Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/36362a-d91c-4ad4-92c7-1d2513308d21/1/YrzvUNT5M4hj46aUuOCmh4XVM5A.roa
File: YrzvUNT5M4hj46aUuOCmh4XVM5A.roa (raw, json)
Hash identifier: rUaB6yYaD6EfXVc/GJmri33jh5n71ZBoGI/gA7B8G6I=
Subject key identifier: 62:BC:EF:50:D4:F9:33:88:63:E3:A6:94:B8:E0:A6:87:85:D5:33:90
Certificate issuer: /CN=fc9be4ed4e54b601e6b6a42d0ba04cfb7ab2c3bf
Certificate serial: 01942068000DD3BBD34D5DA06F8017347040
Authority key identifier: FC:9B:E4:ED:4E:54:B6:01:E6:B6:A4:2D:0B:A0:4C:FB:7A:B2:C3:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_Jvk7U5UtgHmtqQtC6BM-3qyw78.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/36362a-d91c-4ad4-92c7-1d2513308d21/1/YrzvUNT5M4hj46aUuOCmh4XVM5A.roa
Signing time: Wed 01 Jan 2025 05:47:54 +0000
ROA not before: Wed 01 Jan 2025 05:47:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49801
IP address blocks: 185.166.105.0/24 maxlen: 24
185.166.107.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:68:00:0d:d3:bb:d3:4d:5d:a0:6f:80:17:34:70:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc9be4ed4e54b601e6b6a42d0ba04cfb7ab2c3bf
Validity
Not Before: Jan 1 05:47:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=62bcef50d4f9338863e3a694b8e0a68785d53390
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:23:55:6c:e4:62:86:bf:b2:76:6c:53:51:b8:
b1:a4:f0:01:6b:b3:e2:68:72:4e:b3:4d:a3:5e:c5:
67:2b:74:2d:70:81:43:f0:69:04:32:05:2e:a3:3b:
d8:79:5b:90:88:d6:b9:5a:db:f6:57:db:7a:fc:bb:
c7:29:8b:15:ad:e2:c5:19:61:71:da:8f:b2:db:84:
d5:27:c8:9d:11:6b:0f:d0:72:3c:6d:6e:e2:d3:8a:
83:11:a0:72:9f:18:3e:48:97:3a:b5:b5:81:d5:b7:
1b:4c:36:b5:7f:b0:32:cb:5f:5f:3f:f7:3f:07:5c:
24:0d:1a:49:20:53:fb:c9:35:be:55:2c:bf:43:e2:
4d:41:a3:7f:83:f2:43:26:25:f8:7a:27:60:75:b9:
62:f8:58:07:b4:68:a4:dd:f9:6b:37:de:1d:67:e0:
20:ff:f5:ff:69:3a:b1:1c:2f:be:cf:2c:98:94:28:
ac:94:ad:5c:45:ec:b8:d1:0a:bd:51:17:4e:4a:c1:
c7:e3:9f:ab:0b:65:6d:8b:2a:43:8d:a0:c7:57:87:
eb:aa:cf:63:72:7a:70:16:e7:b1:dd:5b:75:b5:d8:
29:f7:e2:b4:51:5e:50:af:09:2b:1a:31:2d:80:d3:
bf:f3:f8:74:c2:b8:19:4c:0f:31:a3:9e:c5:78:50:
29:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:BC:EF:50:D4:F9:33:88:63:E3:A6:94:B8:E0:A6:87:85:D5:33:90
X509v3 Authority Key Identifier:
keyid:FC:9B:E4:ED:4E:54:B6:01:E6:B6:A4:2D:0B:A0:4C:FB:7A:B2:C3:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_Jvk7U5UtgHmtqQtC6BM-3qyw78.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/36362a-d91c-4ad4-92c7-1d2513308d21/1/YrzvUNT5M4hj46aUuOCmh4XVM5A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/36362a-d91c-4ad4-92c7-1d2513308d21/1/_Jvk7U5UtgHmtqQtC6BM-3qyw78.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.166.105.0/24
185.166.107.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:79:c3:7f:67:f6:c7:f5:58:02:a1:c0:b5:dd:f9:10:e6:d4:
70:11:cd:7d:68:6a:46:9a:57:94:36:e8:4e:59:c7:e7:59:3c:
59:ef:6a:14:cc:1f:60:59:8e:af:e0:32:cc:68:ac:96:62:6d:
98:2c:a7:9c:d8:18:36:c8:dc:6b:e6:89:56:f5:e9:ea:a4:6a:
22:73:8b:6c:d0:36:38:f1:22:6d:c6:ba:cd:18:84:21:40:d8:
19:81:c4:53:e7:cb:8c:46:97:53:c5:23:48:be:55:96:60:8f:
0c:e7:65:27:cc:9f:7e:20:f6:8c:b0:d1:b7:58:ff:60:04:9c:
48:1c:fe:ac:62:e1:c0:a7:40:e0:e6:f1:23:5b:f7:c2:fb:6f:
8a:39:74:c9:8e:35:62:61:23:d8:8b:11:ae:0f:ec:46:6c:ce:
2a:6c:e3:45:a1:66:ff:31:2d:47:d6:ac:41:9e:d4:1a:7f:55:
44:58:28:6e:f2:1e:a3:17:0b:9a:8d:bc:f1:c7:78:db:5a:65:
43:3f:54:2d:5d:69:c7:d6:88:2e:90:4e:3d:e4:53:66:99:e4:
16:78:2d:7e:a6:7e:8b:52:e7:bc:99:27:f1:de:be:a2:e3:38:
b0:38:50:8c:e3:a2:a3:cd:38:c2:ee:3f:ba:3f:8a:bd:dd:b7:
df:af:d4:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 16:08:53 2025 by rpki-client