Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/yrw-APdDdrKZbC_GG5pC5x9IuaE.roa
File: yrw-APdDdrKZbC_GG5pC5x9IuaE.roa (raw, json)
Hash identifier: 1L4TnTdUXnzWd1fgMXk6voGBQgtXreTq+fSZW4h+FH8=
Subject key identifier: CA:BC:3E:00:F7:43:76:B2:99:6C:2F:C6:1B:9A:42:E7:1F:48:B9:A1
Certificate issuer: /CN=e9713ef25277e13dd73f44196fda5cec0fd9ce16
Certificate serial: 019420687216A974A5E66F772D3316ED6472
Authority key identifier: E9:71:3E:F2:52:77:E1:3D:D7:3F:44:19:6F:DA:5C:EC:0F:D9:CE:16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/yrw-APdDdrKZbC_GG5pC5x9IuaE.roa
Signing time: Wed 01 Jan 2025 05:48:23 +0000
ROA not before: Wed 01 Jan 2025 05:48:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16509
IP address blocks: 89.23.82.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:68:72:16:a9:74:a5:e6:6f:77:2d:33:16:ed:64:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e9713ef25277e13dd73f44196fda5cec0fd9ce16
Validity
Not Before: Jan 1 05:48:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cabc3e00f74376b2996c2fc61b9a42e71f48b9a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:28:a0:67:02:9b:93:94:c5:17:67:5b:8b:05:
6b:36:ae:6a:4a:5e:e6:5e:19:01:4d:c9:66:1e:f9:
76:68:cf:03:4c:da:1d:73:41:6d:12:ec:cc:48:9c:
f4:39:b8:29:54:43:d4:f9:b3:17:ea:d4:ba:4d:5c:
c5:29:a9:55:85:02:30:3f:24:70:8d:87:6e:7e:03:
4f:1c:cf:01:0c:44:d5:33:11:45:e6:20:ed:3c:7d:
ac:16:cd:c1:f9:3a:35:f4:a4:28:4a:16:c1:55:7d:
79:cf:02:e4:d7:1b:7e:07:45:29:62:80:5a:fe:8e:
40:ee:b5:af:36:d2:f6:5f:8a:43:04:0d:7e:bd:aa:
68:6d:7a:10:b9:fb:10:bc:b4:5f:c6:f6:d0:4b:3c:
7c:c6:8d:3f:0f:c4:32:0d:b3:47:de:21:b6:d5:0b:
b2:fe:de:c0:82:bb:2b:6c:f9:c5:9f:5c:ed:29:1f:
21:4f:cb:3f:20:16:b1:a2:93:a4:00:9e:50:6a:c1:
01:05:b0:73:1d:41:19:58:ad:59:5a:19:f1:91:4d:
ef:ac:79:7a:37:cf:b8:b4:7c:ed:62:52:39:dc:ec:
51:ce:2b:2d:60:8b:86:b7:fc:38:e9:33:19:ac:20:
85:d4:40:44:ff:e8:e9:c6:70:b8:d6:be:1a:88:ee:
67:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:BC:3E:00:F7:43:76:B2:99:6C:2F:C6:1B:9A:42:E7:1F:48:B9:A1
X509v3 Authority Key Identifier:
keyid:E9:71:3E:F2:52:77:E1:3D:D7:3F:44:19:6F:DA:5C:EC:0F:D9:CE:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/yrw-APdDdrKZbC_GG5pC5x9IuaE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.23.82.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:52:8f:c2:f7:0a:dc:4d:2b:c0:8c:fe:62:a8:d6:98:6a:7c:
3d:50:d8:8d:07:27:3e:38:02:18:fd:52:60:d8:c6:9b:af:03:
5e:e8:a8:f7:4d:66:bf:4b:d0:c9:4b:94:45:f9:5e:a2:a2:da:
4b:df:c2:fe:5f:47:9b:4f:a1:82:8e:34:29:65:86:d9:96:3e:
e3:77:16:42:72:db:b8:7f:67:50:c1:21:44:94:5c:3e:d0:ec:
c4:cc:d2:a1:15:11:1e:96:5a:b9:b4:56:63:44:d2:e6:a0:b9:
38:1f:95:6f:87:a4:21:23:d8:8f:7b:fc:0d:d9:e4:06:75:37:
02:6e:0c:4d:f6:da:a9:00:13:c3:79:d1:fc:78:3e:fa:e9:ff:
60:33:3c:96:92:3e:7f:15:0a:80:92:99:6f:77:7b:20:e8:4a:
57:cf:f3:21:5e:5b:f3:4f:8f:ea:f2:6f:b5:b0:d2:a6:f8:93:
41:44:85:e8:6c:1a:06:59:fc:c5:a6:6e:3d:5b:af:b5:ef:f2:
29:1f:78:19:9f:90:38:4d:45:3b:2a:25:8c:ff:fe:22:89:53:
23:f8:53:94:a5:fe:bb:11:ed:eb:86:dc:6e:5e:9a:ae:73:c4:
80:7e:da:2e:f5:92:59:b7:fd:43:09:57:eb:7c:8d:d7:b4:a8:
73:9b:59:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 21:06:52 2025 by rpki-client