Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/746767-ef5f-436c-bd5d-8e8b79926aa3/1/Ye-1b3Oqv586dqfuogOZnzwmKao.roa
File: Ye-1b3Oqv586dqfuogOZnzwmKao.roa (raw, json)
Hash identifier: M9y1SazElcLTZkq2/3rTLHzloUqVKkD3eSc9q5agDu4=
Subject key identifier: 61:EF:B5:6F:73:AA:BF:9F:3A:76:A7:EE:A2:03:99:9F:3C:26:29:AA
Certificate issuer: /CN=f8456292d85a0b86c4e2534b27d26b47bfe04317
Certificate serial: 01942823166F56C8CB4C9371AD9B80F33D0E
Authority key identifier: F8:45:62:92:D8:5A:0B:86:C4:E2:53:4B:27:D2:6B:47:BF:E0:43:17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-EVikthaC4bE4lNLJ9JrR7_gQxc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/746767-ef5f-436c-bd5d-8e8b79926aa3/1/Ye-1b3Oqv586dqfuogOZnzwmKao.roa
Signing time: Thu 02 Jan 2025 17:49:35 +0000
ROA not before: Thu 02 Jan 2025 17:49:35 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 203932
IP address blocks: 185.198.241.0/24 maxlen: 24
2a13:4700::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:23:16:6f:56:c8:cb:4c:93:71:ad:9b:80:f3:3d:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8456292d85a0b86c4e2534b27d26b47bfe04317
Validity
Not Before: Jan 2 17:49:35 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=61efb56f73aabf9f3a76a7eea203999f3c2629aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:d0:ee:08:a0:13:36:59:5e:f0:1f:9e:49:e7:
68:88:37:fd:42:9d:04:01:2a:2d:d4:1c:37:46:92:
e9:94:bb:21:f0:9e:85:86:96:ea:ec:f7:6c:77:75:
48:e0:4f:ac:c6:45:25:d4:fe:f8:8f:2d:23:8f:27:
58:86:e9:b7:38:93:1d:93:6b:b4:97:5e:ad:66:7a:
4c:36:d6:88:ce:0f:05:c5:ab:57:48:6d:ef:2a:f5:
e3:2f:d0:a6:e7:31:42:ad:01:4b:eb:3f:69:93:82:
b6:cf:56:7a:ed:e9:63:90:3e:f7:bf:52:a4:1e:e4:
9a:dc:ea:19:0e:c1:b9:c3:18:21:4f:ff:4c:f8:d6:
5e:7c:2b:10:6b:99:a9:e7:33:05:1f:99:ca:1b:4c:
76:2f:0c:ea:4e:49:2e:c5:d8:13:c1:e7:57:28:07:
15:c0:e8:ba:9d:70:5e:f5:a2:3f:60:44:09:41:21:
bd:20:27:a9:d3:48:19:8f:3e:4c:b0:ee:ec:f3:f2:
96:6a:e5:98:35:4e:87:0b:bf:bd:c0:6a:6b:97:b5:
49:51:d0:8e:ad:f4:72:74:59:18:ad:16:2a:d9:fd:
34:bc:a5:aa:ff:1e:5b:27:c7:5e:04:ec:a2:c2:50:
f2:4a:d9:df:27:0e:f7:9c:11:23:3b:f4:d6:d1:a7:
00:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:EF:B5:6F:73:AA:BF:9F:3A:76:A7:EE:A2:03:99:9F:3C:26:29:AA
X509v3 Authority Key Identifier:
keyid:F8:45:62:92:D8:5A:0B:86:C4:E2:53:4B:27:D2:6B:47:BF:E0:43:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-EVikthaC4bE4lNLJ9JrR7_gQxc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/746767-ef5f-436c-bd5d-8e8b79926aa3/1/Ye-1b3Oqv586dqfuogOZnzwmKao.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/746767-ef5f-436c-bd5d-8e8b79926aa3/1/1-EVikthaC4bE4lNLJ9JrR7_gQxc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.198.241.0/24
IPv6:
2a13:4700::/29
Signature Algorithm: sha256WithRSAEncryption
a9:dd:60:e5:f1:4a:ed:b1:e7:f1:e0:b8:8b:ab:df:85:d1:af:
44:b6:0a:27:ec:fa:87:1f:32:48:b4:00:39:81:c4:20:b0:17:
21:a6:79:0d:92:24:54:e1:2c:34:58:a0:80:c7:08:75:ea:4b:
18:f4:2c:ed:89:b5:ca:76:d8:de:ee:4c:2c:fc:ab:3a:0e:58:
fc:be:ac:97:7f:53:39:34:89:35:ee:c2:4c:e2:f0:62:1e:68:
f0:34:b6:ef:54:8d:d6:fc:05:a8:15:d5:d5:1d:4a:9a:63:4c:
54:50:c3:93:9f:37:19:c1:cd:b4:2a:bb:ba:0f:cd:3b:71:2d:
9b:6a:8f:88:c7:46:4c:72:eb:1e:1f:13:8c:89:1e:8e:3e:e3:
02:e2:e1:bf:ae:cf:a2:d8:c4:8b:ba:2a:98:69:27:36:3d:85:
e7:25:7a:2e:42:61:5f:ce:07:24:a0:f9:3e:a6:2b:d7:e2:b7:
f1:db:ff:87:c3:9f:9e:14:9c:0d:35:e3:84:48:bf:17:69:49:
b9:bd:8e:03:70:ff:6c:71:18:34:08:6c:d8:38:76:77:9f:8a:
19:db:27:e7:4a:5c:2a:55:69:44:fe:12:05:0d:1b:08:35:62:
87:5b:dc:ac:de:b3:ad:ba:eb:80:dc:b9:ce:4f:b1:32:e5:ec:
98:8c:05:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:18:02 2025 by rpki-client