Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/52fb09-6a27-4369-bbdb-87bfc37f0ec2/1/YJIMH9QhIPJ1Xktfo6oftVo9IE8.roa
File: YJIMH9QhIPJ1Xktfo6oftVo9IE8.roa (raw, json)
Hash identifier: VvBURRBsPT2z47HjiEc1H7dnCFoGIcl2xyHs5PJifoM=
Subject key identifier: 60:92:0C:1F:D4:21:20:F2:75:5E:4B:5F:A3:AA:1F:B5:5A:3D:20:4F
Certificate issuer: /CN=7a550c8065bf6033fcc6a3b03813ef9271924196
Certificate serial: 01942444F8F81164CBCFF4D40D9F73896AB8
Authority key identifier: 7A:55:0C:80:65:BF:60:33:FC:C6:A3:B0:38:13:EF:92:71:92:41:96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/elUMgGW_YDP8xqOwOBPvknGSQZY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/52fb09-6a27-4369-bbdb-87bfc37f0ec2/1/YJIMH9QhIPJ1Xktfo6oftVo9IE8.roa
Signing time: Wed 01 Jan 2025 23:48:07 +0000
ROA not before: Wed 01 Jan 2025 23:48:07 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215540
IP address blocks: 185.161.251.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:44:f8:f8:11:64:cb:cf:f4:d4:0d:9f:73:89:6a:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a550c8065bf6033fcc6a3b03813ef9271924196
Validity
Not Before: Jan 1 23:48:07 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=60920c1fd42120f2755e4b5fa3aa1fb55a3d204f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:2c:0f:3d:dd:c5:b0:fb:5b:ac:8c:3d:b7:14:
6c:f5:06:e7:ab:57:38:e3:c5:ac:d9:22:5a:2b:c0:
9e:b8:9c:ee:5f:7b:f4:11:64:d5:ea:42:fb:25:31:
f7:6c:60:55:51:e1:29:cb:8f:70:75:bd:02:01:49:
fd:5d:c5:0c:4a:55:50:8a:76:3e:5f:59:c5:d4:22:
d7:f2:4b:8c:ef:63:83:3e:f4:c5:61:a9:6e:49:d7:
c8:13:e9:5a:5e:d0:ed:03:da:96:78:92:fe:a6:47:
67:03:b4:74:af:9b:1b:91:3c:b3:fe:47:e5:cb:65:
d8:58:23:18:75:43:92:c2:a4:f2:7a:10:cc:b2:72:
a5:c7:a9:59:4d:84:03:52:e9:63:43:51:b5:34:a0:
0a:36:e5:f4:67:73:e8:45:9f:ac:ba:6e:bc:52:4d:
d2:93:41:8a:47:da:74:a6:dd:04:40:35:3c:e8:1d:
cc:5e:e6:c4:05:8d:e8:23:78:ed:0e:76:1a:d3:41:
89:fb:4b:3f:27:11:59:e2:56:5e:e5:32:6c:ab:c2:
d5:e6:b6:37:fc:c6:5f:14:80:48:d2:80:66:b2:dc:
cc:90:a7:f1:1b:2e:05:e2:bd:ec:94:1d:fe:ae:4d:
61:51:c2:42:7d:30:fd:2c:1e:d3:d7:5c:f6:e2:2c:
ff:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:92:0C:1F:D4:21:20:F2:75:5E:4B:5F:A3:AA:1F:B5:5A:3D:20:4F
X509v3 Authority Key Identifier:
keyid:7A:55:0C:80:65:BF:60:33:FC:C6:A3:B0:38:13:EF:92:71:92:41:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/elUMgGW_YDP8xqOwOBPvknGSQZY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/52fb09-6a27-4369-bbdb-87bfc37f0ec2/1/YJIMH9QhIPJ1Xktfo6oftVo9IE8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/52fb09-6a27-4369-bbdb-87bfc37f0ec2/1/elUMgGW_YDP8xqOwOBPvknGSQZY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.161.251.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:9c:6e:28:9b:2b:b4:ff:b9:5b:83:36:f9:af:7d:b2:50:9d:
10:64:71:75:59:ed:3f:29:c8:14:3a:53:5b:c6:a5:63:48:6b:
f0:3e:59:24:51:fe:3f:d5:07:cb:0b:42:20:fe:11:e0:a5:34:
ef:81:aa:c3:1c:75:43:cc:6f:41:0d:64:3b:de:22:c9:7d:90:
78:06:6d:35:0a:14:7b:12:ac:17:fe:a8:25:05:b4:9c:fa:d6:
6a:d6:4e:bb:ad:76:1e:d5:1d:ef:cb:be:a1:42:9b:ef:1b:f5:
25:bb:db:43:75:65:e4:f3:cd:f6:14:24:22:7b:b5:b0:d4:fd:
ae:27:d4:88:c5:c6:22:27:83:cf:be:df:7b:22:d0:9c:14:75:
43:22:62:17:ab:87:0b:40:76:b9:cc:d0:e1:e8:62:04:52:fa:
61:86:21:27:ff:37:5d:77:e7:91:a7:32:12:2d:c7:bb:38:45:
6c:7d:63:65:2a:07:de:d2:cf:27:71:ba:ea:d4:15:98:2a:11:
93:b3:23:8b:cd:f2:dd:ed:05:d8:8b:c4:19:8c:d5:9f:dd:a1:
22:ac:ed:2e:d0:a9:9e:e2:92:13:bb:04:17:26:14:9d:8d:e5:
d7:17:24:b1:8a:d7:23:6d:84:f7:ee:17:09:21:1a:67:32:4d:
0f:5c:cc:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 02:01:53 2025 by rpki-client