Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/yh42Ac90RZWWPXc_66CM7NZ_M5k.roa
File: yh42Ac90RZWWPXc_66CM7NZ_M5k.roa (raw, json)
Hash identifier: tzV8E5OYlSixUq1CthaGUqHvnzc4smQonJaVny+Z3SM=
Subject key identifier: CA:1E:36:01:CF:74:45:95:96:3D:77:3F:EB:A0:8C:EC:D6:7F:33:99
Certificate issuer: /CN=1fe90fde9784a91d93a7a2af59d4d043f1171fba
Certificate serial: 01941FFA45C5C21023CE52FA165764D5B80F
Authority key identifier: 1F:E9:0F:DE:97:84:A9:1D:93:A7:A2:AF:59:D4:D0:43:F1:17:1F:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/yh42Ac90RZWWPXc_66CM7NZ_M5k.roa
Signing time: Wed 01 Jan 2025 03:48:03 +0000
ROA not before: Wed 01 Jan 2025 03:48:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 15702
IP address blocks: 80.252.32.0/20 maxlen: 24
185.99.80.0/22 maxlen: 24
195.74.65.0/24 maxlen: 24
217.19.32.0/20 maxlen: 24
2001:1618::/29 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:45:c5:c2:10:23:ce:52:fa:16:57:64:d5:b8:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1fe90fde9784a91d93a7a2af59d4d043f1171fba
Validity
Not Before: Jan 1 03:48:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ca1e3601cf744595963d773feba08cecd67f3399
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:76:2a:05:2b:d5:eb:bc:2d:8f:83:9d:9c:e7:
0e:e5:fa:28:c8:5e:b8:49:90:4b:f0:4e:af:35:63:
47:b3:08:97:e0:d1:ac:3a:68:90:de:2c:08:d4:75:
82:3d:a4:65:3b:d2:3e:66:88:ed:6e:4d:2b:af:23:
20:fe:37:93:69:e2:e4:23:8b:4a:24:88:7a:30:86:
75:c5:ed:fd:66:2a:91:57:6f:31:84:1d:cd:26:9b:
28:68:34:b7:2c:17:fd:13:18:65:82:37:ed:7b:7f:
f4:c4:72:96:08:5b:3d:90:46:93:7f:62:f2:88:9d:
1d:3c:ea:1e:5c:70:ce:c9:1b:a6:4d:7f:e7:7d:5b:
af:5a:44:89:64:53:06:57:28:ce:79:8f:90:f2:4d:
fe:74:46:b6:aa:66:3e:a8:35:72:2d:8a:01:22:23:
23:5d:bc:48:e3:ee:f5:28:cd:ac:6f:b5:d9:56:a7:
a3:c2:1a:d5:e4:d1:55:9b:43:cc:2a:f3:1e:f6:13:
c1:7f:0b:45:a2:34:87:9e:03:ae:3a:bd:55:6d:14:
25:6f:c9:09:36:8c:7a:be:a9:19:0a:77:f4:2c:58:
c3:e7:52:08:0a:55:9f:3c:d9:7a:d6:0e:1b:5c:68:
f5:1f:24:1d:bb:79:a8:76:81:2f:a7:a0:ea:60:0e:
81:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:1E:36:01:CF:74:45:95:96:3D:77:3F:EB:A0:8C:EC:D6:7F:33:99
X509v3 Authority Key Identifier:
keyid:1F:E9:0F:DE:97:84:A9:1D:93:A7:A2:AF:59:D4:D0:43:F1:17:1F:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/yh42Ac90RZWWPXc_66CM7NZ_M5k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.252.32.0/20
185.99.80.0/22
195.74.65.0/24
217.19.32.0/20
IPv6:
2001:1618::/29
Signature Algorithm: sha256WithRSAEncryption
78:71:c9:1f:67:70:8a:6d:35:84:ea:d2:87:76:66:28:1d:f2:
9f:dd:d5:0e:c9:6e:19:77:2e:78:32:69:be:9d:9e:fc:c0:a7:
cf:21:60:93:d9:d7:68:49:aa:99:8b:15:3e:ce:b3:dd:b5:f8:
3e:57:86:ea:70:de:e9:4e:96:ba:3d:9e:98:9a:dd:74:d1:a7:
14:1d:ae:17:5a:61:97:2f:86:57:6d:99:ee:f8:fe:f8:06:96:
23:e5:81:e0:f3:ff:4f:51:28:fa:cc:bd:3f:9f:e7:ab:19:c8:
3e:e9:21:55:62:39:e4:8d:d2:62:95:35:65:47:b6:1c:94:57:
a0:1a:58:1d:39:33:ec:19:62:0e:ff:23:61:79:63:8b:d3:d1:
b5:29:22:4e:1a:04:f7:8b:b9:d7:dd:eb:da:eb:d8:95:9b:1e:
9b:fc:80:e4:8d:e0:8d:f9:d3:ec:a2:dd:b5:f7:d8:17:9a:48:
2c:bd:19:7f:67:1d:d2:3e:02:de:fc:8c:6b:e1:ca:d9:79:64:
66:ab:e9:b9:07:31:25:16:45:73:86:8e:9d:74:b0:55:af:4e:
a8:48:c3:48:8e:f9:33:1a:9a:18:55:fd:8a:6f:dd:32:a5:1a:
81:63:89:3f:87:78:19:60:de:32:84:a1:6c:4f:31:4f:68:6c:
82:3d:91:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 22:57:48 2025 by rpki-client