Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/18181f-5554-4fa0-8c6d-8c23f6f57c8c/1/YsqohcE_Dg-XYoFeUOqMvoU0F-s.roa
File: YsqohcE_Dg-XYoFeUOqMvoU0F-s.roa (raw, json)
Hash identifier: TT64MmC86nvlYk0r9ns0vV8T9Fyqm/0JpqD9FBhVM1Q=
Subject key identifier: 62:CA:A8:85:C1:3F:0E:0F:97:62:81:5E:50:EA:8C:BE:85:34:17:EB
Certificate issuer: /CN=e74aaba5989badb60274760deef6c40cd0112026
Certificate serial: 0196DD1F2E2C6BB494FF75B55FB6E5DEC908
Authority key identifier: E7:4A:AB:A5:98:9B:AD:B6:02:74:76:0D:EE:F6:C4:0C:D0:11:20:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/50qrpZibrbYCdHYN7vbEDNARICY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/18181f-5554-4fa0-8c6d-8c23f6f57c8c/1/YsqohcE_Dg-XYoFeUOqMvoU0F-s.roa
Signing time: Sat 17 May 2025 07:22:10 +0000
ROA not before: Sat 17 May 2025 07:22:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 945
IP address blocks: 185.155.75.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:dd:1f:2e:2c:6b:b4:94:ff:75:b5:5f:b6:e5:de:c9:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e74aaba5989badb60274760deef6c40cd0112026
Validity
Not Before: May 17 07:22:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=62caa885c13f0e0f9762815e50ea8cbe853417eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:59:d9:b9:7e:1a:94:b8:de:04:24:2e:4c:02:
60:63:7b:82:dd:7a:a6:ab:88:04:60:0f:dd:ba:2d:
79:81:af:47:6d:ef:f1:d0:65:79:c3:5c:4b:1e:ea:
51:f6:79:6b:37:8b:d3:9f:c6:5b:cc:90:76:d0:27:
73:1d:54:6e:bd:00:da:b7:81:04:0d:fd:42:67:c3:
7c:a5:b7:6c:4e:12:8c:a3:65:20:86:5d:3f:17:7a:
f2:aa:2a:36:50:18:51:56:89:24:f1:0f:b3:91:be:
2c:9f:03:4c:5d:76:ae:2e:8a:ea:05:bb:6a:03:ff:
f1:04:8b:17:82:eb:c7:58:10:63:6a:85:e2:ce:62:
56:b1:3e:3a:fa:1f:8f:92:07:e2:f5:20:d7:0c:45:
75:bf:42:9a:c4:0a:10:8a:2e:6f:76:40:e2:a5:89:
55:af:5c:fc:e4:58:4d:a3:c0:59:9b:52:08:84:ea:
08:78:44:cb:57:a6:dc:e4:1b:ba:fc:4a:9d:dc:88:
ee:5d:d9:be:9f:15:80:bc:58:6e:8a:9a:32:7a:03:
cd:20:ee:e4:a6:c2:6d:42:c2:5d:32:15:53:9b:4a:
2e:58:7e:6f:ee:aa:7c:48:cd:59:90:3e:dc:6b:82:
67:17:96:fa:c2:18:56:e4:d1:fd:10:48:8e:c6:34:
48:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:CA:A8:85:C1:3F:0E:0F:97:62:81:5E:50:EA:8C:BE:85:34:17:EB
X509v3 Authority Key Identifier:
keyid:E7:4A:AB:A5:98:9B:AD:B6:02:74:76:0D:EE:F6:C4:0C:D0:11:20:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/50qrpZibrbYCdHYN7vbEDNARICY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/18181f-5554-4fa0-8c6d-8c23f6f57c8c/1/YsqohcE_Dg-XYoFeUOqMvoU0F-s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/18181f-5554-4fa0-8c6d-8c23f6f57c8c/1/50qrpZibrbYCdHYN7vbEDNARICY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.155.75.0/24
Signature Algorithm: sha256WithRSAEncryption
58:43:d9:92:38:b7:fd:a8:8b:8f:5b:fa:7d:d1:81:cd:39:38:
35:0b:af:36:27:a6:0d:d0:1d:40:ad:5c:20:c2:e7:1d:20:0c:
94:d2:44:eb:29:5d:2c:24:6d:3a:6f:a4:2b:f6:67:71:40:d8:
86:1e:21:b3:e6:4b:9c:60:78:e3:94:4e:88:db:0a:9d:79:9f:
89:94:6b:e3:a1:5c:9b:8d:c0:0f:fe:1c:b7:f0:c4:7a:37:d8:
81:9b:a5:c9:4f:90:eb:b9:0d:6d:d9:9a:2c:56:90:a7:ad:3a:
e2:80:e3:33:a9:60:ae:d8:8a:39:d1:9b:ef:47:78:c8:d0:48:
46:53:8e:0c:1d:15:df:43:54:2e:f6:d4:f3:52:6f:78:58:6c:
8a:e5:e9:01:e8:30:c5:07:60:c1:4e:27:d8:ca:8b:73:22:d5:
80:68:47:82:4d:95:92:69:34:32:65:41:bc:e9:a0:01:dd:b4:
c8:27:cb:eb:23:53:5a:30:f5:72:32:b2:4d:49:6c:69:1d:c6:
44:7c:69:3d:f1:79:d7:84:f2:f1:d3:74:c1:30:6e:6e:8a:b1:
c3:00:0d:38:6f:da:b4:f0:1d:a2:cd:90:91:44:59:ea:6a:03:
c6:47:a3:40:74:67:df:38:ff:44:09:93:0e:72:0a:ee:34:3e:
eb:a5:94:a9
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZbdHy4sa7SU/3W1X7bl3skIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU3NGFhYmE1OTg5YmFkYjYwMjc0NzYwZGVlZjZjNDBjZDAx
MTIwMjYwHhcNMjUwNTE3MDcyMjEwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2MmNhYTg4NWMxM2YwZTBmOTc2MjgxNWU1MGVhOGNiZTg1MzQxN2ViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt1nZuX4alLjeBCQuTAJgY3uC3Xqm
q4gEYA/dui15ga9Hbe/x0GV5w1xLHupR9nlrN4vTn8ZbzJB20CdzHVRuvQDat4EE
Df1CZ8N8pbdsThKMo2Ughl0/F3ryqio2UBhRVokk8Q+zkb4snwNMXXauLorqBbtq
A//xBIsXguvHWBBjaoXizmJWsT46+h+Pkgfi9SDXDEV1v0KaxAoQii5vdkDipYlV
r1z85FhNo8BZm1IIhOoIeETLV6bc5Bu6/Eqd3IjuXdm+nxWAvFhuipoyegPNIO7k
psJtQsJdMhVTm0ouWH5v7qp8SM1ZkD7ca4JnF5b6whhW5NH9EEiOxjRITwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGLKqIXBPw4Pl2KBXlDqjL6FNBfrMB8GA1UdIwQY
MBaAFOdKq6WYm622AnR2De72xAzQESAmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNTBxcnBaaWJyYllDZEhZTjd2YkVETkFSSUNZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC8xODE4MWYtNTU1NC00ZmEwLThjNmQt
OGMyM2Y2ZjU3YzhjLzEvWXNxb2hjRV9EZy1YWW9GZVVPcU12b1UwRi1zLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NC8xODE4MWYtNTU1NC00ZmEwLThjNmQtOGMyM2Y2ZjU3Yzhj
LzEvNTBxcnBaaWJyYllDZEhZTjd2YkVETkFSSUNZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuZtLMA0G
CSqGSIb3DQEBCwUAA4IBAQBYQ9mSOLf9qIuPW/p90YHNOTg1C682J6YN0B1ArVwg
wucdIAyU0kTrKV0sJG06b6Qr9mdxQNiGHiGz5kucYHjjlE6I2wqdeZ+JlGvjoVyb
jcAP/hy38MR6N9iBm6XJT5DruQ1t2ZosVpCnrTrigOMzqWCu2Io50ZvvR3jI0EhG
U44MHRXfQ1Qu9tTzUm94WGyK5ekB6DDFB2DBTifYyotzItWAaEeCTZWSaTQyZUG8
6aAB3bTIJ8vrI1NaMPVyMrJNSWxpHcZEfGk98XnXhPLx03TBMG5uirHDAA04b9q0
8B2izZCRRFnqagPGR6NAdGffOP9ECZMOcgruND7rpZSp
-----END CERTIFICATE-----
Generated at Wed Jun 18 12:49:47 2025 by rpki-client