Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/98e650-337b-483d-9f4c-a83383059c18/1/YE7z5Yo-VebSsmgIFpnY-X43QgA.roa
File: YE7z5Yo-VebSsmgIFpnY-X43QgA.roa (raw, json)
Hash identifier: lLUNSeL3GzkU1y5/O/u6QldsICYnJuoTtdixE8gdS+A=
Subject key identifier: 60:4E:F3:E5:8A:3E:55:E6:D2:B2:68:08:16:99:D8:F9:7E:37:42:00
Certificate issuer: /CN=99060e2deaffea7d622dd91580ff9015f255758b
Certificate serial: 01941F8C51187F3938D5871DAFA7D22A8454
Authority key identifier: 99:06:0E:2D:EA:FF:EA:7D:62:2D:D9:15:80:FF:90:15:F2:55:75:8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mQYOLer_6n1iLdkVgP-QFfJVdYs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/98e650-337b-483d-9f4c-a83383059c18/1/YE7z5Yo-VebSsmgIFpnY-X43QgA.roa
Signing time: Wed 01 Jan 2025 01:47:57 +0000
ROA not before: Wed 01 Jan 2025 01:47:57 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215894
IP address blocks: 185.159.246.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:51:18:7f:39:38:d5:87:1d:af:a7:d2:2a:84:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99060e2deaffea7d622dd91580ff9015f255758b
Validity
Not Before: Jan 1 01:47:57 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=604ef3e58a3e55e6d2b268081699d8f97e374200
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:f2:b0:fd:2d:90:43:85:80:02:e5:f8:2f:e2:
61:68:04:f6:2f:38:00:39:cb:2c:04:05:24:b8:6d:
19:30:ba:4f:05:07:99:b4:81:e9:f7:80:aa:5c:e5:
41:d7:8a:66:f3:7f:0c:4b:3b:8a:62:52:55:4e:f7:
11:34:cd:8b:36:6c:fa:43:3f:8e:18:fa:d9:8e:31:
35:8a:8b:39:ef:44:e0:55:53:49:9d:25:cd:92:ef:
0f:79:95:b6:fd:ce:d1:26:9b:8b:6a:a6:0a:b8:4d:
6a:d6:cc:f8:25:23:62:2f:a5:59:cf:e8:22:1c:8f:
c4:e9:3f:6f:01:14:ff:ad:a9:0e:e7:6d:19:92:40:
e7:1d:dd:df:36:55:b5:0e:3a:54:96:4f:c2:6a:f2:
4a:85:03:23:43:12:a2:e6:4c:5f:9d:c1:79:f6:e3:
ed:d3:d3:59:cc:65:21:ca:d1:76:67:7b:b2:2a:cf:
7f:4e:7d:26:ed:0a:f9:2f:41:d5:d9:dd:67:8b:8a:
0b:0f:7d:25:0e:65:e6:62:da:f8:1d:b8:0d:e7:9b:
14:45:a0:c5:db:8d:9b:2d:fe:cb:2f:db:f7:4a:63:
a7:3a:be:19:a5:80:b2:78:02:49:73:05:53:fa:0d:
c3:16:bf:1f:c1:aa:c8:db:81:96:98:62:fa:ca:2c:
eb:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:4E:F3:E5:8A:3E:55:E6:D2:B2:68:08:16:99:D8:F9:7E:37:42:00
X509v3 Authority Key Identifier:
keyid:99:06:0E:2D:EA:FF:EA:7D:62:2D:D9:15:80:FF:90:15:F2:55:75:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mQYOLer_6n1iLdkVgP-QFfJVdYs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/98e650-337b-483d-9f4c-a83383059c18/1/YE7z5Yo-VebSsmgIFpnY-X43QgA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/98e650-337b-483d-9f4c-a83383059c18/1/mQYOLer_6n1iLdkVgP-QFfJVdYs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.159.246.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:e1:fa:63:3a:19:77:a9:a3:f9:44:e8:b7:35:3a:e3:c3:ad:
41:ff:29:79:25:d5:8d:3c:b4:88:74:77:5e:b2:81:28:fc:a0:
f5:9d:31:8d:dd:bc:dd:e7:c4:55:88:7d:2b:36:47:9a:ff:07:
64:6e:d3:b4:eb:f4:68:96:54:a6:69:d5:42:d6:e9:94:67:75:
45:34:b4:c0:8b:53:56:10:a0:1b:ae:80:36:43:0c:9d:8e:da:
77:06:f0:a7:da:4e:f4:d8:56:92:b6:c6:23:b6:7b:29:75:30:
3d:84:19:1d:ad:2d:40:cf:3a:e0:4d:74:8d:ec:17:c4:e1:53:
d1:4c:3f:26:ca:19:1c:80:b5:9e:2e:f8:df:61:c6:0e:76:21:
e3:ee:6f:88:bd:bf:0a:0a:4a:e5:c4:28:f5:3f:d8:df:1a:90:
0b:a9:5b:5f:0f:be:40:f2:8b:31:99:1c:e3:d5:18:6e:cc:7a:
34:55:5a:32:58:9a:be:ec:2e:7d:32:25:5b:18:cf:24:25:c0:
2c:8d:70:93:f1:d7:68:75:37:b7:a5:75:d5:c6:3c:39:ca:ae:
14:63:e7:21:40:ac:bb:eb:13:80:1d:88:ee:35:6a:9a:59:90:
a6:78:a7:7f:4c:21:aa:f7:f9:79:d5:c8:89:7d:a1:2c:29:2d:
d0:0a:b3:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:16 2025 by rpki-client on console.sobornost.net