Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/3e6762-0989-48ef-a8d2-db484cce7293/1/YIzXk3w2A_mHXnQwfHIRuGRDzO0.roa
File: YIzXk3w2A_mHXnQwfHIRuGRDzO0.roa (raw, json)
Hash identifier: w+KFjfkzM8iWvfdH1LsSPeTDcAp7/XS8C3VsFxe8b1Q=
Subject key identifier: 60:8C:D7:93:7C:36:03:F9:87:5E:74:30:7C:72:11:B8:64:43:CC:ED
Certificate issuer: /CN=c8f9baab1a13df30eff0fcd780c4bbc54bc3e6d5
Certificate serial: 0194258F53473E734F37083D98A1E98F0051
Authority key identifier: C8:F9:BA:AB:1A:13:DF:30:EF:F0:FC:D7:80:C4:BB:C5:4B:C3:E6:D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yPm6qxoT3zDv8PzXgMS7xUvD5tU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/3e6762-0989-48ef-a8d2-db484cce7293/1/YIzXk3w2A_mHXnQwfHIRuGRDzO0.roa
Signing time: Thu 02 Jan 2025 05:48:57 +0000
ROA not before: Thu 02 Jan 2025 05:48:57 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16019
IP address blocks: 185.189.4.0/22 maxlen: 22
2a0b:d780::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:53:47:3e:73:4f:37:08:3d:98:a1:e9:8f:00:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8f9baab1a13df30eff0fcd780c4bbc54bc3e6d5
Validity
Not Before: Jan 2 05:48:57 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=608cd7937c3603f9875e74307c7211b86443cced
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:89:83:ad:dd:9f:b7:9a:b3:c0:52:67:d6:f7:
40:a2:25:32:a8:32:3b:b2:0e:a9:9b:2f:8c:ac:c8:
64:4a:fd:10:97:a6:a1:2e:9b:38:46:bc:35:a9:68:
eb:62:1c:0a:f9:18:82:df:e0:72:07:b8:a9:20:e1:
fe:c1:1a:b5:72:45:9a:04:51:60:71:12:78:97:4f:
d7:ce:36:da:2a:e2:a4:f2:39:6c:0e:14:75:8b:da:
53:37:64:52:90:14:5d:11:bd:69:5e:6b:c6:3e:fe:
d2:32:07:9f:38:fb:c4:ae:a6:b8:44:8a:25:8b:c7:
44:8c:62:5e:ab:f5:2d:ac:cb:d7:1c:f5:12:3a:d7:
5b:b4:08:12:55:fb:65:5b:96:6a:01:ad:30:2c:6b:
4e:86:ce:38:a3:c1:66:4f:a8:e3:05:d7:33:f1:e3:
8f:b2:dd:7d:0e:e8:bc:53:7d:43:c0:62:29:1b:8f:
8c:7f:d2:0b:e3:df:6e:21:5f:b4:b8:7f:cd:cb:12:
26:1b:f9:14:42:f4:c3:a2:f0:aa:04:ec:10:3a:0c:
d4:88:9b:34:9c:c0:bc:56:97:25:c0:93:7d:d0:1d:
81:10:df:00:27:f5:5e:bf:e8:a4:aa:57:3b:d1:79:
aa:dc:88:cb:c2:b5:62:66:60:43:8e:e6:e9:06:a7:
e8:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:8C:D7:93:7C:36:03:F9:87:5E:74:30:7C:72:11:B8:64:43:CC:ED
X509v3 Authority Key Identifier:
keyid:C8:F9:BA:AB:1A:13:DF:30:EF:F0:FC:D7:80:C4:BB:C5:4B:C3:E6:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yPm6qxoT3zDv8PzXgMS7xUvD5tU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/3e6762-0989-48ef-a8d2-db484cce7293/1/YIzXk3w2A_mHXnQwfHIRuGRDzO0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/3e6762-0989-48ef-a8d2-db484cce7293/1/yPm6qxoT3zDv8PzXgMS7xUvD5tU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.189.4.0/22
IPv6:
2a0b:d780::/29
Signature Algorithm: sha256WithRSAEncryption
37:f4:9e:db:ec:c5:32:b5:2c:96:51:32:f0:ce:af:a2:b1:fe:
20:ab:7c:7c:4c:08:9a:fc:4f:9d:47:18:35:3b:2f:e6:01:a2:
e1:2d:89:a2:ab:dc:aa:74:ce:2a:93:a0:4f:f8:ae:d7:27:e5:
3c:f8:e3:ca:5a:9b:29:38:2f:29:f3:b0:ae:74:68:ef:1b:6f:
97:d4:be:7e:52:4f:a3:c6:a4:5a:a1:14:4a:67:43:09:1c:80:
e1:b7:ed:21:88:52:13:98:c2:ad:77:f2:00:d1:90:79:28:46:
4c:00:63:ba:cc:40:ec:c3:cb:0d:c3:f6:fd:53:8b:de:87:d9:
67:54:a4:43:87:0d:64:16:a8:64:d6:f8:c3:ef:bb:69:b2:a2:
d1:d1:12:50:64:2c:a7:07:40:4b:d7:35:2b:d5:a4:2e:97:37:
9e:00:f5:96:67:e8:59:2a:09:12:fc:f6:d2:8e:5d:0b:7b:95:
aa:17:94:b6:84:c6:c0:26:7c:84:39:f4:4c:e7:4f:62:92:a0:
32:53:af:9a:11:13:95:7d:8d:75:d3:fe:2e:31:d6:8f:b0:bb:
5f:a0:d5:98:c7:94:1a:0a:e5:b3:98:a6:a1:44:c2:be:37:3c:
e3:24:48:c2:b9:43:83:c1:b8:6a:cb:fd:4a:9f:5d:f2:c7:b2:
4b:75:6b:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 03:29:36 2025 by rpki-client