Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/30d4e8-e090-4bf2-8185-3687c818ede5/1/yFU0STDV72MqU-sRM_Kr-cA_ycU.roa
File: yFU0STDV72MqU-sRM_Kr-cA_ycU.roa (raw, json)
Hash identifier: 5zjLZ1D73ucyALUkDp0UIe5Nzvw4GxQzx2gLau7CgqA=
Subject key identifier: C8:55:34:49:30:D5:EF:63:2A:53:EB:11:33:F2:AB:F9:C0:3F:C9:C5
Certificate issuer: /CN=a316c7659af1d56bc718faf614f092758f5edc7f
Certificate serial: 0194258F13E95C550416BF1DEC60E9825009
Authority key identifier: A3:16:C7:65:9A:F1:D5:6B:C7:18:FA:F6:14:F0:92:75:8F:5E:DC:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oxbHZZrx1WvHGPr2FPCSdY9e3H8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/30d4e8-e090-4bf2-8185-3687c818ede5/1/yFU0STDV72MqU-sRM_Kr-cA_ycU.roa
Signing time: Thu 02 Jan 2025 05:48:41 +0000
ROA not before: Thu 02 Jan 2025 05:48:41 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16509
IP address blocks: 185.221.84.0/24 maxlen: 24
212.32.0.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:13:e9:5c:55:04:16:bf:1d:ec:60:e9:82:50:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a316c7659af1d56bc718faf614f092758f5edc7f
Validity
Not Before: Jan 2 05:48:41 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c855344930d5ef632a53eb1133f2abf9c03fc9c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:ce:f6:68:4d:c8:73:59:82:7f:8a:e0:de:bb:
a5:7e:05:f7:af:c7:a1:fc:0a:cb:fa:5d:25:e0:f6:
a7:58:7d:1d:96:0d:3b:5d:25:9a:0b:12:ab:01:93:
16:99:9d:ed:6c:1d:29:b5:60:8c:53:25:c3:a9:26:
63:58:af:1b:56:02:4d:4a:b9:6b:72:b7:77:56:5a:
63:2e:76:e5:ce:41:62:86:0e:90:fa:04:2d:34:54:
29:26:bf:9d:4b:79:2e:a4:7a:98:87:df:93:c8:10:
87:9e:25:9c:6d:71:e6:64:78:be:e0:8a:74:30:66:
f7:90:33:fc:d4:37:15:52:5b:0f:8b:ed:6b:51:f0:
f9:87:4b:27:59:06:d9:78:67:2f:99:c2:89:c7:fe:
57:b9:32:93:b6:66:19:93:2c:7f:47:71:35:65:ad:
db:f3:94:59:0b:e8:48:b6:c6:5a:0f:10:92:fd:88:
27:97:c2:e0:66:d3:b3:5b:a3:94:ef:49:d1:94:eb:
aa:16:77:78:28:df:51:6e:47:87:21:9c:d1:ba:c0:
d2:ae:8c:38:be:df:b3:3b:e3:19:46:fc:38:48:96:
2d:0b:18:17:4b:2b:25:e6:91:0f:4d:f1:88:3c:63:
3f:cb:47:0e:74:8c:a8:18:a6:34:5f:be:02:b8:0b:
2a:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:55:34:49:30:D5:EF:63:2A:53:EB:11:33:F2:AB:F9:C0:3F:C9:C5
X509v3 Authority Key Identifier:
keyid:A3:16:C7:65:9A:F1:D5:6B:C7:18:FA:F6:14:F0:92:75:8F:5E:DC:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oxbHZZrx1WvHGPr2FPCSdY9e3H8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/30d4e8-e090-4bf2-8185-3687c818ede5/1/yFU0STDV72MqU-sRM_Kr-cA_ycU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/30d4e8-e090-4bf2-8185-3687c818ede5/1/oxbHZZrx1WvHGPr2FPCSdY9e3H8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.221.84.0/24
212.32.0.0/21
Signature Algorithm: sha256WithRSAEncryption
55:81:b6:82:32:37:0b:fc:b8:95:38:31:25:15:1e:3a:6b:dd:
9a:04:b7:56:f5:82:f9:83:92:fa:19:d3:a6:d1:57:a3:b7:6b:
ae:5c:db:9f:7d:a7:90:c5:b9:2e:e2:37:5e:dd:ba:4d:56:dc:
7d:75:a9:c1:42:18:26:38:8e:4b:79:7c:83:f8:e8:89:49:e4:
2b:25:1f:48:bf:5c:49:d2:13:55:df:a5:5b:96:ca:83:6a:50:
d5:ef:59:70:1b:98:71:85:ab:f9:06:d6:0d:b2:ad:6c:10:1d:
60:69:d4:69:4a:20:78:4a:fb:f8:59:85:62:78:37:bd:fc:7f:
ef:92:75:aa:72:d1:bc:9b:78:66:17:df:80:b5:10:29:35:2f:
c5:1b:3d:f5:b9:0b:05:3f:91:31:ec:80:a8:48:5b:35:91:e5:
e3:c3:c0:95:ee:65:f4:de:f7:9b:70:26:1f:b1:66:61:5b:ff:
7d:08:cf:6c:94:c0:e0:f7:69:df:c8:04:dd:ad:c8:3c:14:20:
44:9f:38:9d:32:ab:8b:4b:a5:f7:d2:39:da:e9:30:81:f5:15:
14:6b:c9:de:c2:b9:64:5d:cf:15:f7:8c:93:29:3b:29:27:de:
60:e2:0f:32:1c:cc:a7:12:a0:5e:c6:23:95:fb:7a:e2:3b:a4:
d6:91:99:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:22:09 2025 by rpki-client