Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/975e4f-6c26-44bb-9ada-2fc6d17f8b58/1/YoriHP_16arPHdOvDoMYO04hQkM.roa
File: YoriHP_16arPHdOvDoMYO04hQkM.roa (raw, json)
Hash identifier: /lTd6A0sIeKscoeYGd/TO3yXs/PZBXapXa0ik8V7+LM=
Subject key identifier: 62:8A:E2:1C:FF:F5:E9:AA:CF:1D:D3:AF:0E:83:18:3B:4E:21:42:43
Certificate issuer: /CN=cd394757e1416202a4022956dbf48d707458520c
Certificate serial: 0194221FBF3A38BBDEC6C71B24CC9E7854C6
Authority key identifier: CD:39:47:57:E1:41:62:02:A4:02:29:56:DB:F4:8D:70:74:58:52:0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zTlHV-FBYgKkAilW2_SNcHRYUgw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/975e4f-6c26-44bb-9ada-2fc6d17f8b58/1/YoriHP_16arPHdOvDoMYO04hQkM.roa
Signing time: Wed 01 Jan 2025 13:48:13 +0000
ROA not before: Wed 01 Jan 2025 13:48:13 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16509
IP address blocks: 185.39.10.0/24 maxlen: 24
2a12:1b80::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:bf:3a:38:bb:de:c6:c7:1b:24:cc:9e:78:54:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd394757e1416202a4022956dbf48d707458520c
Validity
Not Before: Jan 1 13:48:13 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=628ae21cfff5e9aacf1dd3af0e83183b4e214243
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:47:a7:29:3e:4b:f5:e1:44:81:79:e8:cc:0e:
d9:7c:27:86:59:08:b4:58:80:70:1b:aa:41:49:88:
dd:d3:19:31:88:00:ce:70:6c:dc:54:65:11:f3:0a:
9e:97:9f:c5:e8:c3:2f:2e:3b:7b:ba:18:cd:e1:ab:
b3:b5:fa:25:cb:db:3b:94:7a:56:41:e6:de:88:2d:
97:9b:c8:84:12:99:5d:59:d8:86:0e:ad:a8:98:a9:
7c:e2:73:57:01:de:4c:2e:de:d8:c7:ca:c3:c5:0e:
67:20:eb:c1:d5:34:96:ff:56:66:43:cd:29:e7:80:
d5:68:a6:1c:2e:54:48:cc:78:e3:1f:05:7a:34:e3:
99:97:6c:b0:a4:b9:19:dd:25:de:85:e9:b6:a8:af:
f3:9a:5b:fd:a0:2b:b4:47:86:3d:c7:49:6c:a8:89:
93:a2:4f:4e:1d:c0:51:4a:57:bc:83:9e:02:ff:8c:
19:1d:6f:63:d3:f5:55:ab:32:6c:af:ad:2c:97:71:
4f:ab:78:03:54:59:d4:7b:47:4b:48:23:2a:9b:d4:
9a:45:81:19:fd:73:ac:96:3c:d4:29:6c:77:d3:56:
7e:ae:68:bd:9c:b6:66:bc:23:57:10:ba:85:68:c9:
be:e2:5b:ff:cc:91:51:dd:e8:f7:e4:09:b9:28:10:
e2:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:8A:E2:1C:FF:F5:E9:AA:CF:1D:D3:AF:0E:83:18:3B:4E:21:42:43
X509v3 Authority Key Identifier:
keyid:CD:39:47:57:E1:41:62:02:A4:02:29:56:DB:F4:8D:70:74:58:52:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zTlHV-FBYgKkAilW2_SNcHRYUgw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/975e4f-6c26-44bb-9ada-2fc6d17f8b58/1/YoriHP_16arPHdOvDoMYO04hQkM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/975e4f-6c26-44bb-9ada-2fc6d17f8b58/1/zTlHV-FBYgKkAilW2_SNcHRYUgw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.39.10.0/24
IPv6:
2a12:1b80::/32
Signature Algorithm: sha256WithRSAEncryption
8f:08:f8:7d:7d:a2:27:a1:4f:96:b9:21:62:5f:a3:ee:db:a4:
e2:eb:11:e0:4b:fa:19:99:8e:26:93:92:3c:d0:b9:2b:2f:7d:
5d:54:ad:2e:c3:68:dc:1a:b7:53:d4:48:33:c7:65:34:94:34:
05:8a:ee:e4:8b:3b:c6:69:8a:52:6a:97:6a:81:61:d0:5f:08:
e7:1a:24:4b:53:29:89:b9:4c:b6:8d:e4:ec:17:a3:df:42:2d:
9d:09:28:1d:ca:60:45:45:6d:0e:b2:a5:6d:3c:76:e5:7d:58:
75:53:cc:be:b4:49:12:e6:2c:0b:ee:c0:92:a5:3b:20:79:8f:
85:e5:6f:3f:02:e9:26:f0:dc:04:d9:82:48:50:68:23:a1:b2:
8a:4c:cc:d9:47:4d:ec:78:77:2b:3c:9a:28:d8:65:dc:da:a0:
ab:90:9f:36:a0:e0:a9:49:97:07:4c:04:f6:a6:b1:58:fb:2f:
45:5b:b0:33:60:75:85:2e:fc:f7:84:2b:47:de:92:22:44:97:
6f:91:32:f1:ed:56:12:f1:df:5e:5e:81:69:3b:ad:4f:9d:9a:
b3:4d:0c:53:41:91:a5:52:65:e7:d5:a6:de:10:32:10:09:ed:
f7:f7:b6:a2:03:6c:e5:a9:6d:5e:44:58:33:5a:f4:fc:84:93:
82:b5:0d:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:20:41 2025 by rpki-client