Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/y_yX2r4gvHvuIbUi0DowIYSNfBg.roa
File: y_yX2r4gvHvuIbUi0DowIYSNfBg.roa (raw, json)
Hash identifier: x14xDtrLZ17AWPiddZKwyfSzNk6zOk9dOft74ZuaztU=
Subject key identifier: CB:FC:97:DA:BE:20:BC:7B:EE:21:B5:22:D0:3A:30:21:84:8D:7C:18
Certificate issuer: /CN=fe58952d393935f0d3bce814fd9178d04693aeb9
Certificate serial: 019420D61B27CE8B4C447A88B57335275C72
Authority key identifier: FE:58:95:2D:39:39:35:F0:D3:BC:E8:14:FD:91:78:D0:46:93:AE:B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_liVLTk5NfDTvOgU_ZF40EaTrrk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/y_yX2r4gvHvuIbUi0DowIYSNfBg.roa
Signing time: Wed 01 Jan 2025 07:48:10 +0000
ROA not before: Wed 01 Jan 2025 07:48:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 137409
IP address blocks: 86.106.97.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d6:1b:27:ce:8b:4c:44:7a:88:b5:73:35:27:5c:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe58952d393935f0d3bce814fd9178d04693aeb9
Validity
Not Before: Jan 1 07:48:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cbfc97dabe20bc7bee21b522d03a3021848d7c18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:96:eb:92:ae:0b:26:cc:68:f1:76:e1:9c:5b:
b1:46:38:fb:65:7c:ce:46:6d:f0:fe:4f:d5:9f:86:
c8:14:ac:ea:07:44:a3:20:61:11:d7:d7:d7:e9:e9:
4a:54:bd:4c:2f:40:d5:bb:c1:7b:b5:2d:25:d0:c7:
29:e5:44:1b:f5:41:d2:9f:06:c8:e6:27:9b:ea:fd:
e4:c8:44:bd:c6:4b:c4:51:e4:c0:f1:bf:5c:eb:45:
09:8e:c5:5e:bb:62:81:3f:b3:da:88:b2:8d:a6:cd:
12:15:b4:98:bf:19:0d:bc:e9:0f:c5:36:6d:8c:6e:
fb:61:95:18:30:0d:af:3b:7c:74:bb:59:5a:96:68:
72:7a:a1:58:87:65:6b:ca:71:00:d3:82:bb:5b:e2:
3e:82:3d:d3:44:d6:94:9c:33:7f:a1:27:b9:f2:71:
20:32:bb:d0:96:22:5c:a6:7b:a6:d9:d8:3e:44:54:
15:88:3e:92:55:9e:49:90:b2:a4:69:77:79:8f:8b:
b2:02:ba:b6:25:c5:81:15:3b:38:f2:73:e0:93:76:
ca:5a:be:9a:48:64:86:9d:dd:0c:46:4b:eb:83:7d:
17:b0:0f:a1:bf:7b:e2:a4:34:72:02:e9:c6:ca:13:
e4:32:3f:ad:c2:c5:fe:e4:71:8e:30:fc:5c:29:92:
3d:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:FC:97:DA:BE:20:BC:7B:EE:21:B5:22:D0:3A:30:21:84:8D:7C:18
X509v3 Authority Key Identifier:
keyid:FE:58:95:2D:39:39:35:F0:D3:BC:E8:14:FD:91:78:D0:46:93:AE:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_liVLTk5NfDTvOgU_ZF40EaTrrk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/y_yX2r4gvHvuIbUi0DowIYSNfBg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/_liVLTk5NfDTvOgU_ZF40EaTrrk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.106.97.0/24
Signature Algorithm: sha256WithRSAEncryption
67:32:c5:11:14:d3:02:a2:fa:43:60:8a:2c:3a:a6:bb:f7:31:
21:ea:8a:b4:52:a1:03:70:a7:1b:55:42:f2:ea:37:25:db:fb:
85:2e:68:e1:c6:82:e2:12:85:3a:b3:b0:59:55:36:58:d4:a2:
9b:eb:a4:45:cf:8b:54:a1:f0:e5:83:8d:9d:58:83:5c:8d:1a:
35:39:6d:f4:13:39:e1:61:46:d7:2c:75:ae:30:80:e1:56:5b:
bf:aa:43:52:b4:67:99:82:c7:c6:e7:e6:d6:ff:75:3e:74:45:
c1:30:67:47:75:d5:8c:b8:6e:da:5f:39:00:5d:2d:cc:30:8c:
d8:a2:78:c2:65:1e:ee:73:0f:58:d7:ae:4b:12:2b:d4:b5:a5:
81:6c:ae:5f:e5:8f:0c:01:c2:e4:cc:1d:84:80:86:c4:69:1c:
15:b4:9a:b5:0e:83:fa:c9:43:bd:42:4b:b8:6e:c5:bf:44:09:
19:a6:bd:e1:53:a6:f3:f2:b3:f0:18:19:ad:ab:76:18:70:06:
36:98:0e:2b:7d:e5:d0:3f:15:8d:a8:50:e6:4d:cb:bc:03:07:
b3:08:03:66:64:25:a6:c2:7a:3a:e3:42:54:26:fc:3d:fd:ea:
f3:57:ba:2d:74:67:4d:a6:c9:58:bc:22:92:18:a3:32:6b:ee:
70:b4:6f:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 17:03:17 2025 by rpki-client