Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/YCoBCIiONmHjrSndY0Zynrz_guc.roa
File: YCoBCIiONmHjrSndY0Zynrz_guc.roa (raw, json)
Hash identifier: yvk2CPntD+BfL9wcM8uwxc8cNeXoCNmXwH/VTeZoNMc=
Subject key identifier: 60:2A:01:08:88:8E:36:61:E3:AD:29:DD:63:46:72:9E:BC:FF:82:E7
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 019428245D7097B1606777BCC1A87BAFC626
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/YCoBCIiONmHjrSndY0Zynrz_guc.roa
Signing time: Thu 02 Jan 2025 17:50:59 +0000
ROA not before: Thu 02 Jan 2025 17:50:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 11878
IP address blocks: 87.121.146.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:24:5d:70:97:b1:60:67:77:bc:c1:a8:7b:af:c6:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jan 2 17:50:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=602a0108888e3661e3ad29dd6346729ebcff82e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:fb:b4:a4:51:90:37:5e:48:2a:e8:86:f0:dc:
67:b6:9a:95:5c:b2:d9:42:b8:ff:dc:81:27:c5:0a:
af:fd:d6:36:b3:7c:a4:b8:8c:48:69:39:a0:0c:db:
8f:85:9b:e2:fd:e0:c7:04:d9:fd:0a:59:c4:1a:be:
7e:81:92:7d:a0:37:a7:92:fe:37:df:3f:ce:53:84:
9c:03:99:e9:ec:5f:ac:2c:16:ad:24:11:eb:88:87:
76:6e:33:98:b7:c4:21:e4:03:fe:17:bc:90:b0:29:
1d:a7:41:30:4a:61:16:7f:55:ca:bc:db:fd:de:66:
19:ad:50:d7:39:33:4e:da:4a:ea:84:76:6d:71:04:
10:83:bc:d6:87:c6:e9:00:05:54:14:70:7b:c4:a0:
52:8a:1d:51:23:7b:b7:e8:0e:4d:19:31:9e:69:99:
6d:e5:a2:f2:0d:d3:60:05:a7:43:dd:86:87:05:bd:
b7:9a:12:9b:0d:d2:c8:81:b0:af:1b:fb:17:6f:a8:
ee:20:bd:87:c3:f2:a6:c3:6a:bd:ea:f4:51:07:be:
83:9c:11:1d:88:03:30:72:31:35:4e:b5:0a:2e:7d:
75:33:9c:15:31:40:39:1e:81:ea:16:37:49:ab:c2:
95:19:ee:79:25:66:48:96:eb:1c:7f:19:6d:ec:86:
29:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:2A:01:08:88:8E:36:61:E3:AD:29:DD:63:46:72:9E:BC:FF:82:E7
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/YCoBCIiONmHjrSndY0Zynrz_guc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.121.146.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:ad:44:d3:0f:17:bb:eb:4e:52:75:f1:89:d6:35:79:85:d0:
6b:a2:ca:e5:ad:ef:f0:2d:f0:b0:18:18:e7:03:94:0e:0d:21:
5b:b0:3b:38:43:1a:97:7a:0f:dd:3c:b1:56:1f:d5:c8:6a:14:
77:75:46:7b:61:93:23:27:7d:69:fa:08:80:cb:f2:75:7d:78:
0f:49:26:f6:9a:bb:ba:1d:e0:f2:85:d7:d2:47:79:9e:b4:de:
38:a8:d2:49:2c:1c:aa:b7:f8:28:0a:d5:c5:1a:95:d2:d9:aa:
3b:fc:9f:a5:77:1e:9e:db:35:c1:45:f3:13:72:e0:84:d4:6e:
80:8b:11:38:6d:3a:d8:26:75:d6:c5:25:02:24:0f:b8:e2:66:
76:a8:59:a2:9f:05:8f:35:b4:87:b0:bf:44:ee:47:db:64:11:
c2:c0:e2:d3:c8:53:67:db:29:e5:c2:26:21:76:e0:54:5e:41:
42:7f:dc:a1:31:9a:d6:13:b9:36:0e:dc:11:52:94:a5:7b:3e:
df:be:2e:30:08:eb:de:60:cb:a3:ec:ba:ec:87:e9:35:46:56:
d4:8a:89:2c:41:79:73:bc:48:8e:49:aa:b8:f2:31:eb:f9:c0:
33:63:2a:e9:6d:a2:f0:66:39:22:76:28:1f:92:dd:b1:96:21:
5c:07:d7:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:58:42 2025 by rpki-client