Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/b2d604-ddfb-4eff-b49a-df5ce56e7b4b/1/ynyN4wWGc9Sj2DD7iXQzVE-v9xY.roa
File: ynyN4wWGc9Sj2DD7iXQzVE-v9xY.roa (raw, json)
Hash identifier: u5eyJYLIS/nm3KNdllMZJLMRQXx3INBcSEYFSpiCu5s=
Subject key identifier: CA:7C:8D:E3:05:86:73:D4:A3:D8:30:FB:89:74:33:54:4F:AF:F7:16
Certificate issuer: /CN=0cc81d074357de5d32f8a65cd9ee7a585bf3ec6f
Certificate serial: 019422FB9D6338DC8CF5EF723E592C863BB1
Authority key identifier: 0C:C8:1D:07:43:57:DE:5D:32:F8:A6:5C:D9:EE:7A:58:5B:F3:EC:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DMgdB0NX3l0y-KZc2e56WFvz7G8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/b2d604-ddfb-4eff-b49a-df5ce56e7b4b/1/ynyN4wWGc9Sj2DD7iXQzVE-v9xY.roa
Signing time: Wed 01 Jan 2025 17:48:22 +0000
ROA not before: Wed 01 Jan 2025 17:48:22 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 203092
IP address blocks: 185.218.24.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:9d:63:38:dc:8c:f5:ef:72:3e:59:2c:86:3b:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0cc81d074357de5d32f8a65cd9ee7a585bf3ec6f
Validity
Not Before: Jan 1 17:48:22 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ca7c8de3058673d4a3d830fb897433544faff716
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:f3:71:2b:0d:26:e9:51:5a:f2:94:36:b7:02:
44:4e:8a:7a:e7:44:c1:fa:39:1f:3c:44:d4:a0:60:
4f:5a:e7:53:d7:27:c5:c6:87:8c:22:92:a5:b9:2e:
69:ec:29:ba:39:8d:24:18:10:fc:de:eb:3e:3d:a4:
8c:8c:5f:05:c3:c6:19:ba:8b:23:63:f7:6f:1c:52:
14:2a:0f:f9:94:e0:36:7c:67:4b:eb:85:b4:43:91:
69:37:f1:e9:ad:8e:f3:7e:35:1e:1a:c5:6c:64:a6:
fa:8a:74:d5:88:1a:30:11:54:94:5c:7d:33:77:29:
a8:a7:14:53:72:d8:39:3e:20:3d:0f:46:df:cd:ce:
9a:11:da:61:1f:95:9c:a1:7a:7f:6d:ea:af:97:62:
5b:5f:5d:11:d9:a8:ec:ec:93:8f:43:f1:8c:f6:96:
7f:6b:41:05:8e:38:5a:c1:52:13:4d:4d:ea:69:24:
14:3b:86:ba:57:a7:5b:4f:09:4e:ac:98:be:2c:43:
1a:07:b1:36:77:a8:45:5c:7f:1f:87:9c:f2:65:8c:
b5:02:ed:91:1f:16:9c:82:43:b9:8c:c0:7d:12:39:
00:cd:35:97:15:47:57:54:a1:9b:ec:ae:b2:e5:02:
60:36:40:b0:f0:04:29:78:8d:65:34:83:55:7c:d5:
a0:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:7C:8D:E3:05:86:73:D4:A3:D8:30:FB:89:74:33:54:4F:AF:F7:16
X509v3 Authority Key Identifier:
keyid:0C:C8:1D:07:43:57:DE:5D:32:F8:A6:5C:D9:EE:7A:58:5B:F3:EC:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DMgdB0NX3l0y-KZc2e56WFvz7G8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/b2d604-ddfb-4eff-b49a-df5ce56e7b4b/1/ynyN4wWGc9Sj2DD7iXQzVE-v9xY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/b2d604-ddfb-4eff-b49a-df5ce56e7b4b/1/DMgdB0NX3l0y-KZc2e56WFvz7G8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.218.24.0/22
Signature Algorithm: sha256WithRSAEncryption
8f:d8:a1:f5:de:01:80:4c:ef:0f:ee:73:d8:a0:38:98:8d:aa:
b7:ef:1a:00:1a:e4:6a:09:a6:30:23:09:c7:1f:98:88:39:4a:
15:d4:90:00:27:56:f1:79:b2:e0:26:0e:84:58:c1:e3:2f:b8:
51:b8:56:fb:d3:54:90:1a:a9:46:53:e4:c3:5a:0a:12:dd:4d:
0d:97:59:73:d0:33:d2:2b:91:6d:0d:be:bd:96:f5:f8:da:ce:
aa:d9:b4:45:da:19:74:a2:d7:81:fd:7c:e5:f1:2b:0b:36:ca:
8a:fa:2b:2f:77:52:94:79:66:e1:44:a2:44:5d:8b:de:eb:d2:
c6:d2:8b:57:2b:1c:81:e4:66:00:c3:91:a4:93:c9:03:da:54:
00:44:15:c6:3c:e6:58:9a:db:1a:da:8b:14:67:be:df:ef:d3:
2c:67:bf:e0:72:fb:e7:9f:51:f4:42:17:99:33:2e:c7:2f:d6:
a0:a5:c1:d5:82:28:bb:75:0b:7e:e6:f9:ca:f4:a4:de:df:58:
c1:6e:e6:5e:ce:3f:53:64:77:dd:55:ed:c9:c9:8f:e1:30:3d:
d8:dd:c6:52:1f:ee:70:6d:13:b3:23:17:48:cf:ac:fd:33:9f:
a2:7e:f3:1d:c4:e7:da:1b:e9:48:1f:63:42:30:5c:16:73:a5:
7d:7a:37:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 23 19:16:11 2025 by rpki-client on console.sobornost.net