Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/2d346b-8825-4681-94e3-98441607b228/1/yYEpZx4q82Ymw9t0wiOXpB_AlDQ.roa
File: yYEpZx4q82Ymw9t0wiOXpB_AlDQ.roa (raw, json)
Hash identifier: pgogIbAdU/13yH4euTSW5RZYVGro+x32PTlceGEMzUg=
Subject key identifier: C9:81:29:67:1E:2A:F3:66:26:C3:DB:74:C2:23:97:A4:1F:C0:94:34
Certificate issuer: /CN=8c05b364fcf319ccf53c5f2e8c634290ac0eb129
Certificate serial: 0195C810F6AD2B8E9B4B4E23BA7CB863E54F
Authority key identifier: 8C:05:B3:64:FC:F3:19:CC:F5:3C:5F:2E:8C:63:42:90:AC:0E:B1:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jAWzZPzzGcz1PF8ujGNCkKwOsSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/2d346b-8825-4681-94e3-98441607b228/1/yYEpZx4q82Ymw9t0wiOXpB_AlDQ.roa
Signing time: Mon 24 Mar 2025 12:11:49 +0000
ROA not before: Mon 24 Mar 2025 12:11:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 3209
IP address blocks: 194.139.4.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:c8:10:f6:ad:2b:8e:9b:4b:4e:23:ba:7c:b8:63:e5:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c05b364fcf319ccf53c5f2e8c634290ac0eb129
Validity
Not Before: Mar 24 12:11:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c98129671e2af36626c3db74c22397a41fc09434
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:e9:31:d5:5b:37:ee:8c:2f:ed:24:7c:aa:40:
b0:a0:9a:87:1c:55:f9:9e:a9:51:a3:8d:bc:23:dd:
02:a0:c7:d6:c6:65:85:e5:11:b4:0e:b0:fb:97:f0:
5a:3e:f5:a7:fb:77:ac:29:a4:88:d6:10:e1:60:7f:
88:01:41:69:e2:ab:62:ae:af:f9:99:b1:b4:5f:fc:
a2:05:d5:a0:1c:86:88:f0:12:21:86:17:de:4a:4b:
d5:b3:91:88:85:06:05:84:9e:4d:8d:b6:2d:6c:2d:
db:8d:ba:41:28:1f:b4:2f:d6:aa:ce:02:34:39:d5:
c9:50:9c:d7:e2:af:61:a9:3f:aa:68:05:77:dc:bd:
be:e8:2d:4a:6d:bb:26:85:97:aa:35:ab:ce:42:fb:
bf:7d:88:33:07:8b:75:70:bb:55:1e:c8:1d:05:ef:
2b:68:94:fd:1f:eb:3e:28:ca:5e:aa:98:f0:fa:a2:
24:4b:ba:85:46:78:e3:b2:8f:f0:b4:bc:2d:7c:4f:
e1:48:c8:a5:d7:cf:d4:51:f2:6e:75:b2:a6:a8:e8:
ed:df:b8:af:32:aa:d0:7b:f8:12:37:d0:55:2c:ff:
79:a7:66:53:f0:77:33:84:91:70:bc:0b:08:8d:97:
9c:59:9f:2d:e8:1d:6d:4e:4a:72:bc:cd:18:06:85:
25:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:81:29:67:1E:2A:F3:66:26:C3:DB:74:C2:23:97:A4:1F:C0:94:34
X509v3 Authority Key Identifier:
keyid:8C:05:B3:64:FC:F3:19:CC:F5:3C:5F:2E:8C:63:42:90:AC:0E:B1:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jAWzZPzzGcz1PF8ujGNCkKwOsSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/2d346b-8825-4681-94e3-98441607b228/1/yYEpZx4q82Ymw9t0wiOXpB_AlDQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/2d346b-8825-4681-94e3-98441607b228/1/jAWzZPzzGcz1PF8ujGNCkKwOsSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.139.4.0/24
Signature Algorithm: sha256WithRSAEncryption
a6:5c:e9:20:e6:86:ab:5c:58:6c:43:1a:83:37:15:da:c4:dd:
1f:51:a5:c0:c7:49:75:be:47:47:a3:11:cb:09:e3:9e:bc:64:
6b:a3:99:28:6e:ca:4d:c0:fb:5f:a7:24:f4:d4:62:c6:53:a1:
0a:a8:1b:4f:d3:58:48:54:86:96:c1:8c:b1:3f:f5:5b:f4:94:
80:84:b3:a5:90:36:4e:20:4f:5d:c6:d8:a8:21:e9:7c:c4:4c:
c5:e5:38:f7:3a:57:9c:54:76:00:85:49:e8:c7:fb:5e:08:a8:
87:f0:c8:d1:92:d9:dc:fc:5f:c2:d3:e6:f9:14:a8:4b:cb:0e:
56:20:72:ff:35:dc:d6:29:17:ee:bf:ea:65:bd:de:3c:68:e0:
e6:e7:51:cf:d6:ca:a1:8a:a3:e4:2b:68:4f:db:63:c9:77:89:
f0:f8:e8:c2:a1:c8:46:f7:62:df:3d:6c:84:97:67:32:5b:49:
4a:a0:bf:bd:11:c4:90:46:a1:3f:d9:96:c7:62:82:86:0a:59:
d9:0c:c5:d0:a8:5c:af:de:be:6f:01:22:84:7d:05:48:d6:f8:
c6:6d:7e:e1:c8:8f:d2:67:e1:c7:5a:eb:30:af:85:6f:cb:a7:
a0:c7:21:07:cc:73:28:4a:e9:35:5d:1b:6d:a0:e3:d5:34:34:
8c:5b:61:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 00:30:55 2025 by rpki-client