Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/ypOVM-4q3LWQn5mSmE9Nm1vLXlM.roa
File: ypOVM-4q3LWQn5mSmE9Nm1vLXlM.roa (raw, json)
Hash identifier: U3n8l8LOPaF47HQiInY3TJ6w2/TNwnCCijhoJqn4CsQ=
Subject key identifier: CA:93:95:33:EE:2A:DC:B5:90:9F:99:92:98:4F:4D:9B:5B:CB:5E:53
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 0194222054642B36A7F8AFCFEBB5E17C070C
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/ypOVM-4q3LWQn5mSmE9Nm1vLXlM.roa
Signing time: Wed 01 Jan 2025 13:48:51 +0000
ROA not before: Wed 01 Jan 2025 13:48:51 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215015
IP address blocks: 185.223.82.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:20:54:64:2b:36:a7:f8:af:cf:eb:b5:e1:7c:07:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Jan 1 13:48:51 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ca939533ee2adcb5909f9992984f4d9b5bcb5e53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:b7:cf:05:19:d8:88:0a:f9:11:9a:0e:ba:3b:
1a:14:01:e7:3a:ff:41:4c:e6:33:13:8c:4f:7e:ed:
a6:24:3a:d4:e3:11:3a:ae:f2:a5:ca:5b:87:c3:4c:
81:f0:e7:f0:6f:a7:49:c8:0c:df:78:fb:63:b1:ad:
93:02:d5:9b:11:8e:fb:03:c1:b3:44:32:89:a1:1b:
ac:84:67:3b:8f:08:bd:63:cc:29:54:d5:95:1c:0d:
84:4c:6e:e8:7a:26:00:35:a5:d7:13:78:ac:e3:c0:
76:3e:62:02:bf:d3:dd:6f:62:71:d9:5f:e2:5c:df:
d9:76:d5:52:e1:f5:02:28:c4:c9:9c:dd:e2:ee:7c:
32:fd:cb:ce:77:15:a6:3c:1f:d0:cd:27:4c:9b:33:
77:a0:41:b4:44:fb:cc:53:b3:23:b3:97:1d:af:d0:
09:0b:5d:cc:0b:62:b1:eb:75:5f:39:87:21:7c:41:
ea:49:ff:90:9a:83:29:1e:5d:c2:60:d3:eb:fe:55:
06:ec:d3:3c:42:35:29:db:24:3e:a4:ee:0b:89:30:
65:55:a4:d3:94:99:21:c1:7f:69:53:f4:b7:ed:b3:
65:2e:b9:1a:71:06:98:b6:41:89:3b:1d:2a:af:89:
ba:6e:73:7c:0f:86:86:53:bd:69:fb:28:d8:50:1d:
8c:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:93:95:33:EE:2A:DC:B5:90:9F:99:92:98:4F:4D:9B:5B:CB:5E:53
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/ypOVM-4q3LWQn5mSmE9Nm1vLXlM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.223.82.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:f8:f5:4b:dc:01:86:30:e5:3f:83:dd:13:23:07:29:f6:ee:
f5:c8:2a:d5:14:2c:d9:f8:a4:66:2a:03:06:95:d7:fe:43:f8:
8a:f6:1b:36:d5:eb:d5:5c:09:a4:ff:65:9d:dc:2c:4d:8a:37:
a8:08:34:28:a7:60:9d:18:9e:81:6a:e3:45:73:f6:53:bc:29:
f9:7a:6f:45:77:a3:3c:d5:42:8f:2e:43:1c:6c:b0:09:d9:e4:
1b:12:38:54:e2:be:5b:b3:22:b1:ac:42:16:3c:97:07:fd:a1:
e1:05:27:7d:0e:b5:d8:73:62:6b:d9:af:9b:aa:d9:07:ed:06:
d7:ea:b0:59:21:05:74:89:74:27:c7:22:b0:7a:9d:a4:fe:6d:
d7:31:4a:d7:ab:83:5c:a9:8b:a8:e0:a8:a9:3f:40:19:1c:4a:
67:02:e6:18:1e:31:9f:85:e7:9a:fe:9a:6f:bd:ff:64:9e:c7:
40:74:7f:b5:99:9b:ef:bc:df:48:8b:20:cb:76:c2:78:65:8f:
14:a6:fd:28:07:02:6b:32:ba:51:2b:eb:15:c8:17:4c:96:d7:
fd:80:dc:25:89:3f:f1:06:af:ae:bf:f2:a4:01:1c:fd:d4:c3:
ff:a8:a0:23:fa:b2:b7:a7:41:1c:79:df:2b:eb:ba:2d:07:54:
2d:2d:b2:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:48:21 2025 by rpki-client