Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/b756b4-ce41-41b5-a1d9-bb4d242ed2cd/1/byUVA5qV1IbcwSPIkfdvjR5Q_jI.roa
File: byUVA5qV1IbcwSPIkfdvjR5Q_jI.roa (raw, json)
Hash identifier: dK4W//mWQId08viaOEDpjWgfsu+tE5gfBKP2LChtCus=
Subject key identifier: 6F:25:15:03:9A:95:D4:86:DC:C1:23:C8:91:F7:6F:8D:1E:50:FE:32
Certificate issuer: /CN=c9b051e8e68149b66044e7de4ae59d736e537aaa
Certificate serial: 019423D75457C2E9B2DD2C8815E7D861ABC8
Authority key identifier: C9:B0:51:E8:E6:81:49:B6:60:44:E7:DE:4A:E5:9D:73:6E:53:7A:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ybBR6OaBSbZgROfeSuWdc25Teqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/b756b4-ce41-41b5-a1d9-bb4d242ed2cd/1/byUVA5qV1IbcwSPIkfdvjR5Q_jI.roa
Signing time: Wed 01 Jan 2025 21:48:21 +0000
ROA not before: Wed 01 Jan 2025 21:48:21 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 201145
IP address blocks: 185.75.97.0/24 maxlen: 24
185.75.98.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:54:57:c2:e9:b2:dd:2c:88:15:e7:d8:61:ab:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9b051e8e68149b66044e7de4ae59d736e537aaa
Validity
Not Before: Jan 1 21:48:21 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6f2515039a95d486dcc123c891f76f8d1e50fe32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:8c:8a:8c:eb:9a:74:f4:4c:4d:90:2f:0f:ae:
b2:d8:93:91:8c:82:41:29:bf:32:5a:43:be:be:c4:
59:ac:88:dd:ac:e9:90:3d:cc:d1:a9:69:a8:f4:4b:
10:0d:d5:bc:2b:19:c4:82:e4:cc:7a:bf:28:04:cd:
f2:08:2c:9b:82:94:3c:b6:55:5d:0c:20:fc:8f:a4:
b6:b3:0d:4f:6f:53:ce:59:72:b1:88:f7:2b:0e:92:
54:98:d5:fa:9d:96:ce:ed:f3:2a:fa:70:84:d0:32:
29:fc:cb:41:9e:82:6a:3a:6c:b5:fe:f7:de:64:b4:
f4:6f:af:fb:6c:59:68:fc:08:93:92:60:61:67:8c:
fa:1d:02:69:f3:4d:49:5a:da:93:71:d8:05:0d:33:
db:e5:ed:2b:1c:78:cd:8c:c4:55:a0:9e:6f:53:e8:
10:27:13:e7:f3:e5:84:67:0f:1a:bd:59:12:b2:33:
ed:f2:f9:68:25:cc:30:63:17:17:74:aa:bc:7d:f3:
e4:f2:a3:c5:75:b3:67:d8:ae:34:5b:a3:fc:5d:f3:
5d:5f:64:aa:9b:0a:0d:eb:bb:a3:32:75:02:47:b0:
fc:1d:8f:7c:c1:f7:d7:41:60:36:a3:9b:00:ec:db:
41:95:f0:ca:a1:26:ee:7d:84:65:27:52:75:7d:00:
ce:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:25:15:03:9A:95:D4:86:DC:C1:23:C8:91:F7:6F:8D:1E:50:FE:32
X509v3 Authority Key Identifier:
keyid:C9:B0:51:E8:E6:81:49:B6:60:44:E7:DE:4A:E5:9D:73:6E:53:7A:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ybBR6OaBSbZgROfeSuWdc25Teqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/b756b4-ce41-41b5-a1d9-bb4d242ed2cd/1/byUVA5qV1IbcwSPIkfdvjR5Q_jI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/b756b4-ce41-41b5-a1d9-bb4d242ed2cd/1/ybBR6OaBSbZgROfeSuWdc25Teqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.75.97.0-185.75.98.255
Signature Algorithm: sha256WithRSAEncryption
2c:53:9d:09:6c:0d:9f:c3:3d:f8:12:dc:eb:cd:09:77:42:6b:
b8:22:c9:22:09:8d:f7:13:a9:f3:90:84:00:0c:e2:5e:11:49:
f9:a7:04:b3:af:74:51:d9:21:1b:ef:0e:a7:04:fc:9f:20:3a:
64:9a:0a:47:fc:9b:1a:2d:96:ed:1a:cc:71:95:9b:c4:7c:d0:
40:ab:ef:3c:37:23:09:1c:9a:f2:4e:63:ac:c4:96:18:6f:e4:
b5:0c:09:d8:3a:17:e0:0d:e0:22:65:a9:e3:a1:f7:83:9b:ee:
7f:c8:95:bf:83:fb:2a:50:ed:04:72:99:27:d6:4e:e7:89:24:
b1:9c:af:72:e1:4c:f7:a5:53:f4:fc:5e:3e:ac:87:c5:6b:64:
4a:c9:40:7c:f5:cd:7e:62:7f:00:72:ef:e6:fb:37:f5:f8:9f:
04:aa:de:46:4e:eb:4e:f9:74:e3:e4:48:32:89:18:2c:67:04:
82:7a:ad:c4:32:46:17:b2:a5:e7:9b:35:81:56:35:69:96:8e:
c1:59:50:30:e7:fe:90:3c:07:98:e9:8f:06:c3:29:94:4f:4b:
49:00:d5:c7:8e:af:b3:f3:0a:ed:ac:aa:0e:2e:f7:5f:a5:ca:
88:e2:77:30:3c:a3:a9:6d:ce:f6:35:fb:94:93:52:ab:be:49:
fe:2d:32:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:11:54 2025 by rpki-client