3:3f:8d:a8:f9:4d:d0:15:c5:5b:49:71:e9:30:
33:ca:e1:6f:36:64:36:60:b2:dc:19:48:e4:8d:a2:
89:d6:c4:d4:27:f9:83:fd:46:7e:71:3c:3d:24:ae:
8e:59:25:38:e1:4b:a3:22:dc:e2:f6:fa:5e:66:29:
0c:6b:1f:33:27:3b:60:a6:af:a7:c5:1f:9c:7e:0b:
66:9b:7b:09:8b:e5:51:a4:31:37:73:54:a2:bb:fa:
ef:ae:05:aa:c4:ad:16:65:4f:bb:c8:fd:13:00:aa:
fe:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:C7:3A:04:28:D3:A0:8F:E8:15:B3:1F:D2:36:17:FB:29:E7:F9:A9
X509v3 Authority Key Identifier:
keyid:53:2D:1E:41:42:48:19:BC:C0:CD:63:7D:8E:E1:41:FE:A5:85:D0:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Uy0eQUJIGbzAzWN9juFB_qWF0A0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/78c577-8f98-40b2-b01d-10777f9e3685/1/isc6BCjToI_oFbMf0jYX-ynn-ak.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/78c577-8f98-40b2-b01d-10777f9e3685/1/Uy0eQUJIGbzAzWN9juFB_qWF0A0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.49.50.0/23
IPv6:
2a04:b700:185d::/48
Signature Algorithm: sha256WithRSAEncryption
1c:51:28:9a:4d:22:3c:62:38:18:fd:b8:cc:23:d6:4a:e7:fc:
62:d6:53:1e:6d:c6:73:5f:37:20:47:55:72:08:63:64:ab:91:
7e:01:de:84:52:51:79:e7:7d:02:15:10:a6:bb:f4:b8:1e:f9:
ab:fb:d3:ab:b9:4e:f7:2e:f6:bc:b1:79:89:45:4c:b2:b3:c7:
00:9c:7f:69:66:a8:79:ab:b9:45:34:6e:e3:7c:31:d6:63:0f:
f4:2d:e9:2d:90:81:b8:b8:3b:f1:58:8c:1b:84:ea:53:cf:6d:
d0:16:fe:d7:60:ba:2e:ac:f1:20:9c:66:a8:50:13:90:a1:a0:
33:3d:12:62:27:dc:4a:6f:8e:e4:80:7f:b8:b1:dd:c9:bf:b9:
1d:38:00:35:86:84:ab:7c:1f:52:03:12:db:d6:5f:be:86:80:
93:de:1e:54:4f:31:52:99:e1:a3:d1:cf:41:bd:77:23:23:ad:
ad:3b:14:a5:43:50:15:f4:79:f3:58:a0:4f:03:c6:0e:4b:bf:
62:eb:23:4a:0e:81:17:8e:a9:32:22:b1:65:29:72:58:51:16:
4a:67:05:1b:a4:44:fb:ab:b4:59:f1:1b:9b:71:05:53:1a:02:
44:47:1c:c3:34:57:50:79:4a:9b:4f:12:b8:49:a8:c7:ad:37:
50:0e:90:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 07:36:21 2025 by rpki-client