Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/db9bf1-e019-45a4-8663-a6ca454db2d7/1/YDfEJ1iUjKpfcgb3p-AJ6kyYq9Y.roa
File: YDfEJ1iUjKpfcgb3p-AJ6kyYq9Y.roa (raw, json)
Hash identifier: JVT9CJbbA+vdIrvWETQHH3MkG5jcGr/5MxzuGejEyf4=
Subject key identifier: 60:37:C4:27:58:94:8C:AA:5F:72:06:F7:A7:E0:09:EA:4C:98:AB:D6
Certificate issuer: /CN=6363bb65895f3a54a4b324a10c79ac98efe2a1ca
Certificate serial: 019434F7BECC83BC1C88C9A775DFB977DB23
Authority key identifier: 63:63:BB:65:89:5F:3A:54:A4:B3:24:A1:0C:79:AC:98:EF:E2:A1:CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y2O7ZYlfOlSksyShDHmsmO_ioco.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/db9bf1-e019-45a4-8663-a6ca454db2d7/1/YDfEJ1iUjKpfcgb3p-AJ6kyYq9Y.roa
Signing time: Sun 05 Jan 2025 05:37:18 +0000
ROA not before: Sun 05 Jan 2025 05:37:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215304
IP address blocks: 91.221.116.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:34:f7:be:cc:83:bc:1c:88:c9:a7:75:df:b9:77:db:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6363bb65895f3a54a4b324a10c79ac98efe2a1ca
Validity
Not Before: Jan 5 05:37:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6037c42758948caa5f7206f7a7e009ea4c98abd6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:fb:58:ce:f9:4d:99:99:01:d3:1d:aa:7f:ca:
86:6e:b4:51:d5:7f:f5:8e:26:a6:38:d8:e9:ee:68:
1f:37:c3:aa:c8:6d:80:7a:ce:1d:c0:aa:87:da:45:
b9:16:bc:92:cc:72:f7:ef:19:bc:9c:08:7b:01:fd:
56:16:cf:b2:b6:bc:12:24:d0:f2:2d:18:60:4c:61:
a8:11:0b:8f:80:91:5c:9a:ac:65:00:c6:6d:43:0e:
85:91:70:c4:7e:d1:e2:24:95:7c:98:2d:6f:a4:13:
28:a3:9b:48:8d:3d:03:e6:b0:1c:bd:c7:42:8a:e8:
f5:9b:8f:6c:10:2b:44:6f:26:61:d6:1c:6a:90:27:
62:7e:89:98:3f:6a:87:39:a0:0d:68:81:48:07:55:
85:c1:b1:2f:91:57:73:ae:62:40:07:6b:24:94:e2:
62:4b:b7:e5:42:74:df:5c:12:1f:65:d9:50:ae:f7:
f6:19:a9:70:6f:3b:69:4b:b0:c9:0c:b4:a4:3f:d7:
5b:29:16:bb:9c:d6:48:11:f4:46:77:6d:83:ab:90:
e3:9c:38:cf:c1:45:47:b9:ed:6e:c1:46:91:53:5c:
ce:63:f4:55:18:4a:83:13:1d:54:05:71:bb:9f:d1:
63:f3:19:3e:a7:7d:59:c2:b4:19:b8:14:71:3e:a2:
01:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:37:C4:27:58:94:8C:AA:5F:72:06:F7:A7:E0:09:EA:4C:98:AB:D6
X509v3 Authority Key Identifier:
keyid:63:63:BB:65:89:5F:3A:54:A4:B3:24:A1:0C:79:AC:98:EF:E2:A1:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y2O7ZYlfOlSksyShDHmsmO_ioco.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/db9bf1-e019-45a4-8663-a6ca454db2d7/1/YDfEJ1iUjKpfcgb3p-AJ6kyYq9Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/db9bf1-e019-45a4-8663-a6ca454db2d7/1/Y2O7ZYlfOlSksyShDHmsmO_ioco.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.221.116.0/24
Signature Algorithm: sha256WithRSAEncryption
36:1e:20:35:91:46:bb:57:38:6d:34:a9:7d:2e:92:ad:1e:0f:
be:d5:69:8f:2c:09:9a:17:e0:26:fa:5e:f9:18:c4:c6:d2:4d:
22:fb:10:15:3a:1f:07:10:c5:2a:36:14:28:a8:95:60:0b:f0:
e7:14:2d:bd:1e:2d:09:6c:2d:e8:f5:c6:c8:c0:1f:cf:0b:d0:
a9:31:78:9f:81:95:90:81:8c:0f:f8:ff:73:a3:32:f2:5f:89:
ba:31:38:ef:e5:a9:8f:4e:92:2e:ea:7c:4f:35:e7:e7:16:58:
ca:57:c0:e6:df:02:ca:1c:56:e6:48:43:31:f5:4e:d2:4b:c6:
70:6a:cc:f6:47:12:5b:51:f2:b7:99:ff:06:72:4e:c9:c8:3a:
e2:3e:89:83:fe:c3:a5:b6:33:f4:92:c4:4b:fd:af:8c:01:34:
ea:29:68:9c:71:40:a2:8f:8c:92:6e:a3:f2:8c:5d:50:4a:1c:
19:b6:7c:31:a9:8f:b0:ad:29:f4:bc:38:2d:71:55:56:9a:cd:
dd:95:1c:3f:24:9a:6b:7c:4e:09:81:22:6e:f6:a4:59:bc:21:
42:c9:5e:3b:91:fc:a4:90:56:bb:b3:d9:50:ab:6c:bb:52:9a:
07:27:85:1b:43:a1:85:65:a8:d5:68:ce:46:03:f6:5d:0b:e5:
71:57:1f:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 02:23:14 2025 by rpki-client