Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/a31ddb-1fd2-461c-bfeb-82ee2d2b4289/1/Yc_s1uEQU3LAE6G4fkBk8Gok6CI.roa
File: Yc_s1uEQU3LAE6G4fkBk8Gok6CI.roa (raw, json)
Hash identifier: fdoGqzcyq0doKgpvX55kY45aKOwDTDyxb1UE8P+KUuU=
Subject key identifier: 61:CF:EC:D6:E1:10:53:72:C0:13:A1:B8:7E:40:64:F0:6A:24:E8:22
Certificate issuer: /CN=e277538dec2efcd2f11cc637197d1d9a6fdae9d9
Certificate serial: 0194D328FDFA24197950492E4BA328D23DBF
Authority key identifier: E2:77:53:8D:EC:2E:FC:D2:F1:1C:C6:37:19:7D:1D:9A:6F:DA:E9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4ndTjewu_NLxHMY3GX0dmm_a6dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/a31ddb-1fd2-461c-bfeb-82ee2d2b4289/1/Yc_s1uEQU3LAE6G4fkBk8Gok6CI.roa
Signing time: Tue 04 Feb 2025 22:51:06 +0000
ROA not before: Tue 04 Feb 2025 22:51:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 34941
IP address blocks: 85.118.200.0/21 maxlen: 21
185.112.136.0/23 maxlen: 23
2a06:6180::/29 maxlen: 29
2a06:6180::/40 maxlen: 40
2a06:6180:4000::/40 maxlen: 40
2a06:6180:8000::/40 maxlen: 40
2a06:6187:4000::/35 maxlen: 35
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:d3:28:fd:fa:24:19:79:50:49:2e:4b:a3:28:d2:3d:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e277538dec2efcd2f11cc637197d1d9a6fdae9d9
Validity
Not Before: Feb 4 22:51:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=61cfecd6e1105372c013a1b87e4064f06a24e822
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:83:a9:1b:94:5b:20:2d:bd:8a:b2:42:20:c0:
cb:bb:01:df:41:6d:11:64:1e:fe:e2:f4:f1:ab:d9:
8d:70:c9:5b:06:e1:43:6f:01:bf:20:42:d5:45:44:
3b:64:49:f0:8b:4f:2c:49:f8:ad:4b:5d:bf:ef:77:
84:f5:16:67:fa:2b:0f:bf:1d:53:dd:d7:0c:80:73:
fc:25:79:3f:d6:d1:fe:e7:24:7d:d8:11:b7:8e:d5:
57:e4:ec:30:5e:49:7c:2c:2c:6d:3d:4e:62:7c:eb:
ee:81:b6:de:1d:95:fb:af:e0:d7:3b:50:7b:02:67:
ff:3a:c2:16:4b:9b:d9:53:4f:93:f8:e1:4b:af:c8:
fd:3d:d8:f7:88:34:bc:e2:95:50:6c:70:0a:44:b9:
2c:1f:8d:5a:2a:4e:3c:cb:e3:31:af:1d:4b:bf:2b:
73:6c:c9:b2:e8:3c:ab:4d:ab:0f:30:1f:d2:67:8f:
04:79:7a:61:55:d8:b4:6d:36:a4:8f:d8:ea:38:fc:
61:45:60:e2:62:54:0a:db:cb:da:f3:f3:c9:92:0a:
18:97:6d:cf:d4:58:e5:d0:e8:38:50:ed:2d:4b:dd:
a6:40:69:d0:36:d4:81:ae:6f:89:83:be:aa:a2:96:
c1:24:4c:1d:ce:65:f8:57:1f:2a:da:9c:7e:7a:46:
70:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:CF:EC:D6:E1:10:53:72:C0:13:A1:B8:7E:40:64:F0:6A:24:E8:22
X509v3 Authority Key Identifier:
keyid:E2:77:53:8D:EC:2E:FC:D2:F1:1C:C6:37:19:7D:1D:9A:6F:DA:E9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4ndTjewu_NLxHMY3GX0dmm_a6dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/a31ddb-1fd2-461c-bfeb-82ee2d2b4289/1/Yc_s1uEQU3LAE6G4fkBk8Gok6CI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/a31ddb-1fd2-461c-bfeb-82ee2d2b4289/1/4ndTjewu_NLxHMY3GX0dmm_a6dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.118.200.0/21
185.112.136.0/23
IPv6:
2a06:6180::/29
Signature Algorithm: sha256WithRSAEncryption
1d:e0:a4:25:73:62:b4:ef:a4:de:3d:53:76:0d:96:53:c8:41:
8c:8d:8e:35:f9:41:65:d4:a8:b6:95:1f:05:94:3f:46:aa:b6:
76:4b:68:b5:8c:6c:28:94:29:11:47:91:51:f0:89:fc:62:6c:
b9:1f:b1:c0:c1:fe:84:0f:ba:7b:28:03:ff:34:59:0f:2b:a6:
d3:ee:af:13:20:92:dc:23:c1:17:5b:dc:6f:51:e5:3e:af:ef:
e2:b7:b5:b3:a0:ac:64:cf:35:3e:ef:3a:7d:0d:53:75:23:ad:
5c:41:24:a7:49:56:71:bc:84:3d:b2:96:01:1a:1e:30:7b:5b:
9b:39:74:f8:3c:7d:fd:b4:68:3a:9a:3a:c2:94:1e:32:4b:c1:
3a:90:70:b1:77:d1:4d:7b:ef:36:b4:03:5b:2f:ac:93:a2:c5:
61:1d:b0:8e:1c:1f:a4:d0:cc:1d:8a:b6:68:a4:21:f7:d6:d9:
e7:0f:d0:f0:6d:c0:e1:c6:05:6b:fd:67:df:49:93:29:2e:26:
c4:13:05:da:30:3c:3c:eb:b8:0c:8c:fd:fd:e9:c2:ff:47:29:
88:f2:5e:37:94:1a:51:4f:b9:82:af:d6:e2:ba:28:15:97:da:
ac:1b:6d:47:55:48:5e:8f:5b:b8:dd:4c:06:3e:42:54:e4:9d:
06:55:0a:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 12:57:13 2025 by rpki-client