Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/9e847f-4146-4566-8c3e-1ba543eeaed7/1/PYemKJWEUk-HkJO5Mj9UiDiPJ_4.roa
File: PYemKJWEUk-HkJO5Mj9UiDiPJ_4.roa (raw, json)
Hash identifier: QhKEDEG5e1WSPoJeyCcT8wLZHkvtF03JkUepmJw6Zxw=
Subject key identifier: 3D:87:A6:28:95:84:52:4F:87:90:93:B9:32:3F:54:88:38:8F:27:FE
Certificate issuer: /CN=5da432a4ec3b0ac4ca4e4ecec0e9f4d46b497af0
Certificate serial: 01941F8C74F3ECBCA2E7EE3ACF84A6B9D3E5
Authority key identifier: 5D:A4:32:A4:EC:3B:0A:C4:CA:4E:4E:CE:C0:E9:F4:D4:6B:49:7A:F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XaQypOw7CsTKTk7OwOn01GtJevA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/9e847f-4146-4566-8c3e-1ba543eeaed7/1/PYemKJWEUk-HkJO5Mj9UiDiPJ_4.roa
Signing time: Wed 01 Jan 2025 01:48:06 +0000
ROA not before: Wed 01 Jan 2025 01:48:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202520
IP address blocks: 185.111.219.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:74:f3:ec:bc:a2:e7:ee:3a:cf:84:a6:b9:d3:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5da432a4ec3b0ac4ca4e4ecec0e9f4d46b497af0
Validity
Not Before: Jan 1 01:48:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3d87a6289584524f879093b9323f5488388f27fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:b1:ed:32:af:3b:21:f7:e6:2b:ac:2f:7b:1c:
38:57:ec:4b:a1:af:4d:f0:d1:00:da:52:73:c8:bf:
cf:94:3d:4d:7c:76:00:c3:63:11:95:69:59:34:ac:
c8:9d:fa:4b:43:1f:83:04:9b:4b:a9:4d:a3:04:8c:
42:26:02:0b:46:28:01:4a:3e:53:0a:de:8d:4e:9a:
83:49:17:7e:1e:90:be:69:a3:df:2b:95:cd:c5:48:
12:ce:af:21:34:e5:74:65:20:f8:d2:c8:c0:18:d8:
8a:55:ed:6c:ce:66:ff:98:d4:ad:d9:26:c1:cd:18:
dc:73:37:28:36:6f:26:5d:ff:b0:ac:f2:9f:fb:db:
51:9b:da:07:fb:b6:89:ac:c2:63:5a:da:08:a9:de:
7d:29:ef:48:ab:15:e0:8b:bf:74:ec:b7:61:1f:96:
99:25:f8:4e:79:a6:5e:4a:ca:88:6f:eb:6d:66:e0:
d7:a1:7c:cb:3b:d9:91:3e:ec:ba:26:a7:de:97:76:
f2:6c:63:d2:39:c7:8b:8b:2d:25:b8:ea:17:50:eb:
c4:05:7e:63:a4:be:5e:8b:cc:e2:1d:ce:e8:e5:cb:
00:81:0e:b3:54:07:4f:c2:5e:73:46:c6:1f:7e:93:
39:88:65:13:95:62:a6:43:82:df:99:7c:8c:9d:30:
37:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:87:A6:28:95:84:52:4F:87:90:93:B9:32:3F:54:88:38:8F:27:FE
X509v3 Authority Key Identifier:
keyid:5D:A4:32:A4:EC:3B:0A:C4:CA:4E:4E:CE:C0:E9:F4:D4:6B:49:7A:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XaQypOw7CsTKTk7OwOn01GtJevA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/9e847f-4146-4566-8c3e-1ba543eeaed7/1/PYemKJWEUk-HkJO5Mj9UiDiPJ_4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/9e847f-4146-4566-8c3e-1ba543eeaed7/1/XaQypOw7CsTKTk7OwOn01GtJevA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.111.219.0/24
Signature Algorithm: sha256WithRSAEncryption
9c:3e:16:02:ae:73:93:96:69:7a:ea:7c:cf:bf:57:a2:f5:73:
f2:ae:92:90:68:ac:01:03:c9:9e:3a:89:59:13:8e:72:6c:cf:
9f:47:8d:83:d2:42:4e:98:5e:28:90:c3:6f:8c:43:cc:71:21:
4b:38:81:9b:86:11:e4:93:5c:af:cb:72:13:e7:8d:7d:c8:de:
a9:85:1b:41:f0:27:37:85:f3:b7:27:c1:3c:07:e3:14:6d:55:
41:98:35:04:c8:12:39:9d:37:9d:30:41:0a:d2:c9:09:bc:4c:
86:c4:8b:21:f0:53:61:e8:6b:e4:a7:90:ec:49:3c:e9:56:bd:
98:3d:3e:36:fb:e1:21:20:79:cd:b0:93:9e:de:10:09:90:70:
41:5d:01:8a:a2:97:28:96:ff:9e:a7:d9:8b:98:ae:85:4b:d5:
0f:a7:e0:94:bb:35:11:49:f2:8b:8e:6a:f1:14:2c:e1:39:b3:
fd:53:f0:aa:2c:6e:c1:08:09:be:67:da:2d:d4:00:04:25:2f:
70:44:aa:37:22:54:c3:40:fa:85:ba:29:0c:f6:41:f4:f5:b9:
be:f4:12:d8:ad:45:52:a9:cd:08:0f:89:1d:2a:98:4c:60:74:
04:e4:1d:cb:c4:25:0e:7c:f7:28:4e:ae:3f:fc:78:d3:8d:05:
c6:40:06:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:26:44 2025 by rpki-client on console.sobornost.net