Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/d8557b-8e82-4722-8146-77215a650875/1/YRfcm4NuEkIko0M25V_jInRtp18.roa
File: YRfcm4NuEkIko0M25V_jInRtp18.roa (raw, json)
Hash identifier: COLA+V8ISe1mmjO9DvWMovv2t61Oa9IOTh1TlJPG84k=
Subject key identifier: 61:17:DC:9B:83:6E:12:42:24:A3:43:36:E5:5F:E3:22:74:6D:A7:5F
Certificate issuer: /CN=7b252f12db2406b429f5700eb38e8fdd0b1201df
Certificate serial: 0188BFE397E6FC4049DAFBCA91B1555A897E
Authority key identifier: 7B:25:2F:12:DB:24:06:B4:29:F5:70:0E:B3:8E:8F:DD:0B:12:01:DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eyUvEtskBrQp9XAOs46P3QsSAd8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/d8557b-8e82-4722-8146-77215a650875/1/YRfcm4NuEkIko0M25V_jInRtp18.roa
Signing time: Thu 15 Jun 2023 16:29:03 +0000
ROA not before: Thu 15 Jun 2023 16:29:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210135
IP address blocks: 185.201.30.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:bf:e3:97:e6:fc:40:49:da:fb:ca:91:b1:55:5a:89:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b252f12db2406b429f5700eb38e8fdd0b1201df
Validity
Not Before: Jun 15 16:29:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6117dc9b836e124224a34336e55fe322746da75f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:2b:58:2f:1d:dc:92:e9:a7:20:9c:8c:00:cc:
60:e7:8b:f4:42:0b:49:65:79:16:9b:ab:97:f3:de:
d6:db:cb:e4:c9:e2:1a:6f:e8:2b:e7:51:18:52:21:
25:af:2d:6e:bf:48:70:c8:07:83:89:c7:1e:0f:14:
52:36:bd:13:78:b6:7b:1e:c7:4e:9a:8a:7c:99:40:
b6:d4:48:be:77:cd:47:80:50:02:c4:13:f3:56:92:
be:12:a8:4a:34:eb:31:0a:fa:fc:85:cf:5c:6b:10:
43:9a:04:5a:08:cf:e7:2d:42:80:d5:3d:78:d1:8a:
a7:af:ba:11:d2:bc:8a:2f:d6:21:0d:fe:03:5b:30:
54:d1:04:9f:30:f3:3a:fe:e9:a8:4b:24:b3:ed:90:
e6:7a:80:c9:5d:6a:7a:8c:1b:3b:53:2d:e5:81:73:
25:bb:cd:96:5b:37:6c:06:92:b0:75:ce:5a:db:d0:
98:86:03:8a:a0:59:80:51:a3:30:8a:a5:c4:8f:d4:
69:a9:33:4d:e9:c2:77:5a:79:26:04:0f:85:cb:e5:
3b:25:53:fe:aa:c0:12:d7:9f:dd:9c:63:cb:c0:c1:
4b:4e:32:c3:57:66:3a:89:e7:0a:03:a9:e6:42:9e:
82:ad:2e:48:81:e5:3e:e3:c4:31:0f:67:81:a5:30:
5d:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:17:DC:9B:83:6E:12:42:24:A3:43:36:E5:5F:E3:22:74:6D:A7:5F
X509v3 Authority Key Identifier:
keyid:7B:25:2F:12:DB:24:06:B4:29:F5:70:0E:B3:8E:8F:DD:0B:12:01:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eyUvEtskBrQp9XAOs46P3QsSAd8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/d8557b-8e82-4722-8146-77215a650875/1/YRfcm4NuEkIko0M25V_jInRtp18.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/d8557b-8e82-4722-8146-77215a650875/1/eyUvEtskBrQp9XAOs46P3QsSAd8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.201.30.0/24
Signature Algorithm: sha256WithRSAEncryption
06:c7:98:55:80:03:c3:0e:52:9e:48:64:3c:47:dd:e0:a3:3d:
fa:ac:62:f2:8d:d5:1d:4a:29:5b:45:b0:00:fc:c1:0b:3c:47:
ab:3f:c1:49:6f:33:8b:f8:22:59:ec:9f:57:7e:fc:c2:3f:04:
13:e1:0d:26:b4:ec:d6:13:aa:f7:0e:96:32:ab:6e:7b:80:07:
0f:08:76:30:cf:ce:67:7e:fa:04:12:c1:31:c7:db:76:be:4a:
8f:93:8a:4a:cf:ef:19:a2:2a:9b:53:6d:13:f9:ed:ee:72:65:
5f:91:93:cd:f4:a0:b6:48:53:af:b4:e5:62:03:d8:29:44:be:
aa:0e:2a:57:ca:44:0e:ef:f6:81:39:68:b0:87:63:74:4f:fe:
7f:e8:fc:8e:2a:6d:6e:9e:c4:80:0e:9a:7c:31:65:40:90:12:
e3:36:dd:b5:5c:be:7a:8b:9c:4e:4f:dd:1e:a3:b5:0e:9c:39:
7b:ae:72:f0:87:66:9f:6d:dc:7b:9c:0f:b8:b9:cd:6e:cd:bc:
62:eb:9f:30:b3:33:66:96:f0:02:25:01:ab:0f:b7:d7:26:7d:
e4:88:be:42:6b:16:a7:05:01:32:e9:c1:14:c5:6d:a7:78:b4:
20:d2:68:2d:af:61:b4:8f:2b:3c:65:7c:6a:04:f6:5f:df:95:
96:f0:bb:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 11:00:29 2025 by rpki-client