Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/6e90d9-8cce-4ff5-abd8-eee6ba1829b4/1/YXf-UI6sodjRtp6HqVvWtQPvYyw.roa
File: YXf-UI6sodjRtp6HqVvWtQPvYyw.roa (raw, json)
Hash identifier: Jo6+/rWF7ZwPltXrVquS1cq9nd5I9gl4VOXFVkjNYeU=
Subject key identifier: 61:77:FE:50:8E:AC:A1:D8:D1:B6:9E:87:A9:5B:D6:B5:03:EF:63:2C
Certificate issuer: /CN=7277845995776cf6f2a0837f7ad4c1a91bc97d82
Certificate serial: 019424B3E86B6E873FAD5B73CED08D66103A
Authority key identifier: 72:77:84:59:95:77:6C:F6:F2:A0:83:7F:7A:D4:C1:A9:1B:C9:7D:82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cneEWZV3bPbyoIN_etTBqRvJfYI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/6e90d9-8cce-4ff5-abd8-eee6ba1829b4/1/YXf-UI6sodjRtp6HqVvWtQPvYyw.roa
Signing time: Thu 02 Jan 2025 01:49:17 +0000
ROA not before: Thu 02 Jan 2025 01:49:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202391
IP address blocks: 185.174.132.0/24 maxlen: 24
185.174.134.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:e8:6b:6e:87:3f:ad:5b:73:ce:d0:8d:66:10:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7277845995776cf6f2a0837f7ad4c1a91bc97d82
Validity
Not Before: Jan 2 01:49:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6177fe508eaca1d8d1b69e87a95bd6b503ef632c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:97:8f:31:81:81:d3:ca:5f:3d:ef:53:86:c8:
28:18:97:f2:33:f7:fd:b2:23:a4:0f:37:b9:38:5c:
3b:cb:ac:9e:01:96:cf:39:93:41:00:9e:8f:99:cd:
10:32:c8:a7:f2:90:36:81:a0:07:4f:66:9a:f1:9d:
0d:68:94:ec:09:05:da:9b:2c:b5:a8:97:42:73:97:
c0:d4:4b:88:8f:bb:bb:4e:89:02:9c:d8:63:be:84:
9b:4e:27:b8:4f:b9:ff:85:e8:e4:fa:4a:8e:bd:6f:
36:cc:1d:e3:7e:13:c7:2a:33:47:ab:d4:38:78:95:
85:26:e4:f2:bc:0f:aa:c6:93:c5:48:72:8f:08:0d:
c5:71:41:98:8b:af:6d:4c:ff:e3:4f:02:63:7e:7c:
0a:a7:ba:6a:c3:95:7f:f5:7e:c2:b8:27:f5:67:60:
30:27:ba:9c:c1:03:80:1e:a8:a6:05:a2:3b:70:2c:
90:e0:68:4d:6a:26:db:e2:bf:6e:bc:59:25:c0:67:
08:77:48:b1:50:01:da:f3:f7:5f:5f:d7:98:60:de:
18:0e:c4:a5:49:a7:0e:89:fd:3f:fe:7a:a2:f6:62:
67:1b:81:d7:6e:39:b6:a3:b7:cb:6c:44:e8:26:c6:
87:1c:83:f1:da:cc:5a:82:80:d8:d1:bc:b3:30:22:
00:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:77:FE:50:8E:AC:A1:D8:D1:B6:9E:87:A9:5B:D6:B5:03:EF:63:2C
X509v3 Authority Key Identifier:
keyid:72:77:84:59:95:77:6C:F6:F2:A0:83:7F:7A:D4:C1:A9:1B:C9:7D:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cneEWZV3bPbyoIN_etTBqRvJfYI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/6e90d9-8cce-4ff5-abd8-eee6ba1829b4/1/YXf-UI6sodjRtp6HqVvWtQPvYyw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/6e90d9-8cce-4ff5-abd8-eee6ba1829b4/1/cneEWZV3bPbyoIN_etTBqRvJfYI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.174.132.0/24
185.174.134.0/24
Signature Algorithm: sha256WithRSAEncryption
19:50:47:5c:60:e9:cd:cc:cb:53:59:80:3d:d9:96:d3:44:4b:
aa:a0:e2:79:5b:93:92:3a:ec:c2:d0:29:ad:3c:37:7a:57:04:
44:65:ac:63:d3:a1:bc:32:f4:9d:4d:aa:97:18:ab:52:17:3a:
fc:70:84:fe:1c:74:c1:8f:8f:7a:95:4d:29:5e:42:ba:c4:7e:
ae:06:8e:56:70:e1:83:0c:89:56:b5:41:92:51:06:97:37:6d:
7b:86:36:ee:80:3b:0c:14:66:54:76:53:0a:b1:b4:27:7c:6e:
58:1e:91:2b:6f:5c:5a:2f:d5:df:6e:5f:0e:49:81:a7:fb:88:
0b:8a:d3:8b:51:ee:39:f6:29:62:43:06:d0:af:93:1d:c6:74:
ce:15:b8:ea:50:e5:72:b4:37:e7:ec:80:fe:f5:3b:0c:35:8b:
5e:59:1f:5e:be:3d:c9:c0:f0:cb:af:f2:9b:da:5e:85:cb:6d:
8a:42:72:17:5e:c5:0b:18:e5:1e:84:cd:33:62:0f:82:9a:73:
36:95:3c:8b:ec:16:cb:6c:6f:e1:ba:3e:1c:6c:ec:ab:14:1d:
a6:1e:ce:a6:0a:8c:c9:f5:fd:ab:c7:fd:76:b9:c1:a7:3e:4e:
72:ea:4b:ed:41:4c:d3:37:7b:0a:b3:8e:b3:da:7e:57:f1:fa:
c3:24:60:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 06:07:17 2025 by rpki-client