Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/e9d9cc-2668-42fc-8315-7525d4d408b5/1/YA6ReAbhWQSyR_vf6Zg5g4dooUc.roa
File: YA6ReAbhWQSyR_vf6Zg5g4dooUc.roa (raw, json)
Hash identifier: YT0NaWujuK6WDixqbB1Sy+28TuDP8p9GMfj4mjicvuw=
Subject key identifier: 60:0E:91:78:06:E1:59:04:B2:47:FB:DF:E9:98:39:83:87:68:A1:47
Certificate issuer: /CN=1ada225cb7f29416e7534695fbfb21762fee93c8
Certificate serial: 01944A94B6ACB26D0271F06A8A816A79D535
Authority key identifier: 1A:DA:22:5C:B7:F2:94:16:E7:53:46:95:FB:FB:21:76:2F:EE:93:C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GtoiXLfylBbnU0aV-_shdi_uk8g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/e9d9cc-2668-42fc-8315-7525d4d408b5/1/YA6ReAbhWQSyR_vf6Zg5g4dooUc.roa
Signing time: Thu 09 Jan 2025 10:20:47 +0000
ROA not before: Thu 09 Jan 2025 10:20:47 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 1273
IP address blocks: 212.248.192.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:4a:94:b6:ac:b2:6d:02:71:f0:6a:8a:81:6a:79:d5:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ada225cb7f29416e7534695fbfb21762fee93c8
Validity
Not Before: Jan 9 10:20:47 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=600e917806e15904b247fbdfe99839838768a147
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:bf:28:da:43:14:9e:73:7c:e2:a5:25:24:9c:
b5:a5:25:35:17:8c:68:26:56:0c:b2:a1:ed:db:21:
a3:be:43:dd:f4:67:88:d9:d9:23:ba:21:de:95:0c:
14:c0:8d:b8:1c:17:cd:8d:72:c6:ec:09:5e:c4:32:
9e:3a:a6:de:d7:c6:f8:f7:7f:71:a3:ca:36:c3:62:
8a:34:94:80:de:eb:0c:31:e4:45:e2:19:46:92:b5:
65:42:02:e1:f2:c1:a6:26:0e:29:a6:5f:ea:98:d5:
49:e3:b9:39:4b:ae:28:6f:e1:b5:5f:15:9b:d5:73:
2c:ac:6a:87:af:ae:d8:91:b6:21:c2:22:62:5d:b7:
be:07:f2:2b:23:c9:63:95:89:e7:e7:3b:70:ad:4f:
d4:26:43:29:30:18:6d:64:d6:c8:96:1e:1f:ac:6a:
09:b3:88:97:6a:00:dd:6c:17:a1:89:c3:37:09:5e:
11:ed:9f:69:a3:72:73:f6:df:60:03:94:8e:4f:26:
5d:ac:7d:d3:24:2a:76:ed:ba:34:f5:cf:d5:94:32:
74:04:34:c1:49:67:ed:5a:00:a8:3b:c0:e1:ac:45:
b3:9b:31:73:3a:6f:79:a6:49:29:81:b4:a7:d5:2c:
8b:b1:97:48:ef:5b:a3:be:e4:5b:05:1c:95:ac:a7:
0b:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:0E:91:78:06:E1:59:04:B2:47:FB:DF:E9:98:39:83:87:68:A1:47
X509v3 Authority Key Identifier:
keyid:1A:DA:22:5C:B7:F2:94:16:E7:53:46:95:FB:FB:21:76:2F:EE:93:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GtoiXLfylBbnU0aV-_shdi_uk8g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/e9d9cc-2668-42fc-8315-7525d4d408b5/1/YA6ReAbhWQSyR_vf6Zg5g4dooUc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/e9d9cc-2668-42fc-8315-7525d4d408b5/1/GtoiXLfylBbnU0aV-_shdi_uk8g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.248.192.0/18
Signature Algorithm: sha256WithRSAEncryption
b0:fc:39:6d:ee:a6:30:56:9a:b3:de:68:3e:1b:05:c1:2f:45:
f5:11:81:a2:d6:aa:fe:b8:f7:54:44:eb:e3:fd:1d:ff:0e:ae:
2b:36:8e:23:f4:f8:41:09:dd:f4:ac:78:60:77:7e:15:70:4a:
2e:f6:98:ad:08:cb:48:0d:a8:4f:05:53:4a:ef:7c:6d:a1:dc:
30:a6:b2:63:62:98:55:97:ae:2d:9e:85:90:77:ef:a8:76:b3:
51:39:ee:cc:12:73:a1:96:88:b9:dd:c3:94:64:0b:05:50:2d:
05:d1:68:57:7b:4e:9b:ee:8a:85:35:0e:11:77:67:9b:fd:f5:
f6:a6:39:5a:d5:e0:ca:01:6b:6a:f8:22:5a:15:3b:8b:55:39:
07:a2:8d:cd:14:77:31:ed:df:6a:d2:06:ee:c2:db:fc:d0:15:
87:8f:08:9e:a0:2b:e5:02:ec:7d:10:31:e7:d0:ae:d9:d5:5f:
36:fb:8a:f5:c3:de:6b:50:6e:6c:0f:23:39:46:f7:55:15:81:
dd:a9:bf:31:fb:8f:9b:31:1c:4b:88:49:03:d5:34:a6:83:d6:
fe:28:3b:89:76:ed:35:21:dd:de:7e:01:6f:43:fa:7d:a4:93:
45:8a:4e:1a:26:f3:56:b7:e9:00:9a:c7:a3:0d:fd:80:2d:21:
54:30:f6:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 00:15:39 2025 by rpki-client