Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/a89801-c721-41bb-b517-b8c666e6d351/1/YK76edoQW6PlY1_6eWvQAvgvFbk.roa
File: YK76edoQW6PlY1_6eWvQAvgvFbk.roa (raw, json)
Hash identifier: CpiLcpwfYKDzbYL4M2/DEmm7Pg6INmeoKjDA2RUYH+0=
Subject key identifier: 60:AE:FA:79:DA:10:5B:A3:E5:63:5F:FA:79:6B:D0:02:F8:2F:15:B9
Certificate issuer: /CN=191e27b29f65a24d9f94215715cd3671825a9eae
Certificate serial: 018573B184E9B174AF99C170BC59A1A25117
Authority key identifier: 19:1E:27:B2:9F:65:A2:4D:9F:94:21:57:15:CD:36:71:82:5A:9E:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GR4nsp9lok2flCFXFc02cYJanq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/a89801-c721-41bb-b517-b8c666e6d351/1/YK76edoQW6PlY1_6eWvQAvgvFbk.roa
Signing time: Mon 02 Jan 2023 18:14:51 +0000
ROA not before: Mon 02 Jan 2023 18:14:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49544
IP address blocks: 185.102.26.0/24 maxlen: 24
185.102.24.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:73:b1:84:e9:b1:74:af:99:c1:70:bc:59:a1:a2:51:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=191e27b29f65a24d9f94215715cd3671825a9eae
Validity
Not Before: Jan 2 18:14:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=60aefa79da105ba3e5635ffa796bd002f82f15b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:6e:30:65:37:88:21:41:28:3f:c0:15:9d:a1:
bb:0e:59:a3:3e:63:01:53:f0:7b:68:ba:70:73:7b:
74:43:d7:ef:f5:70:47:ea:a9:44:d0:10:2b:48:18:
17:c2:9b:f5:c5:70:06:fb:9e:a4:d6:be:d0:43:65:
13:fe:02:74:8d:3c:d6:51:ca:d0:25:cd:79:dd:b7:
a8:b6:75:0c:45:08:ec:69:ac:51:fc:ac:3f:e6:25:
a7:c8:de:d0:f3:8f:f8:c6:38:2c:10:62:40:e7:ae:
8f:0a:3e:2f:05:d5:2b:3f:c1:fa:46:79:2e:7e:cc:
7b:cf:0d:d5:0a:16:d0:00:5c:56:2c:12:b6:13:24:
3f:e1:3a:77:36:75:e2:29:4f:e0:f4:6f:ba:aa:6d:
43:37:19:59:bb:79:4d:a7:20:93:6d:05:58:32:42:
57:f8:4f:3a:9f:ef:c3:10:11:11:28:8d:8c:0f:ce:
c2:4e:7b:30:86:ef:eb:89:ad:04:6f:f5:6b:6f:cb:
98:15:3c:86:8a:a6:bf:63:3b:45:6d:43:fe:f5:41:
7d:25:b4:7d:54:17:af:f2:44:a7:70:4f:15:f3:27:
af:a2:5c:a7:22:3c:a4:af:2b:ba:07:2e:5a:73:a4:
97:51:fa:41:9f:da:47:78:7c:d2:bd:fc:5f:33:3c:
0d:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:AE:FA:79:DA:10:5B:A3:E5:63:5F:FA:79:6B:D0:02:F8:2F:15:B9
X509v3 Authority Key Identifier:
keyid:19:1E:27:B2:9F:65:A2:4D:9F:94:21:57:15:CD:36:71:82:5A:9E:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GR4nsp9lok2flCFXFc02cYJanq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/a89801-c721-41bb-b517-b8c666e6d351/1/YK76edoQW6PlY1_6eWvQAvgvFbk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/a89801-c721-41bb-b517-b8c666e6d351/1/GR4nsp9lok2flCFXFc02cYJanq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.102.24.0-185.102.26.255
Signature Algorithm: sha256WithRSAEncryption
67:16:ca:d0:e5:b6:af:1b:f3:f1:42:b0:09:88:90:74:f5:98:
6b:a8:52:34:75:82:a6:2f:1f:ec:49:aa:d0:d2:a3:08:ba:e3:
86:1d:18:fe:58:a6:56:72:f0:db:b3:01:cc:64:ff:bc:a6:0f:
6e:4e:d3:58:60:d0:d4:93:99:36:99:5a:19:3a:68:12:73:59:
17:6f:41:3d:31:56:f7:cd:94:89:d9:51:48:e4:cc:bd:6e:d6:
ad:0d:26:0f:ef:ae:da:98:3d:86:36:20:b0:ff:5a:f3:04:ec:
56:d1:89:d5:98:21:5f:05:bc:18:97:be:52:11:ad:fc:58:ce:
09:9f:da:03:02:1c:80:7e:c1:eb:54:09:c9:1b:34:aa:00:29:
d9:da:7a:f2:22:1c:b8:e5:90:de:af:46:cc:25:7f:a4:88:5a:
2f:63:f0:25:0d:0e:ac:31:8b:c8:08:66:fb:6a:ae:40:81:64:
f9:0c:80:b5:7b:0d:a3:90:0e:c5:aa:e3:50:4e:22:7c:0a:fc:
1a:b3:bd:55:9a:ed:24:2d:03:e6:54:e3:09:e4:17:3a:02:13:
70:79:43:ea:ae:b2:42:8d:8b:98:44:8c:8c:3f:20:09:9c:89:
69:f6:78:f8:b5:df:c0:9d:af:f9:0d:98:ad:86:aa:37:8c:8a:
61:f7:60:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:31:27 2025 by rpki-client