Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/207934-9edc-4a89-820e-d8488b3ab42f/1/YYbT8lbyVWv6yQ3daL3nywYGpE0.roa
File: YYbT8lbyVWv6yQ3daL3nywYGpE0.roa (raw, json)
Hash identifier: H/Qcg0aplqNTHmTWbVVGR+IQ4V4ag89xamHIQ20iGuk=
Subject key identifier: 61:86:D3:F2:56:F2:55:6B:FA:C9:0D:DD:68:BD:E7:CB:06:06:A4:4D
Certificate issuer: /CN=81c8b73ab7bdeb76ff48b2ca099616edbe71c426
Certificate serial: 01954CD718EE18A7FCA787BC7D39E2B1D781
Authority key identifier: 81:C8:B7:3A:B7:BD:EB:76:FF:48:B2:CA:09:96:16:ED:BE:71:C4:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gci3Ore963b_SLLKCZYW7b5xxCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/207934-9edc-4a89-820e-d8488b3ab42f/1/YYbT8lbyVWv6yQ3daL3nywYGpE0.roa
Signing time: Fri 28 Feb 2025 13:55:19 +0000
ROA not before: Fri 28 Feb 2025 13:55:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215224
IP address blocks: 185.229.240.0/24 maxlen: 24
185.229.241.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:4c:d7:18:ee:18:a7:fc:a7:87:bc:7d:39:e2:b1:d7:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81c8b73ab7bdeb76ff48b2ca099616edbe71c426
Validity
Not Before: Feb 28 13:55:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6186d3f256f2556bfac90ddd68bde7cb0606a44d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:52:86:87:47:20:44:d0:99:99:04:10:99:61:
dc:95:60:c3:5c:60:1d:fa:90:b0:d0:5e:55:50:cc:
bc:76:46:4f:0d:9e:88:44:65:c0:95:9f:3c:82:37:
e8:a2:de:7b:10:df:bd:ac:76:80:7b:e0:81:80:d9:
ee:ea:c0:ea:eb:0a:89:88:72:77:f4:fe:50:9f:34:
16:7e:54:bf:b8:97:0b:8a:63:6d:5a:a4:4e:77:7f:
94:3e:2c:f0:cc:79:ab:85:f0:72:29:c7:8b:9d:c3:
97:27:fa:d7:3d:c2:39:ab:71:b4:47:1c:db:39:51:
40:16:39:0e:85:39:3a:04:15:70:41:3e:c8:0a:d8:
61:97:e0:2b:b4:db:54:8a:c1:95:4d:d4:f9:11:84:
b5:ab:43:6e:c2:08:7a:5a:5b:8c:8d:51:c8:25:ef:
66:83:6e:45:58:7c:c3:a5:2d:fe:bb:7e:c6:3f:a7:
d1:95:e2:59:64:e3:e8:26:40:65:49:f7:0e:8d:58:
72:67:f3:64:b7:2a:c7:92:90:b4:47:7b:c1:b0:8b:
5b:23:3d:78:ea:40:6e:a4:71:c9:b5:aa:76:3d:9e:
5e:4a:2a:fc:63:d9:b3:dc:3a:31:e2:a8:be:d4:30:
e6:fa:20:e1:27:76:2a:72:48:c6:a1:6b:54:8b:86:
9b:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:86:D3:F2:56:F2:55:6B:FA:C9:0D:DD:68:BD:E7:CB:06:06:A4:4D
X509v3 Authority Key Identifier:
keyid:81:C8:B7:3A:B7:BD:EB:76:FF:48:B2:CA:09:96:16:ED:BE:71:C4:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gci3Ore963b_SLLKCZYW7b5xxCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/207934-9edc-4a89-820e-d8488b3ab42f/1/YYbT8lbyVWv6yQ3daL3nywYGpE0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/207934-9edc-4a89-820e-d8488b3ab42f/1/gci3Ore963b_SLLKCZYW7b5xxCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.229.240.0/23
Signature Algorithm: sha256WithRSAEncryption
63:1a:25:92:05:73:4f:cc:0c:69:66:ff:76:c1:77:f6:7b:7b:
32:73:de:ef:41:82:ce:d3:12:0d:8e:70:b0:bc:98:40:4e:d6:
53:ea:0c:d4:14:de:08:e3:ea:8d:dc:13:03:85:1c:83:79:f5:
40:eb:67:19:26:d4:6d:d1:c7:9c:d9:3a:52:d9:03:d6:93:f2:
52:8b:8a:3f:29:86:c8:78:8b:bc:e4:e3:32:b7:20:b4:5c:bf:
8e:14:46:58:23:f5:24:50:97:6d:8a:71:2c:eb:f4:b5:ad:d5:
82:fb:f7:86:b0:4f:26:70:e7:8a:14:c2:8b:42:c3:f5:15:5f:
df:83:85:c7:77:60:43:75:4a:c1:59:f6:60:c7:2d:c5:db:d6:
8d:23:1d:9a:58:e7:79:87:63:6d:f9:66:a3:b1:45:0b:28:38:
1e:67:3c:5e:6e:7e:9d:32:cd:62:a6:69:ae:cd:f0:c9:f7:5e:
e8:b5:91:6e:08:7a:d0:63:c0:00:89:c6:37:45:74:62:31:9a:
85:de:fa:bd:03:1b:52:80:bc:f9:ca:7d:ae:36:9a:44:2d:cb:
d8:21:20:0c:68:60:f2:e0:72:5b:44:da:d9:e0:cc:a4:87:b4:
0c:b3:ff:b2:0b:f7:fe:57:8d:d7:8a:62:e8:6e:04:26:b7:84:
3c:38:9e:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 07:20:05 2025 by rpki-client