Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/a86a91-6356-4c2c-9f8f-de4accb00dd7/1/2E_YHRCuF5MHTxlMx4c1H-5_vdo.roa
File: 2E_YHRCuF5MHTxlMx4c1H-5_vdo.roa (raw, json)
Hash identifier: cd6fZP84XkBNWRqBbhJXNCRjH3aM1q5IULZkt1L/R08=
Subject key identifier: D8:4F:D8:1D:10:AE:17:93:07:4F:19:4C:C7:87:35:1F:EE:7F:BD:DA
Certificate issuer: /CN=9759529dd3170645d76cf6ac0659506cc649ca90
Certificate serial: 019425217E7412BCADF6BAAEA2AB8925919E
Authority key identifier: 97:59:52:9D:D3:17:06:45:D7:6C:F6:AC:06:59:50:6C:C6:49:CA:90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l1lSndMXBkXXbPasBllQbMZJypA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/a86a91-6356-4c2c-9f8f-de4accb00dd7/1/2E_YHRCuF5MHTxlMx4c1H-5_vdo.roa
Signing time: Thu 02 Jan 2025 03:48:59 +0000
ROA not before: Thu 02 Jan 2025 03:48:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51191
IP address blocks: 185.169.24.0/24 maxlen: 24
185.169.25.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:7e:74:12:bc:ad:f6:ba:ae:a2:ab:89:25:91:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9759529dd3170645d76cf6ac0659506cc649ca90
Validity
Not Before: Jan 2 03:48:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d84fd81d10ae1793074f194cc787351fee7fbdda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:29:b5:96:23:33:d3:d0:fc:99:ba:13:21:71:
16:0d:c3:a7:d5:55:10:b5:97:2c:9e:8e:13:55:7d:
30:61:cf:40:b9:d7:4c:c2:ae:e4:be:d5:51:fe:02:
64:92:88:64:ad:ec:75:21:bc:8f:d6:d7:56:f5:c0:
86:d6:90:1d:7e:db:f1:14:99:f3:4b:be:67:14:21:
a4:75:00:17:04:1b:bf:43:e0:c2:b6:68:ac:33:da:
f3:3a:a5:ba:45:c4:f7:d1:c1:19:7f:2b:d9:cb:f4:
46:d8:9d:f5:4e:b9:00:7f:b0:a8:8e:d2:a3:90:3b:
6f:25:71:89:20:34:db:08:76:43:cd:ac:3d:80:08:
19:5e:c9:aa:56:13:c6:bd:70:0d:79:10:bf:d8:bf:
5a:55:6d:97:c5:93:3b:9a:ec:fa:9e:a5:7e:a0:89:
67:ca:76:43:41:6e:ec:34:c2:60:47:d6:1a:a6:7f:
be:fd:a6:43:de:b1:c2:4e:81:46:88:a4:4a:e2:7d:
fc:2b:4b:f1:33:d7:8c:73:ec:91:d4:55:fd:41:c8:
74:e6:c3:0b:f9:2c:f5:3a:73:4f:b1:b4:ed:ca:9d:
96:3a:6b:fa:b7:20:c2:ec:3c:6d:69:9e:fc:92:ca:
dd:ed:12:ee:f0:22:c5:dd:17:f8:02:a3:cd:11:10:
0b:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:4F:D8:1D:10:AE:17:93:07:4F:19:4C:C7:87:35:1F:EE:7F:BD:DA
X509v3 Authority Key Identifier:
keyid:97:59:52:9D:D3:17:06:45:D7:6C:F6:AC:06:59:50:6C:C6:49:CA:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l1lSndMXBkXXbPasBllQbMZJypA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/a86a91-6356-4c2c-9f8f-de4accb00dd7/1/2E_YHRCuF5MHTxlMx4c1H-5_vdo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/a86a91-6356-4c2c-9f8f-de4accb00dd7/1/l1lSndMXBkXXbPasBllQbMZJypA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.169.24.0/23
Signature Algorithm: sha256WithRSAEncryption
88:6a:6d:89:92:23:23:09:6a:1f:ea:d4:25:0c:e8:ad:77:c9:
53:da:7b:9d:78:5c:2a:d3:cf:44:3a:8c:82:6e:a5:57:4c:3f:
f2:22:b0:45:4b:d5:a0:a5:43:8c:19:a3:a7:1d:6b:ac:e8:96:
d0:e4:ef:b5:a9:6e:01:56:8d:39:5f:af:c4:0e:5b:49:b7:e3:
b2:6c:a3:15:93:40:c6:86:22:43:47:a1:15:f3:c5:fe:e7:75:
72:3c:55:6f:ed:3e:c4:8d:75:ce:92:22:60:eb:14:20:41:e6:
b3:50:72:ae:89:b2:13:51:26:ca:59:50:3a:9e:dd:24:c9:49:
f8:a3:b2:3d:5a:f0:d9:d5:12:b4:4c:df:58:42:09:60:96:68:
25:be:30:9e:ce:40:0c:15:5e:2c:64:a1:4e:f4:64:8a:55:ff:
c5:7d:92:ad:70:c4:17:8a:74:e0:6d:8e:1b:64:0a:48:fe:c4:
02:8f:91:4c:7a:fd:9f:9d:b2:ef:b7:13:a3:36:16:cc:9a:0a:
c6:04:c3:1d:c1:16:95:c7:79:31:b7:a5:1b:19:e1:41:5c:b1:
a5:7e:f3:d6:61:27:9e:d7:7e:1a:8b:c0:79:00:0b:7f:9d:5e:
e9:43:d8:ca:94:19:4c:23:d3:2a:e6:8a:78:df:2f:2c:ce:b6:
07:64:d6:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:42:00 2025 by rpki-client