Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/a2f87b-4811-4fe1-b15d-f889ca161c01/1/y4ffehEhJcuHU2W4RqSmsYxzQlg.roa
File: y4ffehEhJcuHU2W4RqSmsYxzQlg.roa (raw, json)
Hash identifier: stMeXk1cas0IbSmXY2+Qqlw++LVpL1MZDKLPTnxrrwY=
Subject key identifier: CB:87:DF:7A:11:21:25:CB:87:53:65:B8:46:A4:A6:B1:8C:73:42:58
Certificate issuer: /CN=49c403d43b5f38fca2119cd1409a92763edefe71
Certificate serial: 0194222000744FC92F0338BC4B2FF8A4AB18
Authority key identifier: 49:C4:03:D4:3B:5F:38:FC:A2:11:9C:D1:40:9A:92:76:3E:DE:FE:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ScQD1DtfOPyiEZzRQJqSdj7e_nE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/a2f87b-4811-4fe1-b15d-f889ca161c01/1/y4ffehEhJcuHU2W4RqSmsYxzQlg.roa
Signing time: Wed 01 Jan 2025 13:48:30 +0000
ROA not before: Wed 01 Jan 2025 13:48:30 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208695
IP address blocks: 185.75.13.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:20:00:74:4f:c9:2f:03:38:bc:4b:2f:f8:a4:ab:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49c403d43b5f38fca2119cd1409a92763edefe71
Validity
Not Before: Jan 1 13:48:30 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cb87df7a112125cb875365b846a4a6b18c734258
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:a7:d2:1e:d9:3b:8f:b3:8b:31:3f:ff:a8:f2:
2a:11:7d:1d:38:80:9a:dd:03:0e:9d:85:df:ab:79:
eb:e1:0f:c6:42:9b:a8:d3:e8:18:0d:73:ec:17:7b:
3a:71:48:4d:79:19:99:7f:6e:b1:42:cb:fd:f9:e4:
85:35:75:57:a5:fb:7c:15:ca:11:ef:63:35:ce:e4:
4b:a4:3a:3a:a8:8d:50:e0:bc:45:32:78:4c:dc:4e:
af:37:4d:da:47:9d:49:c2:df:2d:5c:99:b3:34:ff:
d5:4b:6b:a8:83:31:f5:c5:f8:17:4b:2b:73:0c:9b:
d1:ef:94:ac:ae:3e:44:65:e2:54:53:09:a1:b9:f1:
50:03:bf:9c:0f:e0:74:8a:2c:2a:33:5d:b7:df:0b:
07:58:b9:7c:5f:2f:5f:64:4c:72:38:83:0a:d9:63:
24:4e:18:4a:bd:4b:a4:93:c1:a6:df:55:d8:ac:66:
96:ee:ef:e8:53:2c:25:b3:ba:6b:07:1b:fe:07:5d:
25:f7:a3:08:dd:93:f7:a3:41:9a:45:ab:09:6c:50:
fe:cf:74:7e:75:8d:16:e8:64:80:ae:06:02:5c:d0:
5b:df:97:bb:48:1a:51:e4:64:9e:71:63:ad:03:54:
a5:f7:b7:fa:79:85:ac:29:ea:04:58:de:a2:20:80:
4e:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:87:DF:7A:11:21:25:CB:87:53:65:B8:46:A4:A6:B1:8C:73:42:58
X509v3 Authority Key Identifier:
keyid:49:C4:03:D4:3B:5F:38:FC:A2:11:9C:D1:40:9A:92:76:3E:DE:FE:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ScQD1DtfOPyiEZzRQJqSdj7e_nE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/a2f87b-4811-4fe1-b15d-f889ca161c01/1/y4ffehEhJcuHU2W4RqSmsYxzQlg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/a2f87b-4811-4fe1-b15d-f889ca161c01/1/ScQD1DtfOPyiEZzRQJqSdj7e_nE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.75.13.0/24
Signature Algorithm: sha256WithRSAEncryption
47:84:c7:e1:b9:bb:87:ac:a1:80:0c:6d:72:96:48:6f:b9:4f:
c8:66:55:c6:2a:51:1d:d9:9b:9f:13:b3:67:a5:aa:c7:71:c2:
b2:42:81:64:a6:42:12:5e:fc:b1:b6:8d:82:55:03:2a:d4:e9:
2a:3c:09:a4:47:a2:0e:16:3c:2b:27:d5:d3:3d:e7:20:41:cf:
4c:d6:6d:c4:29:58:71:01:9e:90:a1:af:81:b2:01:1b:ef:83:
da:88:ac:6a:2b:e9:84:43:68:51:89:3e:8e:e3:a3:49:a9:77:
83:28:b8:ba:e6:2a:a3:9c:07:ac:aa:99:e5:2a:a8:78:42:ce:
59:8f:a2:cc:89:85:70:ad:72:a8:f0:19:18:97:e5:6e:dd:c1:
1e:0f:e5:bf:5e:d1:f3:99:ba:ac:06:38:23:38:d1:f6:45:3a:
3c:42:32:c2:8e:19:8a:6c:5b:87:55:65:dc:eb:0a:bb:f0:2b:
2a:8a:24:a9:d7:a0:0e:cd:b1:aa:13:6f:14:d9:ab:4d:a5:03:
e4:c7:a2:52:dd:e5:03:a4:a1:5c:6d:28:b3:dd:2b:ce:21:40:
80:81:86:94:45:94:44:3c:71:f2:52:c9:c9:1c:6a:15:7f:16:
e5:71:7f:46:1b:df:cf:57:1a:c8:d3:e1:4f:1a:d4:1c:2f:ee:
ee:a3:2b:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:59:14 2025 by rpki-client