Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/72f6cf-9bd4-467a-a92a-5a64a5fc8a64/1/925S4SchOi83vL3V68Y_AUuJSD8.roa
File: 925S4SchOi83vL3V68Y_AUuJSD8.roa (raw, json)
Hash identifier: 6EULq2ShinRvQFwY+uALe+ivLl2vWfr/F3fyELn3cug=
Subject key identifier: F7:6E:52:E1:27:21:3A:2F:37:BC:BD:D5:EB:C6:3F:01:4B:89:48:3F
Certificate issuer: /CN=61a5d217759e861696fc77ed9aa63b94edb3be7d
Certificate serial: 01941F8C503A67F9660A013CAD5EC59C5390
Authority key identifier: 61:A5:D2:17:75:9E:86:16:96:FC:77:ED:9A:A6:3B:94:ED:B3:BE:7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YaXSF3WehhaW_HftmqY7lO2zvn0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/72f6cf-9bd4-467a-a92a-5a64a5fc8a64/1/925S4SchOi83vL3V68Y_AUuJSD8.roa
Signing time: Wed 01 Jan 2025 01:47:56 +0000
ROA not before: Wed 01 Jan 2025 01:47:56 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 3549
IP address blocks: 185.27.249.0/24 maxlen: 24
185.27.251.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:50:3a:67:f9:66:0a:01:3c:ad:5e:c5:9c:53:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61a5d217759e861696fc77ed9aa63b94edb3be7d
Validity
Not Before: Jan 1 01:47:56 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f76e52e127213a2f37bcbdd5ebc63f014b89483f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:59:f9:f2:a5:3a:2f:b9:d6:c5:23:40:63:89:
59:97:2d:1b:5d:10:e7:cb:79:17:4c:fb:eb:a4:9d:
62:e9:01:82:a7:77:a1:8b:78:66:be:5f:4d:32:e8:
1a:57:92:99:9c:2e:19:80:9b:68:60:53:4e:8f:10:
1a:1e:0b:59:df:5f:3c:f5:04:8d:d8:54:70:9c:c3:
0b:a4:43:cd:e1:9d:8a:0a:4b:dd:12:81:70:2c:95:
c9:1e:6b:1f:27:d9:0b:93:a4:c7:35:fe:3f:fb:cd:
a3:61:a0:c9:5f:30:fa:2a:53:9e:c5:a3:d3:06:91:
3c:1d:1d:1a:6a:6f:57:5b:31:cb:f7:05:f1:9d:18:
65:85:c8:6a:11:50:0f:5c:b0:0b:3d:b4:cd:44:4f:
85:b1:17:c9:19:dc:29:9a:16:11:7c:b7:27:70:f9:
95:49:79:1a:0c:31:53:ed:9a:62:33:7b:e8:19:d7:
9e:26:2c:f1:58:50:e7:d9:1f:44:30:78:e2:c9:e5:
ce:8a:aa:9f:39:5e:e6:83:4c:7f:59:6b:35:40:83:
32:6c:8d:4c:a4:90:7b:56:d6:73:0c:f5:0e:52:9d:
d4:5c:7c:0e:7e:97:40:74:1b:18:72:fc:62:0b:42:
e5:af:99:72:89:eb:ad:46:4c:a5:6d:7d:d9:64:8c:
32:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:6E:52:E1:27:21:3A:2F:37:BC:BD:D5:EB:C6:3F:01:4B:89:48:3F
X509v3 Authority Key Identifier:
keyid:61:A5:D2:17:75:9E:86:16:96:FC:77:ED:9A:A6:3B:94:ED:B3:BE:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YaXSF3WehhaW_HftmqY7lO2zvn0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/72f6cf-9bd4-467a-a92a-5a64a5fc8a64/1/925S4SchOi83vL3V68Y_AUuJSD8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/72f6cf-9bd4-467a-a92a-5a64a5fc8a64/1/YaXSF3WehhaW_HftmqY7lO2zvn0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.27.249.0/24
185.27.251.0/24
Signature Algorithm: sha256WithRSAEncryption
17:3f:da:80:6a:51:93:07:ea:bf:50:0d:22:e5:21:fa:ec:f8:
1d:e5:52:6e:6c:38:91:ae:d1:07:a4:10:e0:1a:09:80:03:7e:
93:e7:d3:9f:24:5a:ba:ed:3b:96:34:4b:f6:31:8f:37:9d:3c:
e2:15:24:94:0f:67:d9:cb:85:65:33:3a:9d:e2:6f:e4:68:02:
0b:fb:55:65:44:a3:7a:05:e0:a1:52:ff:a9:60:17:cb:76:88:
1c:77:4b:93:f9:3c:fd:21:3a:c2:3f:b7:06:d0:d0:d1:c5:42:
0c:f6:59:41:cb:de:c5:34:2e:4d:e4:43:23:10:87:25:00:c1:
9e:8e:74:82:a9:87:70:7d:6f:8d:bc:d7:e6:79:0a:53:8f:f6:
7e:cd:3c:eb:62:36:62:0a:32:3d:36:84:7c:62:e0:63:c9:cc:
25:59:3d:94:25:d0:8b:e8:0d:fe:b9:df:f4:5f:05:2b:c7:7a:
75:ba:34:75:cc:66:b7:f4:4a:ea:5f:a1:26:26:14:59:c8:8c:
92:cc:39:8d:6e:3f:66:7b:42:6e:a4:fc:da:c7:94:84:4e:62:
62:93:6a:5a:49:36:e3:de:38:ac:f7:23:5a:e7:73:65:6c:58:
94:7e:cc:e0:48:bc:ed:e7:0b:e3:78:e9:3d:1a:f7:95:b2:2d:
a2:a1:ce:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:26:05 2025 by rpki-client