Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/07fed6-00b3-4cea-a74e-beeebedffc95/1/Ymnq870-hTRbzxW7QHa4AoItEis.roa
File: Ymnq870-hTRbzxW7QHa4AoItEis.roa (raw, json)
Hash identifier: EVgp5rZ0myk3IS//+2PgncuHs2ECv2APPwVwVowLkug=
Subject key identifier: 62:69:EA:F3:BD:3E:85:34:5B:CF:15:BB:40:76:B8:02:82:2D:12:2B
Certificate issuer: /CN=c50c97eb9baf5428f50f45d330357678b73e061c
Certificate serial: 019423D6B2E1921E47A84E27DFFCEB3AD6C5
Authority key identifier: C5:0C:97:EB:9B:AF:54:28:F5:0F:45:D3:30:35:76:78:B7:3E:06:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xQyX65uvVCj1D0XTMDV2eLc-Bhw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/07fed6-00b3-4cea-a74e-beeebedffc95/1/Ymnq870-hTRbzxW7QHa4AoItEis.roa
Signing time: Wed 01 Jan 2025 21:47:40 +0000
ROA not before: Wed 01 Jan 2025 21:47:40 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207203
IP address blocks: 185.190.48.0/24 maxlen: 24
185.190.49.0/24 maxlen: 24
185.190.50.0/24 maxlen: 24
2a0a:440::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d6:b2:e1:92:1e:47:a8:4e:27:df:fc:eb:3a:d6:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c50c97eb9baf5428f50f45d330357678b73e061c
Validity
Not Before: Jan 1 21:47:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6269eaf3bd3e85345bcf15bb4076b802822d122b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:83:f9:27:e6:67:4b:3b:72:1e:63:f4:96:a8:
e8:7f:ba:79:7b:76:b9:3c:06:d9:92:e5:19:e2:23:
62:7e:f2:d0:e7:2c:0c:51:b5:92:72:7e:b9:c3:88:
1d:cc:24:76:dd:d2:7a:f4:c4:46:af:81:15:93:ce:
66:10:09:dc:68:5c:c6:03:b0:8f:54:4a:97:a0:01:
d2:c3:c9:6e:4b:77:d7:af:71:4b:dd:be:43:cf:d2:
ad:a8:d9:4c:23:c2:6d:b2:2a:be:a3:a0:19:74:30:
06:5f:69:fc:fc:84:e7:c5:b3:0b:a2:4f:7a:c3:1c:
e4:42:aa:92:77:34:c1:13:8f:df:d1:4c:af:ca:89:
b3:90:b6:a9:e4:1c:52:2a:d9:c9:cc:fe:e9:e3:aa:
5c:4f:7c:ae:6e:10:82:f9:24:ed:f9:44:a8:a9:b9:
85:ce:72:2d:30:01:40:16:be:f4:4f:6e:46:2b:22:
c6:b5:bd:6d:d1:4a:a9:b8:28:92:20:d6:b2:20:03:
36:66:41:4f:07:5e:c6:d2:79:21:37:b6:5c:d1:df:
3e:8c:b4:bc:bc:af:5f:48:6e:35:dc:ae:4d:d1:40:
e5:30:9a:8f:7d:c4:f4:6b:0a:d6:54:f2:a9:de:11:
0c:b3:24:09:89:7d:0d:ea:c3:96:17:17:9b:b8:41:
e2:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:69:EA:F3:BD:3E:85:34:5B:CF:15:BB:40:76:B8:02:82:2D:12:2B
X509v3 Authority Key Identifier:
keyid:C5:0C:97:EB:9B:AF:54:28:F5:0F:45:D3:30:35:76:78:B7:3E:06:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xQyX65uvVCj1D0XTMDV2eLc-Bhw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/07fed6-00b3-4cea-a74e-beeebedffc95/1/Ymnq870-hTRbzxW7QHa4AoItEis.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/07fed6-00b3-4cea-a74e-beeebedffc95/1/xQyX65uvVCj1D0XTMDV2eLc-Bhw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.190.48.0-185.190.50.255
IPv6:
2a0a:440::/29
Signature Algorithm: sha256WithRSAEncryption
5f:a5:d6:9a:a7:5e:48:ee:8d:d5:86:89:e6:4c:fa:6d:06:ca:
c6:73:3b:0d:26:dd:46:c2:05:bd:ff:6b:05:db:89:f8:c7:91:
f1:99:7c:e2:55:17:a4:b5:a4:cc:77:0e:b3:7f:2e:21:33:06:
bd:6c:52:4f:d1:15:f0:de:e1:cf:10:a9:fc:be:0e:4f:48:52:
b3:19:b6:a3:d6:1b:26:0b:1e:07:e9:3f:1f:4a:2f:44:e2:f8:
ad:85:45:f0:23:01:39:b4:28:87:79:5c:f1:74:c3:b9:78:99:
14:40:3c:c5:99:c2:2c:e0:72:04:83:08:f1:34:c2:3f:0b:cd:
40:2f:34:dd:28:fb:69:26:56:4d:6a:91:b8:e8:e1:06:af:63:
e8:bc:e5:27:63:a6:e8:d9:e0:df:23:2c:ba:ff:75:68:c0:cc:
3e:9c:38:e9:b5:38:9d:a3:4c:53:a1:d9:25:74:50:6f:90:d7:
45:e6:d2:87:b2:92:64:be:f7:47:8d:b0:e2:c4:3d:e3:11:ca:
73:05:e3:ed:1b:49:ef:0e:a2:8e:94:9a:99:37:9f:ad:2d:48:
d7:af:26:ff:a7:38:8f:74:75:5b:b0:30:0c:13:bc:5e:87:d2:
69:3b:f1:28:61:07:5f:5d:6e:63:56:dd:90:8b:34:8c:54:7b:
f9:64:98:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:16 2025 by rpki-client on console.sobornost.net