Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/a96024-6555-4e8d-af37-62bb6d63e59d/1/yiW-kmeX6T3jx-yL7EZZYoVvwps.roa
File: yiW-kmeX6T3jx-yL7EZZYoVvwps.roa (raw, json)
Hash identifier: QstF1sZuORe/6EM2aW5TGBrHuj8rjUHPJQAAamVQG0Y=
Subject key identifier: CA:25:BE:92:67:97:E9:3D:E3:C7:EC:8B:EC:46:59:62:85:6F:C2:9B
Certificate issuer: /CN=dff24726df3e77f6f4c8e0436613b35110eeaf38
Certificate serial: 01942067B8AA5A706740DE81175A23FF1DBF
Authority key identifier: DF:F2:47:26:DF:3E:77:F6:F4:C8:E0:43:66:13:B3:51:10:EE:AF:38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3_JHJt8-d_b0yOBDZhOzURDurzg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/a96024-6555-4e8d-af37-62bb6d63e59d/1/yiW-kmeX6T3jx-yL7EZZYoVvwps.roa
Signing time: Wed 01 Jan 2025 05:47:35 +0000
ROA not before: Wed 01 Jan 2025 05:47:35 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210538
IP address blocks: 185.255.4.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:67:b8:aa:5a:70:67:40:de:81:17:5a:23:ff:1d:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dff24726df3e77f6f4c8e0436613b35110eeaf38
Validity
Not Before: Jan 1 05:47:35 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ca25be926797e93de3c7ec8bec465962856fc29b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:4e:16:e0:4b:6a:55:88:48:3c:bd:a0:c9:ec:
e9:1d:71:f2:2f:5a:58:cf:84:56:a2:b9:29:97:82:
c2:fe:1a:9c:7d:f6:55:9a:92:5e:ff:07:b9:a3:3d:
d1:d9:0a:c6:a4:53:3d:a7:ec:62:81:b0:17:72:72:
4d:49:69:85:a8:db:66:5a:dd:33:06:ef:77:ad:a3:
68:f4:1a:76:e5:f3:2d:e5:d2:28:8a:7a:69:6e:08:
e0:6a:58:cd:cb:11:15:eb:44:cb:07:18:2d:81:6d:
c1:65:17:0f:2a:d5:aa:22:45:be:59:bf:ac:15:10:
5f:06:26:fe:9e:3f:f1:21:29:ab:02:bd:ca:94:8f:
92:3e:2f:37:c6:fc:93:8d:d9:28:bf:14:30:b1:3b:
4b:19:33:dd:8a:a5:44:3d:a4:31:af:05:3c:75:28:
5e:bf:d0:a6:96:69:2b:f7:b5:32:4a:9c:ce:d1:d5:
96:b7:72:2b:be:2b:e2:0d:97:5e:4f:fd:59:be:57:
67:ca:fe:11:b8:db:a1:ed:38:09:ed:de:02:ed:93:
91:15:82:84:f7:25:5e:64:82:7c:06:ae:49:d1:a3:
64:ed:e9:f5:7c:d3:03:0e:d3:cf:cd:e8:54:82:a0:
c2:ca:68:88:fc:b6:ef:39:2d:b0:b4:dd:9f:ad:09:
35:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:25:BE:92:67:97:E9:3D:E3:C7:EC:8B:EC:46:59:62:85:6F:C2:9B
X509v3 Authority Key Identifier:
keyid:DF:F2:47:26:DF:3E:77:F6:F4:C8:E0:43:66:13:B3:51:10:EE:AF:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3_JHJt8-d_b0yOBDZhOzURDurzg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a96024-6555-4e8d-af37-62bb6d63e59d/1/yiW-kmeX6T3jx-yL7EZZYoVvwps.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a96024-6555-4e8d-af37-62bb6d63e59d/1/3_JHJt8-d_b0yOBDZhOzURDurzg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.255.4.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:44:2c:30:77:88:4e:98:4c:3f:a5:55:4e:8b:c5:b4:0e:e6:
dd:96:67:c5:ee:a0:11:f7:90:cb:a8:d6:31:4e:90:98:67:69:
8e:7f:55:5c:d6:48:21:6f:d5:9b:45:c6:59:48:93:2e:28:02:
f3:30:30:ca:22:29:38:4c:a8:43:72:b2:9c:2e:60:41:c9:bd:
af:c6:a1:2d:ef:0b:d5:a0:fb:1d:df:b7:db:d0:2e:3e:58:a9:
23:56:9b:14:32:9a:0d:cf:b4:fb:34:82:9f:8c:3b:73:ea:3d:
2e:f0:b9:25:50:5e:26:51:88:5b:22:58:23:9c:3a:84:7f:98:
55:1a:f2:db:6b:8f:9d:e6:39:99:09:f8:22:3e:22:d3:93:05:
11:0c:c4:d9:bb:24:b4:54:58:3d:89:06:ed:3b:5f:7d:b6:70:
61:98:15:5a:01:0a:51:49:30:92:ea:bf:ba:d9:18:86:ae:2e:
83:d5:af:98:5d:ab:eb:0e:3a:d8:e2:94:bd:1c:fb:1b:dd:09:
f5:12:ac:60:09:ee:9b:86:a4:7e:dc:3b:9d:21:fc:6b:73:dc:
ab:82:e5:ea:62:2a:87:c5:5b:0a:b2:8c:5b:91:91:64:51:11:
f9:2d:84:ff:a4:2d:06:e2:00:49:cb:a2:d0:25:f9:9f:aa:c5:
c6:97:9d:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 14:25:54 2025 by rpki-client