Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/863093-5ed6-43b2-bbda-14c6c5055f88/1/YpkkKmboA4aHm_SpF6rE9LejCsY.roa
File: YpkkKmboA4aHm_SpF6rE9LejCsY.roa (raw, json)
Hash identifier: hvX1xuiKff9tUazulkNao07mga+YtxbInH9ufQvIEJ8=
Subject key identifier: 62:99:24:2A:66:E8:03:86:87:9B:F4:A9:17:AA:C4:F4:B7:A3:0A:C6
Certificate issuer: /CN=b262bf21de51385859416c4c608001e2025a5d25
Certificate serial: 019424B37687A51446F7AD4E0CC70DA18A7D
Authority key identifier: B2:62:BF:21:DE:51:38:58:59:41:6C:4C:60:80:01:E2:02:5A:5D:25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/smK_Id5ROFhZQWxMYIAB4gJaXSU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/863093-5ed6-43b2-bbda-14c6c5055f88/1/YpkkKmboA4aHm_SpF6rE9LejCsY.roa
Signing time: Thu 02 Jan 2025 01:48:48 +0000
ROA not before: Thu 02 Jan 2025 01:48:48 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60036
IP address blocks: 91.232.181.0/24 maxlen: 24
185.19.148.0/23 maxlen: 23
185.19.148.0/24 maxlen: 24
185.19.149.0/24 maxlen: 24
185.61.115.0/24 maxlen: 24
195.177.252.0/23 maxlen: 23
195.177.252.0/24 maxlen: 24
195.177.253.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:76:87:a5:14:46:f7:ad:4e:0c:c7:0d:a1:8a:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b262bf21de51385859416c4c608001e2025a5d25
Validity
Not Before: Jan 2 01:48:48 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6299242a66e80386879bf4a917aac4f4b7a30ac6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:a0:66:b4:8b:bf:1c:70:ab:b8:9d:a5:38:3b:
f7:be:a7:18:30:d4:78:ea:c9:b5:50:58:d7:70:30:
01:0d:26:71:c1:ed:e2:6d:a0:e2:0c:52:5a:99:d1:
88:e1:26:4a:ac:43:64:01:b4:5e:af:34:a8:bb:04:
d3:69:dc:b7:a8:2a:04:64:3e:4e:70:4c:a8:7e:17:
01:39:a2:bf:8a:e9:aa:c3:34:7b:cb:15:bb:04:f2:
a6:24:a5:35:4e:ed:a3:9d:95:90:bc:b2:ef:77:6b:
e7:de:66:18:23:00:ee:89:fc:ca:90:55:89:79:e7:
71:09:c7:06:45:df:9b:15:49:45:0c:b9:c8:11:db:
05:92:28:36:1e:11:f1:24:ec:b9:d4:c1:72:28:6a:
ec:9a:ad:d0:b7:51:f5:10:37:42:aa:a3:eb:98:81:
fe:c8:31:89:e1:e1:83:be:89:74:e3:37:49:d3:3d:
fe:c7:4d:02:3c:ff:d8:43:22:33:3e:6a:b7:7b:03:
f0:e4:a5:bc:c2:af:b4:18:12:27:db:00:c1:c7:c6:
24:be:d5:1d:5e:2e:26:4a:b9:42:6d:1d:69:c3:a3:
af:a5:a8:17:b6:9d:55:7b:b2:52:96:16:8c:e0:35:
23:75:8b:ff:4d:8e:e3:2f:ab:b5:c4:32:96:f0:03:
e2:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:99:24:2A:66:E8:03:86:87:9B:F4:A9:17:AA:C4:F4:B7:A3:0A:C6
X509v3 Authority Key Identifier:
keyid:B2:62:BF:21:DE:51:38:58:59:41:6C:4C:60:80:01:E2:02:5A:5D:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/smK_Id5ROFhZQWxMYIAB4gJaXSU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/863093-5ed6-43b2-bbda-14c6c5055f88/1/YpkkKmboA4aHm_SpF6rE9LejCsY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/863093-5ed6-43b2-bbda-14c6c5055f88/1/smK_Id5ROFhZQWxMYIAB4gJaXSU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.232.181.0/24
185.19.148.0/23
185.61.115.0/24
195.177.252.0/23
Signature Algorithm: sha256WithRSAEncryption
45:a5:16:45:0c:11:63:cd:d5:4c:8e:40:89:0e:97:2a:69:41:
ef:96:fc:0c:b9:cc:79:a9:9a:c1:e1:15:be:e6:4f:ec:09:5c:
16:ef:eb:64:ab:09:8c:18:e4:0f:50:ba:b0:70:ce:dd:91:26:
ea:01:16:d1:8a:0e:e7:c1:87:05:62:d7:7c:db:c7:d8:08:e5:
63:fa:41:2d:16:fd:e8:df:42:0d:0f:81:7b:fe:1e:e4:c6:8a:
27:bc:e1:70:96:59:b9:19:7c:21:29:ae:54:ff:68:8f:63:45:
fd:ab:a5:ec:7f:44:f0:70:e7:3e:07:9a:94:c2:5d:8f:0d:af:
0c:15:af:e1:20:34:61:10:b7:1c:7a:4e:54:11:48:61:26:be:
9b:c6:5e:5d:3e:85:63:3b:56:51:a6:1f:44:59:54:05:42:e9:
9e:78:50:68:a5:ca:66:e5:5e:fb:19:27:dc:1f:f4:06:44:25:
de:f1:1d:4c:b1:43:14:ce:74:1d:bb:eb:a7:71:96:a2:92:bd:
40:5d:95:34:bb:cc:cc:8c:b5:de:01:f9:ca:3e:79:1b:6b:41:
50:9a:69:93:63:97:8c:24:14:cd:55:ca:42:eb:07:3b:65:84:
6d:3f:7e:65:d2:6c:b5:7d:ba:6e:a0:82:c2:60:1f:2a:60:19:
69:00:6b:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 12:30:10 2025 by rpki-client