Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/d4497a-11f2-49ac-aef9-43e67d5d0a85/1/ycPqiZgxXZYRWpHXq8sdS66pJ9w.roa
File: ycPqiZgxXZYRWpHXq8sdS66pJ9w.roa (raw, json)
Hash identifier: vp55FHfuHOdAmakK1OzqAocvmJ8Vg24tSRWH6j9DsJc=
Subject key identifier: C9:C3:EA:89:98:31:5D:96:11:5A:91:D7:AB:CB:1D:4B:AE:A9:27:DC
Certificate issuer: /CN=1a93849bff337df8b8b0bd1ae252ee6119d8a61f
Certificate serial: 01942826F10A46A1487AF5214EB702176B54
Authority key identifier: 1A:93:84:9B:FF:33:7D:F8:B8:B0:BD:1A:E2:52:EE:61:19:D8:A6:1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GpOEm_8zffi4sL0a4lLuYRnYph8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/d4497a-11f2-49ac-aef9-43e67d5d0a85/1/ycPqiZgxXZYRWpHXq8sdS66pJ9w.roa
Signing time: Thu 02 Jan 2025 17:53:48 +0000
ROA not before: Thu 02 Jan 2025 17:53:48 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16509
IP address blocks: 91.200.50.0/24 maxlen: 24
91.213.115.0/24 maxlen: 24
91.241.6.0/23 maxlen: 24
195.46.38.0/24 maxlen: 24
2001:678:264::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:26:f1:0a:46:a1:48:7a:f5:21:4e:b7:02:17:6b:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a93849bff337df8b8b0bd1ae252ee6119d8a61f
Validity
Not Before: Jan 2 17:53:48 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c9c3ea8998315d96115a91d7abcb1d4baea927dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:a1:f5:02:66:e4:6b:dc:cf:7a:8f:18:71:70:
68:0d:a9:7b:ac:25:3d:c2:3f:10:96:1c:95:e6:a0:
8b:cb:9a:f7:f8:98:a3:4f:95:21:bf:c9:75:ae:6f:
d2:d4:9c:a0:cd:87:f5:02:6f:7b:ff:6a:ea:57:0f:
90:a6:5e:f0:f5:ba:77:d8:b2:d3:be:1e:56:c8:77:
60:48:e4:43:9a:c3:97:3e:d5:53:c5:82:0a:0b:0b:
a8:56:b2:28:4b:b5:12:c3:c1:34:72:eb:94:29:c6:
59:64:ec:c5:67:7b:33:17:0a:bb:8b:e6:bf:3f:d4:
f6:ea:3e:b8:ee:d2:10:cc:62:b6:a2:bb:5b:ef:1e:
fa:d9:9f:6c:4d:a3:f2:9f:52:36:74:71:42:2b:77:
fa:7c:c0:04:f5:4b:06:46:fe:a8:b9:0a:cf:47:93:
40:ea:05:20:cf:99:7f:5d:58:64:97:f1:f1:cd:90:
43:39:84:4d:c7:f3:92:54:2f:4c:02:05:38:7f:64:
6d:c7:94:d3:44:70:0d:81:d5:3b:50:39:5a:dc:5e:
a0:6b:0b:57:bc:38:b3:e1:a9:13:2a:d9:cb:a7:88:
4d:75:43:57:26:78:b6:e2:5d:f9:2a:a8:7d:bd:21:
e0:5b:3c:0d:30:c8:4b:50:5e:e7:48:df:d3:a8:83:
69:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:C3:EA:89:98:31:5D:96:11:5A:91:D7:AB:CB:1D:4B:AE:A9:27:DC
X509v3 Authority Key Identifier:
keyid:1A:93:84:9B:FF:33:7D:F8:B8:B0:BD:1A:E2:52:EE:61:19:D8:A6:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GpOEm_8zffi4sL0a4lLuYRnYph8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/d4497a-11f2-49ac-aef9-43e67d5d0a85/1/ycPqiZgxXZYRWpHXq8sdS66pJ9w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/d4497a-11f2-49ac-aef9-43e67d5d0a85/1/GpOEm_8zffi4sL0a4lLuYRnYph8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.200.50.0/24
91.213.115.0/24
91.241.6.0/23
195.46.38.0/24
IPv6:
2001:678:264::/48
Signature Algorithm: sha256WithRSAEncryption
45:c9:63:42:56:55:22:fe:ab:80:9e:92:83:34:59:33:f4:00:
3a:19:e1:6f:e8:77:f6:ed:fd:e9:f6:e1:f4:27:08:42:64:2b:
e0:3c:15:be:fb:44:51:a5:57:4f:54:72:49:db:8c:4a:fa:5c:
55:d9:12:26:87:a7:07:6a:e8:7a:31:1f:00:e4:ec:85:51:7b:
25:3c:07:9a:07:55:40:bd:6f:ff:4a:3d:43:e1:2d:41:24:f5:
82:d2:2c:fb:1d:f2:d3:84:ed:66:d6:08:df:e1:b9:72:1c:20:
79:9e:91:07:aa:c2:59:a3:95:34:4d:ad:65:22:b8:db:98:bf:
13:85:9c:e8:3f:f4:6d:fa:81:ff:40:3c:d9:e2:22:27:67:a2:
8d:19:fb:7f:a5:21:27:ba:76:78:06:eb:13:99:78:f2:46:55:
a2:f5:fc:29:26:e0:2f:16:88:0b:e3:56:87:8a:c1:2e:65:28:
f7:bc:3c:68:f7:18:94:c1:e0:a1:82:c0:6b:a6:ee:83:83:6d:
b8:75:5c:64:fa:69:13:af:b2:3b:ac:b1:3b:b4:c0:e1:2e:9d:
a4:7a:64:d6:a3:53:ff:5a:e2:13:54:74:a8:7c:25:23:22:3b:
d4:bd:45:2e:5f:11:37:a9:80:d7:75:0a:8b:15:aa:35:50:e1:
a7:14:4f:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:21:43 2025 by rpki-client