Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/702b28-e158-40c0-8330-24fddc6d147b/1/YEeN4_hUhKfLX2iLvk6IjGBNox4.roa
File: YEeN4_hUhKfLX2iLvk6IjGBNox4.roa (raw, json)
Hash identifier: FYXhVYSuTQdo2tcw8lqUazd1KBhjD36CBy5TJkxcnow=
Subject key identifier: 60:47:8D:E3:F8:54:84:A7:CB:5F:68:8B:BE:4E:88:8C:60:4D:A3:1E
Certificate issuer: /CN=1c7b06bf41300dc4d30f3d0e180c9b95d2bcddff
Certificate serial: 018CC4933DEF9E6AB5694BE752837D1FF67B
Authority key identifier: 1C:7B:06:BF:41:30:0D:C4:D3:0F:3D:0E:18:0C:9B:95:D2:BC:DD:FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HHsGv0EwDcTTDz0OGAybldK83f8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/702b28-e158-40c0-8330-24fddc6d147b/1/YEeN4_hUhKfLX2iLvk6IjGBNox4.roa
Signing time: Mon 01 Jan 2024 10:30:33 +0000
ROA not before: Mon 01 Jan 2024 10:30:33 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 135158
IP address blocks: 194.49.55.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:93:3d:ef:9e:6a:b5:69:4b:e7:52:83:7d:1f:f6:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c7b06bf41300dc4d30f3d0e180c9b95d2bcddff
Validity
Not Before: Jan 1 10:30:33 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=60478de3f85484a7cb5f688bbe4e888c604da31e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:7f:a2:3b:c7:88:53:3a:90:6e:b2:1f:98:40:
11:28:e0:05:9c:55:a1:6e:e5:18:97:62:dd:6c:33:
3b:81:53:a3:30:42:5e:c0:a9:a2:d6:a7:6b:bf:48:
14:1f:99:95:b0:56:64:e2:a7:45:bb:28:ea:dc:1c:
42:8e:6c:7b:fb:5c:94:67:86:01:38:a1:f5:a1:9c:
96:4b:e6:5f:27:0f:c2:63:e3:65:c0:89:c8:56:c2:
8b:a8:5b:34:b7:c2:18:fa:f8:5e:5c:78:39:f3:65:
b9:d3:dc:7c:07:57:55:a7:3f:28:a6:92:aa:ac:da:
69:66:92:3b:b5:a6:4f:87:06:87:cf:b3:13:d6:8e:
61:8a:2a:ee:cd:91:1e:3a:c3:97:53:a0:f5:f4:dc:
df:13:d2:52:08:5e:4e:38:b3:e1:9b:2c:1d:43:e6:
bd:40:62:5f:e4:f8:38:f4:da:18:22:c3:02:0f:34:
2a:2f:b7:82:1f:f6:62:8d:73:43:64:de:56:4d:46:
d3:e9:5f:d3:d4:3e:2d:18:bf:6b:f7:d7:cc:ca:c7:
3e:81:cd:28:28:81:6e:64:a4:89:89:40:27:7c:83:
42:c4:1a:c5:b0:f1:31:8d:da:46:e6:65:ec:4b:36:
50:9a:db:f6:9b:b7:27:ea:56:94:eb:d8:6e:53:45:
c8:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:47:8D:E3:F8:54:84:A7:CB:5F:68:8B:BE:4E:88:8C:60:4D:A3:1E
X509v3 Authority Key Identifier:
keyid:1C:7B:06:BF:41:30:0D:C4:D3:0F:3D:0E:18:0C:9B:95:D2:BC:DD:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HHsGv0EwDcTTDz0OGAybldK83f8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/702b28-e158-40c0-8330-24fddc6d147b/1/YEeN4_hUhKfLX2iLvk6IjGBNox4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/702b28-e158-40c0-8330-24fddc6d147b/1/HHsGv0EwDcTTDz0OGAybldK83f8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.49.55.0/24
Signature Algorithm: sha256WithRSAEncryption
9f:f4:e5:1e:26:1c:c4:92:4c:6b:b5:57:a7:84:dd:0d:27:93:
71:ae:ee:8e:45:5d:7d:da:83:df:ef:33:ff:55:8e:fd:91:0e:
5c:1b:f3:95:0e:b3:c9:9e:f1:4b:ef:f3:96:1b:aa:69:b4:c7:
0c:e6:62:35:b7:de:8e:a0:dc:46:20:bb:aa:24:05:4b:f5:f8:
85:78:10:06:20:bc:56:71:4e:e4:a8:4d:7b:8b:11:d9:52:87:
bd:a9:2e:01:ff:f2:fb:ed:ed:a2:1f:e0:10:98:b2:58:17:c2:
07:ff:c1:a9:ed:0e:d2:f2:e0:4f:2b:bb:e1:09:fb:33:53:d0:
b2:43:0c:1f:5e:9f:fb:47:8f:64:3e:f6:84:e6:e1:67:1e:11:
51:da:81:33:e6:a2:7d:cb:9d:64:ec:02:ca:18:25:70:b2:21:
7e:f9:67:2f:49:95:30:36:5e:f4:68:be:d8:6c:c8:83:8e:b3:
72:b4:de:a8:02:33:ac:b4:08:60:4f:5f:77:de:75:56:b3:b8:
24:76:8d:74:84:d7:5a:af:a6:cd:ed:1e:83:90:66:38:fb:8b:
19:44:b6:82:0b:c8:f6:a8:a3:65:e8:f5:e1:12:cf:e8:2c:87:
21:6c:73:d2:c9:e3:22:8b:7f:29:ff:3b:84:d8:09:6b:ab:48:
ed:b3:78:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 07:51:39 2025 by rpki-client