Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/ba6f3e-e95b-48d2-8419-413da667a8be/1/Y2-uFOvDKhB51qa1_AM5U2JOtUY.roa
File: Y2-uFOvDKhB51qa1_AM5U2JOtUY.roa (raw, json)
Hash identifier: 4c9/YhL+TK23Lox9YjacyfqcSWeripXtyhdacCRYF0A=
Subject key identifier: 63:6F:AE:14:EB:C3:2A:10:79:D6:A6:B5:FC:03:39:53:62:4E:B5:46
Certificate issuer: /CN=9b19758a087876816dc19361eaf1e9412de73f86
Certificate serial: 01942521F3133DBEEB2C8C685FECE8296420
Authority key identifier: 9B:19:75:8A:08:78:76:81:6D:C1:93:61:EA:F1:E9:41:2D:E7:3F:86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mxl1igh4doFtwZNh6vHpQS3nP4Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/ba6f3e-e95b-48d2-8419-413da667a8be/1/Y2-uFOvDKhB51qa1_AM5U2JOtUY.roa
Signing time: Thu 02 Jan 2025 03:49:29 +0000
ROA not before: Thu 02 Jan 2025 03:49:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211462
IP address blocks: 185.150.18.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:f3:13:3d:be:eb:2c:8c:68:5f:ec:e8:29:64:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b19758a087876816dc19361eaf1e9412de73f86
Validity
Not Before: Jan 2 03:49:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=636fae14ebc32a1079d6a6b5fc033953624eb546
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:7e:3f:4a:14:d6:e9:5d:b1:20:7b:5c:44:58:
0d:aa:dc:ef:ca:56:03:be:21:30:e1:e1:38:d8:2a:
ca:7d:ba:f8:dd:4a:3e:9b:5c:35:3f:f4:bf:87:f4:
ab:0c:94:35:95:4e:9a:c8:25:04:cd:52:3e:57:73:
8f:83:aa:1c:84:bb:10:bc:d6:e0:cc:b1:45:28:1d:
7a:85:e9:7b:4c:46:af:10:e4:d9:f9:58:88:a2:84:
15:74:fd:0b:f2:86:a6:d2:8f:cc:2c:8a:9b:85:53:
c5:76:36:c1:46:7b:46:96:f0:88:84:75:e8:ae:58:
6a:f2:94:4e:3a:d2:31:97:d5:f2:dc:6c:94:e0:e3:
d3:b6:41:dc:c0:74:84:16:e9:87:f5:c4:c0:89:63:
73:fd:1d:59:ca:d8:de:11:52:26:24:4f:9f:ea:67:
92:b4:fa:1d:c2:2b:b9:38:5d:e3:c0:52:45:c5:78:
ee:6f:b0:56:ed:df:8a:b1:0a:85:c5:0a:58:8a:46:
35:d2:5c:18:66:90:95:61:a1:6a:ed:16:1e:99:fc:
4f:73:2a:df:8b:ae:e1:12:34:c9:53:08:80:d1:87:
59:a8:6b:64:de:95:08:69:e3:8d:ec:87:56:22:43:
8d:ea:a6:9a:7c:fb:e4:c4:52:74:c0:fb:04:3e:7e:
79:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:6F:AE:14:EB:C3:2A:10:79:D6:A6:B5:FC:03:39:53:62:4E:B5:46
X509v3 Authority Key Identifier:
keyid:9B:19:75:8A:08:78:76:81:6D:C1:93:61:EA:F1:E9:41:2D:E7:3F:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mxl1igh4doFtwZNh6vHpQS3nP4Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/ba6f3e-e95b-48d2-8419-413da667a8be/1/Y2-uFOvDKhB51qa1_AM5U2JOtUY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/ba6f3e-e95b-48d2-8419-413da667a8be/1/mxl1igh4doFtwZNh6vHpQS3nP4Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.150.18.0/24
Signature Algorithm: sha256WithRSAEncryption
c1:eb:d3:f0:de:d8:0c:2d:97:1e:36:32:e2:52:7c:05:42:ea:
10:0d:0d:de:3a:25:d2:60:0c:ab:eb:83:e6:46:b4:12:75:15:
7f:58:4f:20:8f:bc:b4:da:86:bb:8a:de:51:27:8e:8f:9e:b8:
1d:34:ce:43:b5:06:a7:8f:e4:06:b7:be:5e:45:43:d2:d2:54:
9b:87:ad:74:74:be:6c:74:ac:fd:ad:9b:f2:37:89:df:c8:9b:
ee:05:37:1a:bb:19:64:b5:9e:a7:16:7c:70:14:d1:98:84:14:
a9:50:e5:21:a1:3c:c5:6a:69:ed:d0:79:12:92:48:38:a4:07:
ad:fd:06:80:cc:45:e8:13:be:1c:f3:90:08:be:cc:3b:6d:75:
6a:7f:ac:82:73:e4:3d:9b:13:24:94:fa:96:2a:e3:f3:b3:d2:
b5:6d:dd:bb:f1:c5:24:28:98:ec:f2:b3:06:c2:8d:1c:3e:cd:
75:4d:69:2b:e7:f7:fc:ae:a4:4d:58:1d:64:ab:9d:cf:14:08:
dd:92:3c:30:59:9e:e5:b7:ac:e6:a2:79:14:eb:b9:4e:b7:fb:
fd:bb:ba:23:67:44:a8:aa:20:0f:ff:57:ae:ba:04:64:a4:6e:
2b:ea:ef:4c:40:21:89:9b:1f:76:e3:1b:ce:50:14:16:f9:ae:
95:1e:28:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 09:58:18 2025 by rpki-client