Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/860a5e-e0d0-44f5-9c54-3cc4ff9aa1bc/1/Ygr-d1fsjv6D-0-qsUYAE5I_CT4.roa
File: Ygr-d1fsjv6D-0-qsUYAE5I_CT4.roa (raw, json)
Hash identifier: jcx2vm/E34fLSi/zBhEY8LVOd5D4GVaLPMNLqe0cuM4=
Subject key identifier: 62:0A:FE:77:57:EC:8E:FE:83:FB:4F:AA:B1:46:00:13:92:3F:09:3E
Certificate issuer: /CN=638c509cb77b0149b6f66f5019f858b3acf942e9
Certificate serial: 019427473EBB26BED9D4A9F9FF63F95240C2
Authority key identifier: 63:8C:50:9C:B7:7B:01:49:B6:F6:6F:50:19:F8:58:B3:AC:F9:42:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y4xQnLd7AUm29m9QGfhYs6z5Quk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/860a5e-e0d0-44f5-9c54-3cc4ff9aa1bc/1/Ygr-d1fsjv6D-0-qsUYAE5I_CT4.roa
Signing time: Thu 02 Jan 2025 13:49:27 +0000
ROA not before: Thu 02 Jan 2025 13:49:27 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 29562
IP address blocks: 185.2.142.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:3e:bb:26:be:d9:d4:a9:f9:ff:63:f9:52:40:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=638c509cb77b0149b6f66f5019f858b3acf942e9
Validity
Not Before: Jan 2 13:49:27 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=620afe7757ec8efe83fb4faab1460013923f093e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:65:4a:84:77:29:1a:66:c2:f5:10:8b:28:6c:
04:3a:32:5e:30:c1:8a:a4:a3:d8:66:e5:6e:44:9c:
d5:e8:ad:ef:91:73:d6:f6:cd:64:11:6f:35:9f:b3:
71:8c:1e:3c:2d:14:6e:01:0b:6b:20:44:c3:2a:5c:
3d:9a:99:51:7a:49:0c:d3:77:1d:22:93:63:d8:d3:
ee:1c:48:da:5a:29:c7:9c:e6:36:bc:43:c4:3e:04:
9e:9b:8a:a4:9c:cc:68:e5:9b:08:9c:71:79:31:ea:
3e:f6:60:12:01:f9:34:50:bd:b1:db:f0:0b:30:05:
7a:ea:c0:60:a4:15:03:9f:44:84:a3:ae:7c:6d:19:
d2:72:55:ef:10:3f:98:68:94:9a:82:14:17:79:c2:
8d:a8:2e:38:3d:63:08:d1:c4:b1:10:44:65:e9:13:
0a:0e:81:9e:2f:db:35:a7:c7:eb:de:3b:cd:84:59:
90:7b:f9:0f:68:b6:34:6a:7c:44:9d:93:17:c9:aa:
a1:48:79:0b:3f:e1:bd:d9:cb:d5:27:88:25:d6:5a:
47:94:ac:57:75:c2:39:67:5d:4a:47:fc:d5:55:fb:
90:1e:2c:39:fe:e0:2c:80:6c:f0:07:e7:48:b4:d1:
61:aa:f8:f1:1c:a3:f6:eb:f2:cf:86:f2:3c:30:58:
2a:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:0A:FE:77:57:EC:8E:FE:83:FB:4F:AA:B1:46:00:13:92:3F:09:3E
X509v3 Authority Key Identifier:
keyid:63:8C:50:9C:B7:7B:01:49:B6:F6:6F:50:19:F8:58:B3:AC:F9:42:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y4xQnLd7AUm29m9QGfhYs6z5Quk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/860a5e-e0d0-44f5-9c54-3cc4ff9aa1bc/1/Ygr-d1fsjv6D-0-qsUYAE5I_CT4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/860a5e-e0d0-44f5-9c54-3cc4ff9aa1bc/1/Y4xQnLd7AUm29m9QGfhYs6z5Quk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.2.142.0/23
Signature Algorithm: sha256WithRSAEncryption
46:e3:26:62:fd:be:b0:a6:49:a1:04:10:b4:a7:9e:86:03:08:
55:29:cd:d6:c0:3a:a8:0a:03:5e:0d:5c:5a:1e:c2:8c:82:a4:
8b:bc:54:d0:6c:fe:a4:95:79:d7:6a:1a:d1:a4:6a:f6:81:bf:
c7:5e:75:6d:77:cd:2a:0b:74:38:dd:2f:f3:81:79:64:5a:6b:
5f:2e:45:f4:dd:f3:3b:1f:55:2b:86:d7:ae:92:3b:c6:c9:ff:
a8:f4:49:74:3e:c5:12:a8:3d:fd:e1:67:fb:7b:39:be:dd:f0:
cb:c7:28:29:14:1b:af:87:2c:46:90:95:fa:8f:27:1c:4e:5e:
e3:e6:60:53:d1:eb:14:c2:c4:d5:4f:68:f5:d8:af:2e:3b:1a:
e6:4c:93:6b:14:25:52:49:32:e3:01:f1:2b:17:e3:34:69:5f:
58:88:03:13:4f:96:3e:3c:f1:f1:ba:72:04:61:07:42:7c:25:
f3:3f:36:6f:f8:ef:96:e7:8b:04:7c:f9:b8:ed:eb:40:51:a1:
25:a2:42:c6:2b:2b:3f:62:40:09:77:8f:cd:f9:b2:9c:61:9f:
5c:04:38:16:7f:35:05:68:e7:f2:8a:8c:1e:45:97:40:56:71:
b6:3f:90:37:3d:6b:59:c0:51:2b:62:a9:6a:11:62:78:3c:29:
ce:4c:2f:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:47:19 2025 by rpki-client