Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/549941-5dc1-4bf5-ae8d-4f766d8d46d7/1/ycaJVpoVOC21dnZbHinvKzCp3z4.roa
File: ycaJVpoVOC21dnZbHinvKzCp3z4.roa (raw, json)
Hash identifier: jPnkKRoLMPVMXrbCpFz/vUD+x41kkdouD/f4K8bw9X0=
Subject key identifier: C9:C6:89:56:9A:15:38:2D:B5:76:76:5B:1E:29:EF:2B:30:A9:DF:3E
Certificate issuer: /CN=4c31cf6268bd24cce5f2931ccd76b91705e6c961
Certificate serial: 01856F4B6D6B140829459821D8E6B600F683
Authority key identifier: 4C:31:CF:62:68:BD:24:CC:E5:F2:93:1C:CD:76:B9:17:05:E6:C9:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TDHPYmi9JMzl8pMczXa5FwXmyWE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/549941-5dc1-4bf5-ae8d-4f766d8d46d7/1/ycaJVpoVOC21dnZbHinvKzCp3z4.roa
Signing time: Sun 01 Jan 2023 21:44:52 +0000
ROA not before: Sun 01 Jan 2023 21:44:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 203775
IP address blocks: 185.124.32.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:4b:6d:6b:14:08:29:45:98:21:d8:e6:b6:00:f6:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c31cf6268bd24cce5f2931ccd76b91705e6c961
Validity
Not Before: Jan 1 21:44:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c9c689569a15382db576765b1e29ef2b30a9df3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:b2:a4:5c:33:09:39:c7:cf:e3:f9:42:cf:9c:
78:d9:d9:3a:f1:a5:a1:c9:c6:8b:f9:b0:3c:0b:79:
90:3e:01:c8:b5:95:16:d0:e8:42:a6:30:a2:b4:15:
e7:06:bf:a4:fb:c5:cc:26:13:be:d3:c1:b1:c9:6c:
c4:33:6f:3f:23:a2:10:33:64:c7:12:a5:38:ab:fc:
bd:47:ee:23:bd:c0:dc:1e:2a:97:bd:18:0a:47:42:
76:13:df:90:26:17:c3:a1:12:11:23:5c:ec:9b:6f:
bc:34:c7:6f:ca:f8:ec:12:03:f5:9f:85:69:c6:a0:
9d:1a:af:48:77:f0:89:e8:21:6c:b3:bd:11:6e:ff:
25:dc:03:55:11:45:06:eb:b9:df:f8:75:d3:c5:7d:
e0:af:88:c8:c9:6c:5f:91:14:4b:80:95:78:0d:c8:
25:e0:5e:52:4a:91:ca:f3:9a:32:6a:a5:3d:88:39:
b3:b8:04:3f:fb:2b:33:c4:6a:b3:b9:df:70:61:d1:
c0:6c:f9:d6:55:63:55:4b:39:ff:57:46:3b:4f:96:
71:72:fa:2b:84:86:55:30:e0:5c:55:d7:b7:7d:6b:
c3:0e:f2:e0:0a:6c:d9:20:f8:71:89:37:8b:00:fa:
5f:e2:ca:39:11:71:dc:73:75:d9:9c:da:f3:40:b2:
c2:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:C6:89:56:9A:15:38:2D:B5:76:76:5B:1E:29:EF:2B:30:A9:DF:3E
X509v3 Authority Key Identifier:
keyid:4C:31:CF:62:68:BD:24:CC:E5:F2:93:1C:CD:76:B9:17:05:E6:C9:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TDHPYmi9JMzl8pMczXa5FwXmyWE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/549941-5dc1-4bf5-ae8d-4f766d8d46d7/1/ycaJVpoVOC21dnZbHinvKzCp3z4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/549941-5dc1-4bf5-ae8d-4f766d8d46d7/1/TDHPYmi9JMzl8pMczXa5FwXmyWE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.124.32.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:74:33:8a:6e:0f:a0:6a:eb:e5:5e:98:7f:0a:6f:dc:e3:91:
c1:1c:95:18:7a:e4:16:2a:c7:86:e0:b1:ed:4a:05:2d:7f:55:
94:56:49:24:84:9d:f8:5b:51:3c:5e:d6:b8:b2:69:9e:ee:6a:
92:fe:f4:7b:93:eb:db:97:32:d2:dd:12:71:32:ff:64:80:76:
c1:cd:c5:b3:72:78:af:f4:fd:81:a0:2a:61:3a:38:f5:67:c2:
2a:51:5a:c8:72:42:8e:cb:98:ec:ef:2b:d7:6f:c5:e6:e3:49:
10:8d:04:81:6f:72:8d:3b:94:9a:3d:d6:0b:3b:e2:34:de:de:
b5:d2:81:51:5a:da:e6:58:1c:8e:5c:a5:fa:f1:e6:5c:2b:2b:
ac:82:6c:91:6d:5d:9b:ba:3e:3d:aa:8d:cb:93:1a:1d:fb:68:
12:04:ea:e1:6e:bb:48:ac:30:10:1d:6d:c7:48:26:f4:5a:39:
35:a1:f6:be:12:a5:cb:b7:62:76:35:31:2e:a9:75:50:9a:45:
4c:3f:07:ef:3b:db:ec:11:14:c3:4c:11:1e:40:cb:00:17:54:
aa:10:18:11:73:83:f0:aa:69:b7:35:b1:12:12:08:85:1d:25:
02:02:95:6b:df:f5:2d:6e:4a:a5:13:1f:b1:98:02:84:4f:09:
b4:06:bf:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 12 13:37:18 2025 by rpki-client