Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/b4673b-210b-4e5a-876a-dc059e69b1d0/1/YraDuYuMIlkEmdPd43lQxmtLVG0.roa
File: YraDuYuMIlkEmdPd43lQxmtLVG0.roa (raw, json)
Hash identifier: vscD5TcTDxAgQFa013w668xvOsNW4c0gyN2OgXv6DfA=
Subject key identifier: 62:B6:83:B9:8B:8C:22:59:04:99:D3:DD:E3:79:50:C6:6B:4B:54:6D
Certificate issuer: /CN=ef678469574acc03d782e63281ff44faaab3f847
Certificate serial: 0194258F6F411CDEAC1D0047555EAE25C2FC
Authority key identifier: EF:67:84:69:57:4A:CC:03:D7:82:E6:32:81:FF:44:FA:AA:B3:F8:47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/72eEaVdKzAPXguYygf9E-qqz-Ec.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/b4673b-210b-4e5a-876a-dc059e69b1d0/1/YraDuYuMIlkEmdPd43lQxmtLVG0.roa
Signing time: Thu 02 Jan 2025 05:49:04 +0000
ROA not before: Thu 02 Jan 2025 05:49:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207440
IP address blocks: 185.251.36.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:6f:41:1c:de:ac:1d:00:47:55:5e:ae:25:c2:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef678469574acc03d782e63281ff44faaab3f847
Validity
Not Before: Jan 2 05:49:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=62b683b98b8c22590499d3dde37950c66b4b546d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:14:29:70:2f:be:3c:15:e2:ba:a3:fc:3d:24:
f7:d8:03:f4:00:b8:e0:b9:c8:a2:15:a1:ec:1c:c9:
0f:f4:8a:9f:be:ec:ac:60:8b:43:9a:53:67:0d:4c:
3b:fc:76:c2:02:2e:d2:ec:5a:21:39:86:25:73:c0:
0c:ca:18:42:03:2f:8d:98:3b:ff:f7:a7:c4:d2:7f:
c1:b3:c0:fc:ec:69:8d:5c:ef:06:ec:22:29:e1:ef:
39:f1:21:b7:78:3b:8d:41:41:61:d5:b1:64:c9:c1:
f0:fe:0c:c7:6a:82:8a:8e:28:c5:17:f7:40:67:6c:
f3:b8:c8:d5:89:39:7e:49:57:63:2d:08:86:97:79:
a1:17:71:7b:33:0f:2a:8f:5b:15:23:c7:f5:58:5b:
2a:57:1c:0a:fb:8a:80:eb:d3:5f:b0:2d:84:f4:73:
b8:56:e9:15:44:c8:21:0b:f2:7b:cc:ff:b9:50:f0:
31:3b:52:af:a6:13:81:63:e9:84:46:e2:cb:af:24:
85:e8:77:3b:70:6f:60:26:66:67:44:32:ff:08:2a:
7f:ad:e0:16:eb:6c:c5:a1:7e:72:7f:6f:a7:0c:06:
a2:d0:07:8f:fd:a3:10:9b:65:45:ed:db:d3:95:a6:
ad:f8:1c:6e:66:19:70:8c:d8:99:b6:05:a5:e6:dc:
2e:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:B6:83:B9:8B:8C:22:59:04:99:D3:DD:E3:79:50:C6:6B:4B:54:6D
X509v3 Authority Key Identifier:
keyid:EF:67:84:69:57:4A:CC:03:D7:82:E6:32:81:FF:44:FA:AA:B3:F8:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/72eEaVdKzAPXguYygf9E-qqz-Ec.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/b4673b-210b-4e5a-876a-dc059e69b1d0/1/YraDuYuMIlkEmdPd43lQxmtLVG0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/b4673b-210b-4e5a-876a-dc059e69b1d0/1/72eEaVdKzAPXguYygf9E-qqz-Ec.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.251.36.0/24
Signature Algorithm: sha256WithRSAEncryption
24:68:a2:9b:a8:c8:b6:98:1a:ea:49:ef:62:fb:26:71:55:7a:
aa:4a:75:51:d5:71:33:1b:1d:60:e1:56:c4:bd:50:93:4c:19:
5f:b0:65:e4:ee:76:dd:ed:5f:1f:7c:2f:0a:f5:19:d4:84:aa:
62:0b:95:60:4f:80:28:16:3c:af:cb:3a:2c:75:da:68:be:c1:
c0:2c:84:9b:d9:d0:1d:dd:24:5f:3d:19:dc:c9:08:f0:bd:8a:
fd:d1:d2:b2:ca:7b:e6:05:17:af:b3:ac:52:d4:b6:00:34:33:
8d:51:a6:05:c1:ca:7a:c1:cc:a1:f2:4b:63:ed:2c:4c:5f:37:
25:21:b8:ad:e0:35:65:6b:c5:c3:df:5e:de:de:4e:b2:f0:10:
e3:29:94:27:9b:70:d7:4e:31:5d:f4:7b:a2:de:cc:10:32:ec:
38:1b:06:27:7c:e1:d8:ff:d5:3a:d4:e6:69:0a:5b:1d:b5:a4:
b4:2e:2c:2c:1e:cc:6d:73:e8:6e:fe:51:af:54:6f:65:94:56:
64:a7:52:92:0f:74:bb:ce:a7:45:4e:b0:5a:0a:65:82:80:89:
5b:2b:62:a4:9e:70:f8:a5:db:64:1b:75:1c:d4:9b:ef:7c:ca:
4d:4f:d3:de:69:06:33:20:78:6a:7f:d8:bf:fe:34:0c:31:21:
af:57:d5:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 11:01:32 2025 by rpki-client