Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/yFVCEVgG9n0T0hD1brJ55rNZoWo.roa
File: yFVCEVgG9n0T0hD1brJ55rNZoWo.roa (raw, json)
Hash identifier: Vx+fBgh1bjydrg6OueGRJCnLL6Pc8rzN6nk0w0ZYPGQ=
Subject key identifier: C8:55:42:11:58:06:F6:7D:13:D2:10:F5:6E:B2:79:E6:B3:59:A1:6A
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 01942824C6554A1F5A18CA71EAB189EF0A0C
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/yFVCEVgG9n0T0hD1brJ55rNZoWo.roa
Signing time: Thu 02 Jan 2025 17:51:26 +0000
ROA not before: Thu 02 Jan 2025 17:51:26 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214438
IP address blocks: 83.143.115.0/24 maxlen: 24
94.156.8.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:24:c6:55:4a:1f:5a:18:ca:71:ea:b1:89:ef:0a:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jan 2 17:51:26 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c85542115806f67d13d210f56eb279e6b359a16a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:3a:02:ae:9b:af:f7:08:64:8f:5d:e1:81:85:
ba:c9:88:53:a1:61:7b:94:34:f7:e6:36:9e:ab:15:
fc:7e:3e:d4:0b:3e:22:d0:96:71:e4:65:be:7a:11:
37:89:8a:91:1b:75:4d:37:c9:dd:cc:c7:e4:43:39:
81:b6:a9:4d:5a:c4:3d:cb:95:01:05:cd:21:10:c5:
f0:c8:c3:15:85:9f:2d:f3:18:cc:f3:c1:0d:b7:9a:
ff:78:d6:92:72:37:71:da:fa:9f:db:d2:23:9f:21:
c8:2a:0c:9b:04:25:c6:85:6f:5e:65:38:56:ce:1e:
aa:c7:32:ff:9d:09:ba:10:e0:cc:2b:e2:b9:d3:cd:
6b:94:42:bf:bc:0b:e1:22:b7:be:65:5e:37:61:e8:
74:63:2e:5d:53:52:07:4f:e0:ad:1b:2e:83:f2:d6:
1c:f1:3d:86:cd:eb:f3:b6:a5:27:d1:df:93:a1:ee:
7a:c2:05:cf:4b:7c:ae:99:ed:e5:f6:fe:cd:29:66:
5f:57:88:15:0d:26:00:15:ac:be:d9:f2:97:3c:50:
f6:1b:32:4d:ad:d3:2c:28:f6:90:00:a6:f6:7d:0b:
73:1c:2e:ba:98:11:88:2e:76:65:a4:ca:8d:46:07:
99:67:e3:ac:ff:e1:96:19:0e:ae:81:f3:02:28:74:
f3:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:55:42:11:58:06:F6:7D:13:D2:10:F5:6E:B2:79:E6:B3:59:A1:6A
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/yFVCEVgG9n0T0hD1brJ55rNZoWo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.143.115.0/24
94.156.8.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:d3:f7:fe:18:7f:a3:d2:4e:0c:a0:f0:d5:e0:ca:3b:80:79:
0a:54:2a:4f:cf:24:d2:84:a6:66:69:c5:98:95:bb:6f:2b:57:
cb:c7:61:79:a6:73:7f:e7:45:49:27:de:53:77:75:2b:f3:a7:
c5:b2:ba:87:66:d1:b6:a4:cd:9d:ce:9b:d3:d1:ce:78:21:3e:
37:bd:b8:45:64:ee:18:24:71:04:a2:7e:31:00:74:66:40:09:
be:07:d9:52:97:34:b6:02:00:2c:ac:d5:b3:0d:48:8b:f3:52:
93:dd:a7:ad:b4:2a:e4:6e:cc:24:47:2c:fb:89:69:ac:f9:71:
17:5f:11:cd:93:e8:07:9f:22:8e:2e:3a:13:da:2c:b1:97:75:
12:7b:e9:a9:bc:2a:00:9e:47:65:2d:d3:c4:48:3a:a5:cc:fa:
b2:e7:e0:92:a8:1b:d1:d8:45:1b:0e:0c:99:78:cc:a9:54:81:
c0:53:91:b0:1e:5b:19:74:9f:50:67:a8:07:79:bc:b7:c3:dc:
66:ce:ff:e2:19:3e:7c:39:91:66:43:d4:23:94:98:cc:73:9d:
bd:e5:8b:b0:a5:c4:72:79:1f:b1:1b:2a:03:42:2d:f3:3a:0d:
c3:01:a3:ff:31:be:07:c1:fe:fb:be:3f:98:80:d6:b5:e3:b3:
a7:95:cf:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:08:58 2025 by rpki-client