Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/000465-83cb-41b4-8e60-08d65b38639d/1/ygPca0O99w3Q4m6yQX8TO0Whs5s.roa
File: ygPca0O99w3Q4m6yQX8TO0Whs5s.roa (raw, json)
Hash identifier: qvcmTDWYJNgYWiCmf5F1FBjGQvGT5OVUplX4UvYYEFk=
Subject key identifier: CA:03:DC:6B:43:BD:F7:0D:D0:E2:6E:B2:41:7F:13:3B:45:A1:B3:9B
Certificate issuer: /CN=682c842dfa2a1e714727bccb95f165347103f277
Certificate serial: 019425FC7BE34441336991B44D0D5E1BD27E
Authority key identifier: 68:2C:84:2D:FA:2A:1E:71:47:27:BC:CB:95:F1:65:34:71:03:F2:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aCyELfoqHnFHJ7zLlfFlNHED8nc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/000465-83cb-41b4-8e60-08d65b38639d/1/ygPca0O99w3Q4m6yQX8TO0Whs5s.roa
Signing time: Thu 02 Jan 2025 07:48:11 +0000
ROA not before: Thu 02 Jan 2025 07:48:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 11185
IP address blocks: 185.69.169.0/24 maxlen: 24
185.69.170.0/24 maxlen: 24
185.69.171.0/24 maxlen: 24
2a05:2241::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fc:7b:e3:44:41:33:69:91:b4:4d:0d:5e:1b:d2:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=682c842dfa2a1e714727bccb95f165347103f277
Validity
Not Before: Jan 2 07:48:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ca03dc6b43bdf70dd0e26eb2417f133b45a1b39b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:cc:c8:8e:d6:81:7f:5c:86:40:d9:1f:99:d5:
09:dd:b2:e1:4e:64:87:5f:4b:1d:b8:e5:16:bd:e9:
66:4d:ee:e4:3a:68:eb:3a:89:3f:5e:0b:4d:e0:19:
7e:7f:a7:0a:b6:ba:d6:e6:d0:52:eb:5e:c5:6d:e5:
54:04:ae:42:f3:0c:79:34:3d:c6:50:8b:a3:ce:da:
c5:90:ab:89:e3:21:a6:5b:7b:12:1f:bd:8d:dd:27:
0a:d9:a2:b7:5f:1c:a7:e2:37:a3:88:24:7c:e5:48:
c9:1e:25:11:6d:43:a4:77:26:0e:42:5f:3b:f9:96:
a5:49:50:c8:3b:99:a2:8f:64:ed:51:eb:3d:5a:da:
77:27:d8:a5:f1:98:16:be:f0:9a:07:87:4b:0f:b9:
22:e1:47:76:34:c2:32:61:c4:94:a2:c0:0d:24:54:
02:1e:9a:74:e1:79:d5:5b:e7:0c:2b:02:c6:15:14:
45:a1:11:f6:e4:9b:c5:c9:8b:d1:b9:d7:bd:4b:18:
43:67:9d:fd:3e:dd:fa:17:a4:8b:2d:63:0d:20:12:
80:97:0e:c7:3a:2e:96:9b:4c:4c:57:39:d9:a5:ff:
5f:92:69:31:fe:04:af:d3:07:60:1c:f4:a1:9d:2f:
20:a4:2c:08:e2:74:41:00:b4:54:f1:8d:bb:b5:7b:
df:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:03:DC:6B:43:BD:F7:0D:D0:E2:6E:B2:41:7F:13:3B:45:A1:B3:9B
X509v3 Authority Key Identifier:
keyid:68:2C:84:2D:FA:2A:1E:71:47:27:BC:CB:95:F1:65:34:71:03:F2:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aCyELfoqHnFHJ7zLlfFlNHED8nc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/000465-83cb-41b4-8e60-08d65b38639d/1/ygPca0O99w3Q4m6yQX8TO0Whs5s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/000465-83cb-41b4-8e60-08d65b38639d/1/aCyELfoqHnFHJ7zLlfFlNHED8nc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.69.169.0-185.69.171.255
IPv6:
2a05:2241::/32
Signature Algorithm: sha256WithRSAEncryption
3b:cf:de:a2:ab:e3:d2:81:eb:e1:e8:ac:07:08:ca:85:96:b2:
47:36:56:76:76:98:6d:ec:d5:fd:1e:85:9a:fa:1a:11:5b:1d:
e6:1d:e2:ce:b3:ea:f9:a5:c4:26:81:b4:2d:3d:c9:46:63:fe:
54:fa:22:c0:9b:b6:2b:e5:c1:07:bc:22:b7:60:6d:4c:b7:b5:
91:45:a5:99:83:bd:15:6a:d1:c0:96:3c:aa:48:f7:97:c5:21:
9c:a8:2d:07:66:86:69:94:e5:d5:dd:b3:52:86:c8:6a:f6:8f:
14:06:75:fb:6e:96:1a:62:6f:a4:ee:4b:15:3f:ac:d7:4a:44:
98:1a:11:bc:79:61:48:37:46:4b:c2:6e:6f:70:31:fd:81:23:
75:df:c1:ac:00:22:fa:29:5c:15:7b:0a:6d:53:0d:d3:66:0b:
fc:e9:da:b1:2b:3a:d4:a7:9b:ed:d7:d5:f9:30:a2:2b:50:b0:
cc:1c:2a:2d:9c:29:d6:ea:c5:c6:cd:14:11:43:51:e6:27:1b:
b6:d2:23:34:2f:83:53:96:19:40:00:fc:d4:b9:ed:cc:cf:d3:
95:f1:1e:94:01:fa:44:4f:5a:84:3f:d9:0d:46:11:90:f4:1d:
51:65:d1:dc:49:2a:49:03:54:ba:ab:c6:40:a3:ab:e4:03:f8:
22:fa:37:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:07 2025 by rpki-client on console.sobornost.net