Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/yNUKQ1duW01FDjIRFEPoSLVxQPc.roa
File: yNUKQ1duW01FDjIRFEPoSLVxQPc.roa (raw, json)
Hash identifier: Syu+sulG7WZFq8AwMqeofM5diG/qsgviKF9Ci/i3lFc=
Subject key identifier: C8:D5:0A:43:57:6E:5B:4D:45:0E:32:11:14:43:E8:48:B5:71:40:F7
Certificate issuer: /CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Certificate serial: 019422FBDB381DD74CE17392CFC19E5AF31D
Authority key identifier: 9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/yNUKQ1duW01FDjIRFEPoSLVxQPc.roa
Signing time: Wed 01 Jan 2025 17:48:38 +0000
ROA not before: Wed 01 Jan 2025 17:48:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202479
IP address blocks: 193.37.139.0/24 maxlen: 24
2a0c:9a40::/48 maxlen: 48
2a0c:9a40:1002::/48 maxlen: 48
2a0c:9a40:100a::/48 maxlen: 48
2a0c:9a40:100c::/48 maxlen: 48
2a0c:9a40:1010::/48 maxlen: 48
2a0c:9a40:1011::/48 maxlen: 48
2a0c:9a40:1012::/48 maxlen: 48
2a0c:9a40:1013::/48 maxlen: 48
2a0c:9a40:1014::/48 maxlen: 48
2a0c:9a40:1015::/48 maxlen: 48
2a0c:9a40:1017::/48 maxlen: 48
2a0c:9a40:1018::/48 maxlen: 48
2a0c:9a40:1019::/48 maxlen: 48
2a0c:9a40:101a::/48 maxlen: 48
2a0c:9a40:101b::/48 maxlen: 48
2a0c:9a40:101c::/48 maxlen: 48
2a0c:9a40:101d::/48 maxlen: 48
2a0c:9a40:1021::/48 maxlen: 48
2a0c:9a40:1023::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:db:38:1d:d7:4c:e1:73:92:cf:c1:9e:5a:f3:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Validity
Not Before: Jan 1 17:48:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c8d50a43576e5b4d450e32111443e848b57140f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:fc:c9:ab:1d:07:d1:3c:1d:d0:e6:f0:e7:1f:
27:48:35:4b:9c:b1:a3:ac:e5:1f:09:d9:6a:05:2e:
8a:ed:a1:a7:c5:86:56:ce:ab:72:1f:9d:e1:6e:a6:
d5:c0:1d:30:7f:79:57:19:eb:24:df:c0:10:26:d8:
f7:bd:6d:c9:ed:87:e6:d4:89:2c:9e:cd:b5:17:ee:
f6:cd:c3:1f:d9:a5:38:63:d4:98:ba:e0:0a:2e:25:
ec:ab:7d:8c:0d:8f:59:3a:b6:5c:06:c6:af:41:c0:
6b:4f:82:91:02:32:35:52:80:52:1a:28:1f:be:32:
4b:24:e8:a0:11:f6:2b:a7:a3:36:fe:b6:ba:09:c9:
3e:91:a5:00:93:ea:46:7e:36:cb:69:cc:e8:03:56:
fa:0e:f8:ae:65:e4:2a:67:e3:73:62:4c:09:c0:a2:
2a:ef:0e:b2:99:a7:72:f6:35:de:bc:27:0f:7a:2c:
8b:e1:cd:e1:52:c9:35:26:48:7f:78:07:bf:58:95:
2f:87:7f:d7:5b:25:7f:0b:dd:8a:a9:4c:2e:e2:68:
69:42:ff:52:2a:0e:af:66:80:84:d8:de:32:fb:f8:
26:67:07:5c:c7:e7:8c:e7:36:51:ed:ae:3f:55:e6:
27:5f:c2:ba:a7:f4:f5:c9:3a:4c:60:53:a6:06:0e:
c0:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:D5:0A:43:57:6E:5B:4D:45:0E:32:11:14:43:E8:48:B5:71:40:F7
X509v3 Authority Key Identifier:
keyid:9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/yNUKQ1duW01FDjIRFEPoSLVxQPc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.37.139.0/24
IPv6:
2a0c:9a40::/48
2a0c:9a40:1002::/48
2a0c:9a40:100a::/48
2a0c:9a40:100c::/48
2a0c:9a40:1010::-2a0c:9a40:1015:ffff:ffff:ffff:ffff:ffff
2a0c:9a40:1017::-2a0c:9a40:101d:ffff:ffff:ffff:ffff:ffff
2a0c:9a40:1021::/48
2a0c:9a40:1023::/48
Signature Algorithm: sha256WithRSAEncryption
4c:f8:87:92:f4:41:5a:ab:34:6f:6a:57:26:12:9e:f9:43:56:
25:2c:5f:72:5d:de:ff:25:eb:01:ff:3f:9f:d3:3e:fe:ca:32:
63:12:c0:84:ea:07:dc:c1:82:e6:91:8c:09:6c:28:4a:da:5d:
57:49:df:bd:1e:16:f2:a2:fe:7c:ee:ff:06:7f:77:52:d6:9a:
f7:46:1b:81:56:54:b9:4a:05:f0:54:80:89:c5:e8:ec:0f:2b:
08:c2:88:90:b5:9e:bd:09:f2:d5:f9:6e:c3:be:b1:7c:92:fa:
e5:db:5e:c5:49:ae:75:20:4e:de:69:42:ef:9a:49:99:b4:c6:
be:7a:19:7a:d3:87:77:1f:bc:05:ca:bb:63:72:4a:49:cd:f8:
2a:76:72:8a:aa:61:83:71:e6:2f:5d:9e:80:cd:2b:54:c3:3b:
4a:01:73:74:bc:0c:b0:24:e3:92:d2:1d:43:30:96:b6:3c:8d:
09:64:b9:4a:da:10:05:cc:23:da:f3:d2:af:90:78:ba:c3:8c:
11:f4:46:39:2e:39:a8:89:0b:b7:78:b1:f3:67:1d:a6:fc:8c:
b8:8f:8d:09:d8:19:bb:11:5a:aa:10:83:49:e7:b0:b2:fd:cf:
b7:97:89:4b:46:c0:52:ef:4f:85:ba:1a:90:73:88:82:b2:40:
9a:8d:26:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:45:04 2025 by rpki-client