Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/wYVLgUe9YyWEF3_YkKiutxhdm8M.roa
File: wYVLgUe9YyWEF3_YkKiutxhdm8M.roa (raw, json)
Hash identifier: TH3/luUdbnbXTuc+scIZ+xf6GFrZ1yHCBAiK8GTWfXc=
Subject key identifier: C1:85:4B:81:47:BD:63:25:84:17:7F:D8:90:A8:AE:B7:18:5D:9B:C3
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 0196103327FF4457EC2123C997222495EA7C
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/wYVLgUe9YyWEF3_YkKiutxhdm8M.roa
Signing time: Mon 07 Apr 2025 12:21:50 +0000
ROA not before: Mon 07 Apr 2025 12:21:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 140641
IP address blocks: 185.108.204.0/24 maxlen: 24
185.209.75.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:10:33:27:ff:44:57:ec:21:23:c9:97:22:24:95:ea:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Apr 7 12:21:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c1854b8147bd632584177fd890a8aeb7185d9bc3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:13:4a:fd:53:95:8d:e4:43:10:9b:32:a1:2e:
6e:59:12:a8:37:bc:10:ca:17:e0:4c:ba:70:05:15:
da:ef:cf:06:b8:dc:a0:89:53:d9:5e:17:7e:b0:f3:
00:4c:07:35:9e:aa:ea:13:9e:73:f3:08:11:df:1e:
39:8f:b8:cf:56:fb:85:f1:18:5f:2a:08:5f:77:74:
09:63:be:06:ed:69:df:2f:88:83:0e:35:72:5d:c2:
24:14:91:94:ad:f9:03:92:04:f9:c9:7b:48:da:13:
b0:b3:1e:9a:16:6e:f7:ed:d8:cf:6f:8f:ff:2f:11:
08:20:44:c7:98:a2:28:c9:8a:2a:4d:b1:21:83:0a:
69:dd:df:2a:cf:3a:8b:db:a8:8f:5f:6e:5d:cd:6d:
9f:df:f3:9a:d2:59:b6:9b:a3:6e:e0:5b:a3:7f:ce:
6d:76:46:fb:0a:4d:fc:fa:ca:84:3e:0b:74:10:3a:
fc:75:cd:ba:d5:33:5e:0f:9b:ba:eb:80:cb:63:e5:
c2:11:91:a4:47:81:2e:67:a4:ff:97:79:c6:2d:35:
88:40:11:dd:ae:1a:08:b0:d5:ce:83:e7:6f:8f:2f:
55:8f:90:d8:7c:7c:2e:19:98:88:89:c0:f8:c6:cc:
f1:38:e4:97:bf:5e:90:93:68:1f:94:85:f6:8c:25:
b5:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:85:4B:81:47:BD:63:25:84:17:7F:D8:90:A8:AE:B7:18:5D:9B:C3
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/wYVLgUe9YyWEF3_YkKiutxhdm8M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.108.204.0/24
185.209.75.0/24
Signature Algorithm: sha256WithRSAEncryption
02:45:be:db:c7:2c:88:6f:e2:f1:c3:a4:e3:fc:16:92:cf:9d:
24:e9:fd:7d:5a:51:96:98:33:4b:3d:dc:a5:bf:26:a4:2e:a2:
77:1b:36:57:0e:4f:d4:0e:95:41:b6:c3:a7:5c:52:da:8e:96:
4a:d2:27:7b:dc:c6:51:77:90:3d:ce:f2:7e:2c:27:7c:be:b4:
a8:66:a6:dc:26:24:fa:9b:b1:34:65:ac:8d:7a:7f:d5:51:fa:
e7:b0:63:a0:98:e8:12:5d:ae:3c:6a:7d:1d:90:62:36:20:5f:
8b:4d:db:68:01:fd:c2:29:28:bb:7b:ad:0f:79:2e:44:4f:b3:
3a:a0:5d:88:89:bb:bd:47:80:38:0e:13:0b:5e:1d:a7:5d:68:
84:40:81:87:4e:59:77:f8:c3:d0:b5:3b:91:98:b5:b5:94:b6:
af:e3:13:f4:65:b6:32:67:fb:9f:76:3a:c5:a7:4c:a7:cb:07:
a8:f8:f5:dc:5e:f9:70:d5:24:f0:c3:ec:a4:43:41:90:e9:f5:
aa:bb:03:b1:05:c8:ef:61:35:ea:6a:3b:8d:18:36:4b:5a:a5:
d0:0d:9e:aa:b3:f8:e0:da:af:e2:c3:0e:e2:7e:de:50:65:5b:
03:83:90:f0:cb:1d:56:32:57:24:75:aa:ea:ea:03:7f:14:46:
1f:6d:8a:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:12 2025 by rpki-client on console.sobornost.net