Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/Yrj8M2QKm85FgqezvTNKupJvfRM.roa
File: Yrj8M2QKm85FgqezvTNKupJvfRM.roa (raw, json)
Hash identifier: 19NO01gkKNfH49H88V9pcdpwsCQD2Y7XMbrn6a7gp8I=
Subject key identifier: 62:B8:FC:33:64:0A:9B:CE:45:82:A7:B3:BD:33:4A:BA:92:6F:7D:13
Certificate issuer: /CN=767f3bd4bfbd3071c38cd4d7092bd3490920c3d9
Certificate serial: 019426D95AD68DBC2E9AA5E66BBDCB42472F
Authority key identifier: 76:7F:3B:D4:BF:BD:30:71:C3:8C:D4:D7:09:2B:D3:49:09:20:C3:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dn871L-9MHHDjNTXCSvTSQkgw9k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/Yrj8M2QKm85FgqezvTNKupJvfRM.roa
Signing time: Thu 02 Jan 2025 11:49:26 +0000
ROA not before: Thu 02 Jan 2025 11:49:26 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 21859
IP address blocks: 185.213.193.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:5a:d6:8d:bc:2e:9a:a5:e6:6b:bd:cb:42:47:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=767f3bd4bfbd3071c38cd4d7092bd3490920c3d9
Validity
Not Before: Jan 2 11:49:26 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=62b8fc33640a9bce4582a7b3bd334aba926f7d13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:75:f9:06:45:78:c4:ef:dd:e2:f8:37:b0:ef:
bb:36:41:3a:db:c0:05:a8:72:bb:51:0c:1c:ed:c6:
77:a1:9f:a7:6f:16:ac:9d:0c:79:61:61:b5:ba:4c:
6d:c1:d6:c4:4b:b4:91:a8:89:8a:4a:3b:af:ed:3e:
ed:d7:68:56:66:41:c7:b8:af:87:bf:ff:0f:0d:f3:
84:fe:13:02:e9:6a:aa:00:7d:48:0a:be:03:a2:ae:
0d:3b:57:da:8a:9b:33:05:f0:5c:e9:b4:28:01:0d:
4b:58:1d:f6:98:f9:09:bd:63:ca:8d:29:71:3e:ed:
0d:82:16:f7:50:f0:53:1e:5f:87:f6:ad:a2:39:07:
bc:13:22:60:01:7c:5e:7a:c5:da:02:21:f4:22:ed:
19:60:b4:d4:c6:33:bc:16:b2:4c:fb:1d:2f:11:a3:
9c:2d:f7:c3:f9:85:de:54:9b:4a:55:c4:0e:ad:aa:
13:16:3e:07:cb:29:ed:73:0f:33:a8:d8:34:25:0d:
01:c9:38:02:b8:ac:c9:11:8c:3e:88:ed:86:5a:17:
13:97:27:37:e8:0d:b8:4d:e3:77:b4:a3:c8:f9:1b:
f2:ba:c3:a5:06:99:6b:ae:44:31:00:f2:12:ad:36:
ef:ec:77:f8:7b:2e:34:2d:1c:7b:66:aa:53:e0:5a:
24:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:B8:FC:33:64:0A:9B:CE:45:82:A7:B3:BD:33:4A:BA:92:6F:7D:13
X509v3 Authority Key Identifier:
keyid:76:7F:3B:D4:BF:BD:30:71:C3:8C:D4:D7:09:2B:D3:49:09:20:C3:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dn871L-9MHHDjNTXCSvTSQkgw9k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/Yrj8M2QKm85FgqezvTNKupJvfRM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/dn871L-9MHHDjNTXCSvTSQkgw9k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.213.193.0/24
Signature Algorithm: sha256WithRSAEncryption
60:a6:40:66:d2:b9:18:69:85:0d:71:5c:54:93:46:63:d3:1b:
85:ff:78:ae:71:a7:90:1f:6c:b5:fa:d4:45:2e:36:21:9f:9a:
8f:5b:0d:60:35:f3:2c:0a:bb:2d:26:48:17:b7:24:d1:64:6a:
c3:d8:7d:d1:eb:9d:1f:97:5b:a5:51:4b:c3:87:30:c6:7f:26:
f9:e6:d3:27:fa:fb:22:4a:7b:3a:16:a9:45:68:1b:a7:6d:c5:
19:df:35:1a:51:84:83:88:ef:3a:b5:e1:ab:1e:d6:4a:39:52:
02:45:69:79:15:de:09:4f:d4:49:f5:54:45:92:18:ba:4b:3a:
aa:93:b3:84:76:f5:01:70:fe:bb:fd:08:d8:de:02:37:bd:5e:
1e:42:0f:29:47:c0:5d:2e:2a:26:a1:0f:9d:c1:f6:53:25:52:
17:c8:cb:28:ad:dd:2d:1a:9b:19:cf:d2:92:78:e5:53:17:10:
c1:1b:26:73:78:de:02:46:70:92:4c:ff:9b:a4:b8:ec:e2:fd:
a5:28:06:07:3e:0e:93:90:b8:e2:5c:9a:a9:cc:6b:18:cc:bd:
fa:f0:5f:94:4d:db:d7:67:ec:ed:a5:84:1b:c8:26:c9:50:bd:
ed:4c:ad:be:5c:17:33:4e:cd:9f:b8:b6:db:ab:13:c8:06:1f:
70:c5:48:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 23:39:12 2025 by rpki-client