Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/ab586e-4b2a-47f6-ace8-d292ab7ce9fa/1/YWZ9Y-_nf9hJ3PCcQZw9nBpADV0.roa
File: YWZ9Y-_nf9hJ3PCcQZw9nBpADV0.roa (raw, json)
Hash identifier: 8GJk/xJD9TDW949jEwNVPLQ5jxG7+jInYSsAj0hFBHo=
Subject key identifier: 61:66:7D:63:EF:E7:7F:D8:49:DC:F0:9C:41:9C:3D:9C:1A:40:0D:5D
Certificate issuer: /CN=0350df78fc785813724ec66648df9b494f9b8da7
Certificate serial: 0194244543928FE8E26B81DF856C64298615
Authority key identifier: 03:50:DF:78:FC:78:58:13:72:4E:C6:66:48:DF:9B:49:4F:9B:8D:A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A1DfePx4WBNyTsZmSN-bSU-bjac.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/ab586e-4b2a-47f6-ace8-d292ab7ce9fa/1/YWZ9Y-_nf9hJ3PCcQZw9nBpADV0.roa
Signing time: Wed 01 Jan 2025 23:48:26 +0000
ROA not before: Wed 01 Jan 2025 23:48:26 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 59905
IP address blocks: 91.220.77.0/24 maxlen: 24
185.49.220.0/22 maxlen: 22
185.92.125.0/24 maxlen: 24
185.92.126.0/24 maxlen: 24
185.92.127.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:45:43:92:8f:e8:e2:6b:81:df:85:6c:64:29:86:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0350df78fc785813724ec66648df9b494f9b8da7
Validity
Not Before: Jan 1 23:48:26 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=61667d63efe77fd849dcf09c419c3d9c1a400d5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:ea:25:ba:e9:63:22:4f:2e:db:bf:ea:71:8a:
68:3e:d4:aa:c2:24:5b:32:70:f4:35:0a:28:76:ad:
80:58:48:f5:dd:74:cd:f9:e0:25:33:cc:aa:ea:7d:
37:f1:1b:dc:65:ec:14:07:18:0e:12:c7:c8:d2:65:
4f:24:88:b5:e0:4c:e7:16:f0:13:8c:fb:32:f9:34:
48:9a:ab:fe:64:f5:3d:90:e9:1a:34:f0:0d:a9:08:
f4:ef:ce:55:9c:a8:19:21:56:05:d7:f8:68:da:d2:
d1:cd:bf:c2:f9:58:5c:2b:98:84:4f:5b:55:77:26:
15:b9:ee:17:42:66:bb:57:2a:f8:03:ef:d7:91:f2:
95:7c:f4:4c:2d:ec:20:89:a0:d5:ee:b2:16:37:2c:
8c:e6:0c:46:44:e4:a9:24:0c:f9:b7:49:a2:dd:51:
68:bd:12:43:4a:2e:7d:6c:e2:cb:76:5e:d0:85:d4:
d1:3d:0e:dd:84:3b:4f:77:ec:72:b1:4b:9f:0e:a7:
c5:e6:2a:35:c7:26:17:a5:07:96:5e:9a:36:d1:ea:
a5:44:2d:74:28:b8:db:3c:eb:51:2e:91:f4:36:e5:
a4:c6:90:67:9c:71:de:e0:3a:05:89:19:fe:35:34:
90:28:92:91:53:e5:a9:05:29:17:75:ff:60:9f:2b:
b4:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:66:7D:63:EF:E7:7F:D8:49:DC:F0:9C:41:9C:3D:9C:1A:40:0D:5D
X509v3 Authority Key Identifier:
keyid:03:50:DF:78:FC:78:58:13:72:4E:C6:66:48:DF:9B:49:4F:9B:8D:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A1DfePx4WBNyTsZmSN-bSU-bjac.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/ab586e-4b2a-47f6-ace8-d292ab7ce9fa/1/YWZ9Y-_nf9hJ3PCcQZw9nBpADV0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/ab586e-4b2a-47f6-ace8-d292ab7ce9fa/1/A1DfePx4WBNyTsZmSN-bSU-bjac.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.220.77.0/24
185.49.220.0/22
185.92.125.0-185.92.127.255
Signature Algorithm: sha256WithRSAEncryption
0e:54:68:b1:4f:95:04:7e:0b:03:5c:3d:91:85:b2:95:df:9c:
82:bc:d5:c6:ec:6b:4c:2d:de:9f:9d:e6:56:70:c6:3f:43:65:
a2:29:fc:40:9a:26:a0:75:ed:7f:a2:ec:e9:86:1a:03:8e:33:
cd:89:6b:46:10:fd:84:59:ff:96:ca:da:36:98:79:26:61:aa:
62:51:d0:5a:dc:25:d4:ff:5d:14:b3:a5:73:b3:97:52:25:f7:
c2:cc:e8:53:5e:ba:8b:58:ed:67:7f:e1:d7:fd:25:92:61:c9:
98:e4:53:e5:67:51:c8:ed:a7:1b:bb:9a:9d:f6:4e:49:2d:90:
33:61:d6:f5:e5:c7:d8:3d:26:50:14:d4:68:44:dd:a2:fc:6c:
19:40:6b:2b:a8:27:ca:94:e2:46:2a:e8:50:b0:92:a9:44:c6:
66:21:82:20:4c:6d:e7:66:ac:10:0a:fc:00:58:c0:76:ff:57:
3e:46:da:c5:15:aa:88:7d:8e:4c:c3:43:ce:d6:5e:76:74:24:
70:b7:48:b9:5b:1a:a4:96:4e:94:3c:ab:42:e9:e2:0d:bf:61:
b0:e4:44:6a:db:27:fe:bb:ed:42:63:b5:25:d4:f5:c8:df:0a:
bf:fb:24:e3:ec:47:22:89:34:3a:87:e4:dc:ae:11:48:c3:04:
e6:8f:aa:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:54:18 2025 by rpki-client