Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/3e5c96-7e95-4797-aa6a-a8978e3aae98/1/yX8SV9VGJFhES7mUS6-LTvmXGx8.roa
File: yX8SV9VGJFhES7mUS6-LTvmXGx8.roa (raw, json)
Hash identifier: yb6TAx+2YgX4WVBv0Avw9JYkbGFg7vg0qrXoYZM9Y3E=
Subject key identifier: C9:7F:12:57:D5:46:24:58:44:4B:B9:94:4B:AF:8B:4E:F9:97:1B:1F
Certificate issuer: /CN=4eeb86abd5374e553098209075b9afecabef333a
Certificate serial: 0194252217F15AB3C72F11C83958C787C8CE
Authority key identifier: 4E:EB:86:AB:D5:37:4E:55:30:98:20:90:75:B9:AF:EC:AB:EF:33:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TuuGq9U3TlUwmCCQdbmv7KvvMzo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/3e5c96-7e95-4797-aa6a-a8978e3aae98/1/yX8SV9VGJFhES7mUS6-LTvmXGx8.roa
Signing time: Thu 02 Jan 2025 03:49:38 +0000
ROA not before: Thu 02 Jan 2025 03:49:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 46562
IP address blocks: 185.230.222.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:22:17:f1:5a:b3:c7:2f:11:c8:39:58:c7:87:c8:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4eeb86abd5374e553098209075b9afecabef333a
Validity
Not Before: Jan 2 03:49:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c97f1257d5462458444bb9944baf8b4ef9971b1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:d3:e8:e8:4c:93:a1:7b:d5:cf:98:f3:55:da:
50:c4:b5:77:01:7d:e3:be:ca:ec:08:2c:af:e6:65:
63:92:2d:87:d1:61:a2:97:24:47:1d:53:01:e8:b9:
78:e9:13:75:82:a0:4d:62:43:a0:a8:b0:a0:2b:71:
c7:bd:4a:18:7a:fe:d2:55:db:3b:23:d1:06:32:f0:
6b:bb:9e:a4:1f:12:1a:95:3b:5c:32:ae:75:8d:c8:
6d:70:4c:c1:4e:7d:3f:76:11:dc:7c:30:cb:98:a3:
ec:79:53:68:c7:21:60:07:c5:af:d0:6c:c8:82:cd:
67:7b:7b:90:43:79:23:da:25:0c:3f:fb:02:c3:e7:
f0:d8:d8:8c:1a:c2:a8:13:45:e0:62:09:b2:43:e4:
55:18:be:c3:5a:cf:1f:8d:49:8f:05:d2:58:71:b9:
05:ba:02:24:35:63:4b:d4:60:8f:28:6b:85:38:dd:
0f:95:4a:96:1a:87:64:d7:3b:a3:42:f1:9f:62:8a:
d2:6d:4d:1e:7e:41:17:03:20:28:92:74:82:43:6e:
e9:32:86:68:8c:7d:e8:6e:3b:30:ee:35:d0:1b:ec:
c2:31:ae:6f:25:c2:d3:e9:7d:cd:cf:e2:e8:1b:47:
69:b4:ee:75:28:55:e5:87:74:27:a4:18:da:69:cc:
72:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:7F:12:57:D5:46:24:58:44:4B:B9:94:4B:AF:8B:4E:F9:97:1B:1F
X509v3 Authority Key Identifier:
keyid:4E:EB:86:AB:D5:37:4E:55:30:98:20:90:75:B9:AF:EC:AB:EF:33:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TuuGq9U3TlUwmCCQdbmv7KvvMzo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/3e5c96-7e95-4797-aa6a-a8978e3aae98/1/yX8SV9VGJFhES7mUS6-LTvmXGx8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/3e5c96-7e95-4797-aa6a-a8978e3aae98/1/TuuGq9U3TlUwmCCQdbmv7KvvMzo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.230.222.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:e1:43:22:9a:2d:40:d8:92:03:a4:fa:9e:7b:6f:84:e0:b5:
4d:9d:93:cc:f3:3b:07:f2:23:68:02:e3:51:84:ac:10:84:bd:
0d:16:5f:d2:72:06:39:b0:fd:07:df:b1:80:88:7f:ca:55:80:
cb:7b:46:fe:9c:0b:92:76:cc:0a:a6:86:04:09:59:0c:b3:86:
af:00:f5:0c:c8:d0:a5:ea:a0:11:51:fa:e5:5e:8e:8f:a4:5f:
6c:f4:cd:ee:71:c7:4f:e9:16:81:bb:38:da:fb:79:f7:2e:25:
ff:70:b1:51:e0:bc:58:11:c5:82:1c:f3:e1:21:64:1c:d9:40:
06:91:35:e0:7a:3e:bb:ac:24:fb:46:c0:bf:f8:3e:e7:46:96:
43:6a:74:90:6f:a9:53:f6:1a:6e:ea:63:be:90:52:a8:85:39:
2c:50:7a:f6:fc:2a:3a:17:9b:16:9c:38:00:b4:93:d8:79:df:
cd:af:2f:cf:cd:a0:ac:94:29:ba:22:bd:7f:c4:55:f8:80:d6:
2f:b8:07:fb:bf:54:71:74:77:49:9f:83:d7:c3:75:f6:03:6f:
4e:19:e3:05:b4:3e:21:38:c6:d6:e4:75:aa:f3:f2:f2:bb:52:
5f:d2:70:33:4d:45:ad:a3:75:bf:e0:91:b1:c4:93:8a:62:1e:
71:cf:5a:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:41:59 2025 by rpki-client