Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/3550d9-3022-4dba-a75a-1c0d4a21cb23/1/yBW-am3EUBRx9O7vZzWxsexyVDc.roa
File: yBW-am3EUBRx9O7vZzWxsexyVDc.roa (raw, json)
Hash identifier: 84nll77B7BpLcH7NgDygxbbVVF73lkH0GTZskrUTIoc=
Subject key identifier: C8:15:BE:6A:6D:C4:50:14:71:F4:EE:EF:67:35:B1:B1:EC:72:54:37
Certificate issuer: /CN=76d47c234a8b92f31d3989cc42219f80c947da19
Certificate serial: 0194252189ADA30B2303A1059D7771CFBC46
Authority key identifier: 76:D4:7C:23:4A:8B:92:F3:1D:39:89:CC:42:21:9F:80:C9:47:DA:19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dtR8I0qLkvMdOYnMQiGfgMlH2hk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/3550d9-3022-4dba-a75a-1c0d4a21cb23/1/yBW-am3EUBRx9O7vZzWxsexyVDc.roa
Signing time: Thu 02 Jan 2025 03:49:02 +0000
ROA not before: Thu 02 Jan 2025 03:49:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48095
IP address blocks: 185.217.24.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:89:ad:a3:0b:23:03:a1:05:9d:77:71:cf:bc:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=76d47c234a8b92f31d3989cc42219f80c947da19
Validity
Not Before: Jan 2 03:49:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c815be6a6dc4501471f4eeef6735b1b1ec725437
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:d9:e7:67:42:35:10:a8:b3:7d:28:e0:16:35:
71:cd:90:c4:38:82:7f:c6:58:d4:19:4b:48:f7:1b:
10:cf:91:f2:df:0b:04:e3:1b:d0:ca:ae:2e:0f:aa:
be:12:f9:bb:d8:5f:96:52:e3:ee:7b:8f:d9:71:2c:
3f:81:7d:5b:83:8f:3c:f1:11:6c:12:19:9e:ae:c0:
49:34:20:63:9f:fd:1f:70:5b:e0:09:2d:e1:18:d0:
82:c4:e2:7e:42:04:b0:1e:6d:1b:b3:cc:ae:34:cf:
b5:0c:17:2f:0e:92:df:6a:f4:1d:2a:c7:fd:33:68:
16:7b:07:f7:05:ab:cc:3b:4d:9c:00:60:2d:69:a2:
b7:52:43:98:ac:ba:dc:f3:b8:db:7b:9e:5a:cb:1a:
a5:6a:a5:47:3b:05:6e:68:21:16:df:a8:5d:f1:a1:
f3:10:25:b3:11:85:4f:bc:1d:6f:73:0d:cc:42:7e:
70:74:98:a8:e3:0a:37:8e:a9:1a:19:07:f3:57:8d:
b9:0d:b1:56:6c:f5:54:a9:46:88:08:43:99:ab:d1:
76:b3:98:9e:76:9f:46:b6:fc:e2:ba:be:6a:30:ed:
4b:b5:29:b5:04:df:f6:6d:99:ad:56:29:71:aa:72:
b9:f0:f8:35:73:5c:76:17:f7:1e:ea:8f:99:20:48:
9c:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:15:BE:6A:6D:C4:50:14:71:F4:EE:EF:67:35:B1:B1:EC:72:54:37
X509v3 Authority Key Identifier:
keyid:76:D4:7C:23:4A:8B:92:F3:1D:39:89:CC:42:21:9F:80:C9:47:DA:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dtR8I0qLkvMdOYnMQiGfgMlH2hk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/3550d9-3022-4dba-a75a-1c0d4a21cb23/1/yBW-am3EUBRx9O7vZzWxsexyVDc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/3550d9-3022-4dba-a75a-1c0d4a21cb23/1/dtR8I0qLkvMdOYnMQiGfgMlH2hk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.217.24.0/22
Signature Algorithm: sha256WithRSAEncryption
a2:3b:1b:7e:83:e8:9f:b9:2b:eb:a2:a7:a2:d5:65:3e:b0:83:
90:d4:15:eb:ba:5a:17:9e:c0:a4:5a:e3:ce:15:2a:9d:52:ea:
37:b3:d0:4c:ea:0a:e5:bd:54:42:a2:e3:06:58:bd:a8:2c:df:
a2:a3:e6:30:e5:e4:1c:26:1a:16:c4:ed:08:95:c3:e0:df:6b:
81:0e:9a:82:94:a5:49:1a:9c:c1:cb:fe:f7:8b:11:4b:60:cd:
27:5d:43:d0:3c:fd:42:99:3f:ce:1e:c0:7d:16:24:ec:e7:c1:
f3:ee:69:f4:ad:54:73:dc:00:23:82:d1:c3:07:a6:d6:c0:4d:
5e:7b:62:b0:17:80:0b:63:4d:81:49:86:ca:9a:7a:6e:5e:24:
1a:91:a4:cc:3a:a5:9b:b4:75:64:28:3d:02:58:c4:2c:50:4b:
cb:d3:6e:e8:24:16:f5:9f:93:00:d2:42:6e:c5:2c:dc:ce:8d:
58:d3:5c:13:46:38:98:7f:2b:ab:54:06:9c:32:e7:97:7a:56:
9e:8a:d0:18:44:e1:cb:fe:40:43:04:1b:d7:60:87:df:46:70:
cc:04:8c:23:a3:7d:00:54:53:96:b1:a7:81:1c:29:59:af:76:
21:33:79:83:59:3c:2e:6c:19:b0:01:c9:58:63:f6:f4:ad:ae:
3f:57:eb:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 16:46:44 2025 by rpki-client