Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/766311-caa4-4399-8b35-fc79af1f6fb3/1/Y78Fod4FPEz4PdDBaxHsa_TuF-c.roa
File: Y78Fod4FPEz4PdDBaxHsa_TuF-c.roa (raw, json)
Hash identifier: IBDv7UtBY2/JVEdH+LLDA/FWsUahsK70hcSor8emBYY=
Subject key identifier: 63:BF:05:A1:DE:05:3C:4C:F8:3D:D0:C1:6B:11:EC:6B:F4:EE:17:E7
Certificate issuer: /CN=07bca0482d605587eb0e0c851c38e807755f9017
Certificate serial: 0195543083A433783AB0F8E33B1A20EDEAC1
Authority key identifier: 07:BC:A0:48:2D:60:55:87:EB:0E:0C:85:1C:38:E8:07:75:5F:90:17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B7ygSC1gVYfrDgyFHDjoB3VfkBc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/766311-caa4-4399-8b35-fc79af1f6fb3/1/Y78Fod4FPEz4PdDBaxHsa_TuF-c.roa
Signing time: Sun 02 Mar 2025 00:10:20 +0000
ROA not before: Sun 02 Mar 2025 00:10:20 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 36352
IP address blocks: 185.84.157.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:54:30:83:a4:33:78:3a:b0:f8:e3:3b:1a:20:ed:ea:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07bca0482d605587eb0e0c851c38e807755f9017
Validity
Not Before: Mar 2 00:10:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=63bf05a1de053c4cf83dd0c16b11ec6bf4ee17e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:5d:ae:34:e0:b7:98:b5:c6:a0:35:0e:d2:e2:
64:8f:e4:62:a0:60:6c:f8:9f:d0:bf:29:ea:21:f7:
fb:e2:85:d0:2f:5a:aa:5e:3b:ef:5c:37:c6:4e:6b:
54:d7:ed:1e:db:6f:86:19:8e:a2:e8:a8:2c:06:25:
be:44:04:a2:6b:38:0f:aa:52:48:e2:e1:21:d5:5b:
66:c8:43:f8:7e:4c:8a:e8:fb:fb:61:4f:61:63:b1:
8a:5d:d0:e2:94:da:51:c5:fe:2e:19:d3:b4:4c:50:
1d:1c:7b:26:cf:77:d9:69:93:2c:34:80:cb:b7:6f:
8a:cf:27:7d:69:11:e6:4d:cb:5b:05:a5:fe:30:81:
75:4c:4c:09:96:10:28:33:26:36:cf:be:e4:48:a1:
27:fc:a2:5e:de:37:d2:eb:e9:54:52:b4:6c:16:77:
c5:08:b5:50:a6:66:86:c3:b4:46:5b:fb:9b:e7:c5:
47:f6:fd:57:53:d8:de:49:76:fe:0b:6b:73:cd:43:
48:4b:a3:2d:b5:d0:f9:57:55:b3:94:88:e2:13:45:
13:e3:81:47:bd:db:d4:e0:87:0b:b1:7a:75:c5:e4:
33:b3:06:23:54:a1:a0:e3:98:d9:a2:98:c5:9a:06:
f2:9b:d6:c6:15:3b:72:7c:c1:cf:b3:4d:2b:67:46:
0a:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:BF:05:A1:DE:05:3C:4C:F8:3D:D0:C1:6B:11:EC:6B:F4:EE:17:E7
X509v3 Authority Key Identifier:
keyid:07:BC:A0:48:2D:60:55:87:EB:0E:0C:85:1C:38:E8:07:75:5F:90:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B7ygSC1gVYfrDgyFHDjoB3VfkBc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/766311-caa4-4399-8b35-fc79af1f6fb3/1/Y78Fod4FPEz4PdDBaxHsa_TuF-c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/766311-caa4-4399-8b35-fc79af1f6fb3/1/B7ygSC1gVYfrDgyFHDjoB3VfkBc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.84.157.0/24
Signature Algorithm: sha256WithRSAEncryption
10:3d:65:30:d2:f1:69:48:5f:bf:33:54:d4:01:31:c7:a4:e3:
de:ef:af:02:6a:de:8e:4a:81:bb:2d:92:51:8b:79:a6:01:45:
d9:39:2b:27:a6:77:19:86:cf:4e:0c:37:ef:47:eb:0e:81:d2:
d7:a2:42:1d:e7:87:13:d5:d6:4f:5c:ac:87:88:fc:03:66:69:
a1:79:c0:4a:65:44:26:cc:d1:23:43:2d:18:02:e3:7d:1f:cc:
8a:3b:d9:f7:32:62:6f:5c:ce:ea:a2:8d:7f:b8:51:c1:ac:2c:
5b:22:52:75:8d:f3:70:8e:39:b4:9e:ca:c7:cd:4d:2a:ba:66:
0e:66:71:b8:33:57:a0:8b:e4:57:7b:48:ae:2f:b3:20:21:87:
ea:6b:c0:d5:ff:03:6d:0e:ed:3e:c9:94:6f:98:e9:70:a8:86:
4d:e7:4d:30:4a:86:d8:d8:6e:ba:bf:92:16:53:4c:2c:1c:b8:
40:8c:00:5d:50:31:ee:09:33:02:7b:09:54:f1:33:43:9d:ed:
ca:65:8b:91:fb:69:ce:3f:d2:b6:b4:15:13:54:08:0b:ed:c0:
33:7f:df:ae:4b:fc:06:b1:12:e9:5e:d9:2d:cd:4f:b9:c3:4c:
ff:90:59:18:83:c6:aa:92:69:a9:16:6f:be:d8:d9:a9:0c:4c:
87:78:7a:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:47:38 2025 by rpki-client