Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/5b1149-647d-4067-9807-445d4588c312/1/yHaEkoOTCPurcY3b0F-9VL88Kwc.roa
File: yHaEkoOTCPurcY3b0F-9VL88Kwc.roa (raw, json)
Hash identifier: Y+GSgGL/KpLcJxeK38gow6fyI44wgNDdjmQduqWLn3A=
Subject key identifier: C8:76:84:92:83:93:08:FB:AB:71:8D:DB:D0:5F:BD:54:BF:3C:2B:07
Certificate issuer: /CN=dac79d2855b897418208d47ba6e51460015b5d7b
Certificate serial: 01942445983E3A4F8E18E5B5FA5BB1289C12
Authority key identifier: DA:C7:9D:28:55:B8:97:41:82:08:D4:7B:A6:E5:14:60:01:5B:5D:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2sedKFW4l0GCCNR7puUUYAFbXXs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/5b1149-647d-4067-9807-445d4588c312/1/yHaEkoOTCPurcY3b0F-9VL88Kwc.roa
Signing time: Wed 01 Jan 2025 23:48:48 +0000
ROA not before: Wed 01 Jan 2025 23:48:48 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 56871
IP address blocks: 185.154.216.0/22 maxlen: 24
213.184.80.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:45:98:3e:3a:4f:8e:18:e5:b5:fa:5b:b1:28:9c:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dac79d2855b897418208d47ba6e51460015b5d7b
Validity
Not Before: Jan 1 23:48:48 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c8768492839308fbab718ddbd05fbd54bf3c2b07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:75:e2:ba:1e:58:ed:65:a8:89:3a:2e:ff:0c:
e1:fe:7c:c1:e6:4d:da:1c:86:53:b0:72:f1:3c:42:
a8:1b:8c:0c:18:c0:da:90:57:e9:e2:a8:11:2c:4b:
ed:82:0a:09:b1:3c:74:b5:38:67:9c:91:ba:0b:6b:
44:dd:f3:04:ce:72:2e:44:12:56:55:37:93:0d:78:
21:cd:f8:00:67:80:59:24:fb:20:04:fb:f7:80:85:
07:3f:d7:72:72:8a:18:a4:0f:d0:51:4d:7d:c2:44:
3d:f9:37:1c:d7:04:9c:10:c7:fc:70:d8:b5:dc:dc:
45:f6:50:67:3f:a5:c2:32:7d:36:79:a4:00:02:f0:
bd:85:5b:e2:f8:64:de:23:ba:40:09:81:d5:10:2c:
7b:55:04:35:2a:47:64:ef:12:0c:92:06:07:a0:80:
62:7d:c5:65:50:34:5c:6e:90:cc:c1:31:44:28:a2:
8c:fb:ab:e7:62:8c:0a:63:75:3b:f8:7b:2c:fc:93:
d5:af:a8:9f:32:2f:12:67:51:a6:2a:a9:2e:67:59:
a5:4d:b8:5b:16:50:cb:99:92:0b:6c:51:bf:2f:fb:
4b:97:57:c0:66:b9:5d:6e:d0:dd:bf:16:d8:d6:d4:
11:6b:a0:a2:04:36:b6:33:d9:b5:35:a8:e8:cb:1d:
6e:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:76:84:92:83:93:08:FB:AB:71:8D:DB:D0:5F:BD:54:BF:3C:2B:07
X509v3 Authority Key Identifier:
keyid:DA:C7:9D:28:55:B8:97:41:82:08:D4:7B:A6:E5:14:60:01:5B:5D:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2sedKFW4l0GCCNR7puUUYAFbXXs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/5b1149-647d-4067-9807-445d4588c312/1/yHaEkoOTCPurcY3b0F-9VL88Kwc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/5b1149-647d-4067-9807-445d4588c312/1/2sedKFW4l0GCCNR7puUUYAFbXXs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.154.216.0/22
213.184.80.0/22
Signature Algorithm: sha256WithRSAEncryption
46:7f:91:c3:2e:66:3f:ae:32:96:1f:73:a2:95:3c:2b:dd:69:
eb:94:66:19:f5:48:1f:01:69:1c:ac:05:60:d4:af:4b:a6:49:
9b:8a:eb:05:d5:14:d6:cc:10:3a:b0:c6:9a:e9:db:21:4a:15:
ef:f2:7d:fe:59:0c:92:f6:3c:fb:37:36:e3:7a:c8:c2:99:fe:
4a:59:8f:2c:72:8f:78:52:d0:06:85:13:c6:c2:b5:a1:f1:22:
5f:92:bc:1b:58:de:87:a0:bd:cc:38:3b:16:42:66:07:7d:b6:
5d:62:c4:75:e3:4a:83:e4:1d:ab:07:c3:29:0f:ec:c2:6d:85:
6c:c2:89:16:d5:e3:ac:a8:05:07:c6:52:dc:a0:f9:c3:97:ec:
5b:e5:73:e4:9e:d9:d0:eb:2b:24:fe:7e:a0:82:27:01:fc:11:
ab:d3:a1:1a:75:3b:3b:4d:32:03:99:fd:0a:b2:6a:32:37:30:
6c:9b:be:7a:8e:95:f6:1c:9a:47:6d:eb:63:85:f9:7b:13:09:
a5:96:69:9d:c5:a4:1a:9b:ab:81:55:d6:a3:93:be:cd:5b:58:
12:21:1c:4d:86:f9:3f:77:78:7c:a8:ab:58:47:38:67:a6:cd:
50:f7:df:1e:a2:b2:57:08:33:44:02:fb:64:fc:32:f7:79:73:
c7:f2:5f:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 13:15:48 2025 by rpki-client