Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/4a585a-f0f0-4987-ae03-acccae690e75/1/1-YLF-MeFwDISim6adBK6qk3JuME.roa
File: 1-YLF-MeFwDISim6adBK6qk3JuME.roa (raw, json)
Hash identifier: GapGZPBb9/hawREIr0KOF+mssvGG8XyPh9uD8dxUmf4=
Subject key identifier: F9:82:C5:F8:C7:85:C0:32:12:8A:6E:9A:74:12:BA:AA:4D:C9:B8:C1
Certificate issuer: /CN=d6fbd9ed504eef659ecfc919a195cd2a803b60a7
Certificate serial: 01942369B2DE925D59D84AE292D584B53B26
Authority key identifier: D6:FB:D9:ED:50:4E:EF:65:9E:CF:C9:19:A1:95:CD:2A:80:3B:60:A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1vvZ7VBO72Wez8kZoZXNKoA7YKc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/4a585a-f0f0-4987-ae03-acccae690e75/1/1-YLF-MeFwDISim6adBK6qk3JuME.roa
Signing time: Wed 01 Jan 2025 19:48:37 +0000
ROA not before: Wed 01 Jan 2025 19:48:37 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205169
IP address blocks: 185.227.236.0/24 maxlen: 24
185.227.237.0/24 maxlen: 24
185.227.238.0/24 maxlen: 24
185.227.239.0/24 maxlen: 24
2a0c:d600::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:69:b2:de:92:5d:59:d8:4a:e2:92:d5:84:b5:3b:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6fbd9ed504eef659ecfc919a195cd2a803b60a7
Validity
Not Before: Jan 1 19:48:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f982c5f8c785c032128a6e9a7412baaa4dc9b8c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:3a:43:8a:0e:5c:3e:72:42:db:d6:9d:7b:66:
55:f1:88:03:45:0f:13:a5:a4:88:0c:84:83:bd:17:
02:38:dc:64:d3:86:7c:8d:11:0e:fc:9b:52:4a:ad:
62:f3:8b:6a:f8:27:14:ed:66:ae:ef:a5:47:d3:5c:
9a:9c:b4:53:e4:6f:33:57:5b:ad:28:24:04:5d:20:
be:cf:d6:d8:d8:46:e1:52:17:cb:b3:dc:cf:01:8e:
c0:e6:11:50:91:c1:a8:09:39:36:6b:2d:aa:c1:ef:
3b:f1:2b:81:1f:e8:68:03:b1:30:8d:a8:ee:db:28:
48:e0:54:7e:b6:fc:85:41:42:2c:73:d7:ea:3b:74:
0b:48:8e:fa:29:a5:e2:33:37:95:05:20:c8:83:79:
a5:7c:4e:ee:76:62:d1:d3:64:73:e5:be:52:26:5d:
2e:47:f1:09:09:e9:41:dd:51:ab:87:30:8f:8d:72:
10:b5:ec:6b:24:3c:b2:43:62:af:df:50:44:e4:2a:
f2:47:7e:a9:c2:d0:7c:33:e2:de:b5:ae:c3:0d:2c:
e5:6b:d1:87:f8:30:e8:66:02:78:8f:64:dd:8d:44:
e6:97:6e:6a:43:23:89:5e:fa:c2:25:ce:b8:c1:74:
e8:b3:73:6a:ef:64:5d:7f:e5:25:96:48:ce:38:87:
94:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:82:C5:F8:C7:85:C0:32:12:8A:6E:9A:74:12:BA:AA:4D:C9:B8:C1
X509v3 Authority Key Identifier:
keyid:D6:FB:D9:ED:50:4E:EF:65:9E:CF:C9:19:A1:95:CD:2A:80:3B:60:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1vvZ7VBO72Wez8kZoZXNKoA7YKc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/4a585a-f0f0-4987-ae03-acccae690e75/1/1-YLF-MeFwDISim6adBK6qk3JuME.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/4a585a-f0f0-4987-ae03-acccae690e75/1/1vvZ7VBO72Wez8kZoZXNKoA7YKc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.227.236.0/22
IPv6:
2a0c:d600::/29
Signature Algorithm: sha256WithRSAEncryption
26:45:b4:64:21:0c:21:20:b4:94:21:ef:e0:a7:16:f5:61:29:
a7:ad:66:66:2e:60:8f:24:65:2b:1e:10:cf:67:04:32:97:ca:
31:4e:17:c6:f4:9b:5c:d9:55:54:ed:5a:dd:37:a1:af:a2:68:
84:53:82:a5:0e:93:8a:6f:b2:69:d0:08:bf:ee:fc:24:cb:3f:
30:84:f6:c0:31:55:77:d0:02:40:76:55:c0:6b:83:6d:3a:f3:
67:1d:df:5d:4a:36:0d:7b:5d:a4:8e:d5:85:be:ce:d5:67:f8:
b5:f2:9d:ec:c0:76:11:0a:e2:0b:97:69:ff:16:19:e7:06:23:
e7:62:e8:fa:ac:7b:27:e1:36:5a:51:cf:64:3b:67:1b:91:92:
a7:25:a1:a0:3d:5d:c7:a1:dc:43:6b:54:90:bd:05:70:e1:e4:
77:be:57:84:d5:ec:2c:b0:77:90:78:77:bd:76:55:28:33:58:
6a:b1:b7:3b:dc:2f:a6:5f:6c:23:e8:4d:fb:0f:2e:c9:33:d4:
ab:3a:f8:84:0e:10:a2:55:68:89:12:16:f4:fd:d2:f5:32:dd:
2d:fd:43:e1:9a:97:8c:e4:66:e0:e6:4a:21:d8:2a:fc:1a:c2:
cb:68:11:0e:91:63:c2:4c:68:41:46:71:b2:c5:a0:95:5d:7c:
95:0f:a1:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 22:21:34 2025 by rpki-client