Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/badedf-d0e9-45a9-af75-10edb541e6ff/1/YJWzlQkM6ftNHV4yjRuuX05jZgk.roa
File: YJWzlQkM6ftNHV4yjRuuX05jZgk.roa (raw, json)
Hash identifier: 7ihFcpvO1ZNzg+G5DeJYt7AlezmKaK/DCjnqfua0DrQ=
Subject key identifier: 60:95:B3:95:09:0C:E9:FB:4D:1D:5E:32:8D:1B:AE:5F:4E:63:66:09
Certificate issuer: /CN=306c0866dc25208e6c07d4a21d7d8050b508d6a2
Certificate serial: 0194282309366096CA3F9502DF12724A237F
Authority key identifier: 30:6C:08:66:DC:25:20:8E:6C:07:D4:A2:1D:7D:80:50:B5:08:D6:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MGwIZtwlII5sB9SiHX2AULUI1qI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/badedf-d0e9-45a9-af75-10edb541e6ff/1/YJWzlQkM6ftNHV4yjRuuX05jZgk.roa
Signing time: Thu 02 Jan 2025 17:49:32 +0000
ROA not before: Thu 02 Jan 2025 17:49:32 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57724
IP address blocks: 185.231.33.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:23:09:36:60:96:ca:3f:95:02:df:12:72:4a:23:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=306c0866dc25208e6c07d4a21d7d8050b508d6a2
Validity
Not Before: Jan 2 17:49:32 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6095b395090ce9fb4d1d5e328d1bae5f4e636609
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:cd:11:e8:4b:2f:61:d4:50:9f:3a:55:52:fe:
da:0b:dd:9e:94:bd:8b:27:5b:7a:21:0c:c2:62:2c:
ff:ca:d9:5b:80:6e:af:74:03:08:28:1f:99:ea:77:
0c:c9:49:30:3f:d9:97:fe:a7:6c:8b:2f:4a:9d:84:
14:cb:e9:6e:28:87:87:cd:6b:42:50:8f:f2:7b:8e:
46:46:f0:6f:d3:c0:98:24:d9:40:6c:f1:85:e0:1a:
40:b8:d8:20:2d:3d:0e:25:0f:97:bd:15:27:bb:86:
e3:fa:bb:11:fc:6b:5d:82:b3:a7:f5:88:d8:22:7d:
24:a9:3f:86:95:de:05:a4:b2:23:30:d1:7c:12:fb:
36:09:a0:d1:50:0c:fb:db:56:75:00:3b:d2:fe:82:
f8:6c:ca:79:8a:48:f3:31:96:d2:ee:8a:41:6e:27:
0c:e8:dd:68:50:56:02:54:9e:44:bf:fd:3f:42:5c:
8b:02:05:e5:5d:c5:6a:9d:e5:66:f3:11:9c:ac:c7:
44:3a:f0:a0:1f:82:71:64:2f:2a:f1:f4:d1:ec:90:
ff:46:28:7d:da:1c:4a:6b:d9:2e:db:47:c0:66:80:
e7:01:68:21:98:44:73:bd:a8:a0:b5:c5:6b:58:fc:
df:92:36:5c:d2:57:89:86:07:78:96:39:30:e7:d4:
7f:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:95:B3:95:09:0C:E9:FB:4D:1D:5E:32:8D:1B:AE:5F:4E:63:66:09
X509v3 Authority Key Identifier:
keyid:30:6C:08:66:DC:25:20:8E:6C:07:D4:A2:1D:7D:80:50:B5:08:D6:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MGwIZtwlII5sB9SiHX2AULUI1qI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/badedf-d0e9-45a9-af75-10edb541e6ff/1/YJWzlQkM6ftNHV4yjRuuX05jZgk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/badedf-d0e9-45a9-af75-10edb541e6ff/1/MGwIZtwlII5sB9SiHX2AULUI1qI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.231.33.0/24
Signature Algorithm: sha256WithRSAEncryption
a7:3c:84:30:3b:f0:5e:e6:f5:d5:3f:de:21:0e:fc:10:c4:72:
30:63:11:54:32:29:f7:b9:ab:80:b6:c1:72:3f:5c:51:48:12:
fa:05:82:3c:c6:70:75:f2:50:ad:51:22:e1:91:8c:87:d6:64:
24:0b:8d:44:01:82:c1:44:f1:48:8a:2f:85:e4:f9:76:b1:9d:
ad:a2:26:d7:81:f2:2e:f2:01:c8:f4:6b:95:78:4e:b3:fc:a7:
16:5b:4c:0e:2f:7b:e6:8e:17:c8:a3:1e:9c:02:f4:e7:34:98:
6a:4a:f7:02:1c:5e:22:4a:4e:f6:18:c7:f4:ed:d7:5f:29:25:
5b:99:3a:e7:e1:e1:3c:57:9a:a5:14:e9:71:ad:5f:e8:61:74:
c6:eb:2e:d7:ce:91:62:73:48:c5:48:f0:3b:47:1f:a5:06:b6:
e3:ee:17:39:99:62:05:f9:2e:43:f3:00:c3:cf:84:6b:b0:7f:
39:27:67:c5:5b:b6:a9:46:67:38:5a:12:7f:df:ca:e1:1c:06:
d8:24:db:ac:19:22:17:cf:5a:17:05:ed:5f:e5:f0:6e:c8:3a:
9e:b5:37:ca:8f:1f:fb:bb:8a:aa:27:39:a1:c5:c7:25:b1:4d:
17:9b:6c:db:db:68:37:99:f0:24:d9:85:4c:3c:39:16:d5:d6:
a2:b9:c5:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 10:55:52 2025 by rpki-client