Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/227afa-ddec-4644-982a-58faa27e5549/1/yYPs8r5YH3ZUhnb-tH8hNPFRP3k.roa
File: yYPs8r5YH3ZUhnb-tH8hNPFRP3k.roa (raw, json)
Hash identifier: oqr96EpWpl0SR82NHdTiNdunGc2ZUGnDoW9Ug/N3aIs=
Subject key identifier: C9:83:EC:F2:BE:58:1F:76:54:86:76:FE:B4:7F:21:34:F1:51:3F:79
Certificate issuer: /CN=b14aaa9b084864f44bae18ba076b26067754fb62
Certificate serial: 01942521B8F93D2B03A6B5D7D047BB17C5CE
Authority key identifier: B1:4A:AA:9B:08:48:64:F4:4B:AE:18:BA:07:6B:26:06:77:54:FB:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sUqqmwhIZPRLrhi6B2smBndU-2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/227afa-ddec-4644-982a-58faa27e5549/1/yYPs8r5YH3ZUhnb-tH8hNPFRP3k.roa
Signing time: Thu 02 Jan 2025 03:49:14 +0000
ROA not before: Thu 02 Jan 2025 03:49:14 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51985
IP address blocks: 5.39.232.0/21 maxlen: 21
46.17.80.0/21 maxlen: 21
185.26.248.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:b8:f9:3d:2b:03:a6:b5:d7:d0:47:bb:17:c5:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b14aaa9b084864f44bae18ba076b26067754fb62
Validity
Not Before: Jan 2 03:49:14 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c983ecf2be581f76548676feb47f2134f1513f79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:e3:3d:1c:db:d8:37:cc:b4:95:9f:fb:16:21:
45:bc:9d:d9:7b:16:05:86:05:f9:0c:56:0c:10:d4:
21:8d:3e:98:06:5a:16:49:e9:48:12:d2:f3:6a:1a:
43:ef:da:52:a6:89:82:ec:bd:65:73:be:85:67:05:
8f:c0:42:f8:b1:04:9b:03:80:9b:14:be:b8:79:c0:
5b:f3:fd:4f:7c:31:b1:6b:91:2c:fd:95:a4:32:2d:
eb:b4:9d:0a:42:8c:52:10:9a:05:ad:96:03:10:f9:
8d:e7:f8:14:02:7e:c1:ba:25:4f:f4:8f:e8:1e:d7:
4f:1a:f2:08:59:8f:34:ac:87:8e:28:2b:25:3e:59:
02:3d:d1:85:00:4a:72:3d:75:24:58:ef:70:9f:36:
81:25:57:e6:09:16:9f:a3:96:79:ea:87:d1:35:b4:
ee:a4:fb:4c:3a:53:16:d4:60:83:f2:34:02:62:76:
0f:4e:a0:a1:70:fc:96:fa:e5:cd:bf:b6:a3:5d:52:
88:47:94:fd:b1:9c:5e:7d:dc:ce:b4:63:bb:60:5b:
0c:b1:b7:5d:00:ad:b2:6b:0e:9c:6a:7c:49:f8:d3:
f0:b0:d9:97:c0:a5:39:48:a8:d6:f7:04:76:ae:da:
b1:c2:b1:7e:4f:f4:37:74:61:0c:e7:f4:1d:14:08:
34:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:83:EC:F2:BE:58:1F:76:54:86:76:FE:B4:7F:21:34:F1:51:3F:79
X509v3 Authority Key Identifier:
keyid:B1:4A:AA:9B:08:48:64:F4:4B:AE:18:BA:07:6B:26:06:77:54:FB:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sUqqmwhIZPRLrhi6B2smBndU-2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/227afa-ddec-4644-982a-58faa27e5549/1/yYPs8r5YH3ZUhnb-tH8hNPFRP3k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/227afa-ddec-4644-982a-58faa27e5549/1/sUqqmwhIZPRLrhi6B2smBndU-2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.39.232.0/21
46.17.80.0/21
185.26.248.0/22
Signature Algorithm: sha256WithRSAEncryption
46:31:6f:1b:7d:44:30:8a:35:23:a4:57:6d:5c:45:02:25:a2:
88:ba:7e:5b:f9:bf:a4:2f:3d:65:ac:a8:e4:9a:aa:13:8b:61:
ca:80:b0:7e:17:a9:d2:1d:2a:3f:e6:da:f0:98:40:85:21:ca:
55:70:70:f6:4a:64:d2:00:46:33:31:20:1a:a2:a2:48:9d:e2:
50:d0:ec:86:ff:80:2e:1a:df:dd:3a:a8:85:bd:83:9c:5b:89:
60:41:31:41:29:6e:fd:af:7c:c4:4c:ae:66:78:24:16:8f:d5:
6a:e4:c4:9b:0a:e9:5c:40:da:74:39:a2:ed:ec:f5:0e:83:ea:
81:6d:58:e7:f9:e8:f3:7d:53:25:53:da:48:94:c2:09:ab:45:
2e:f1:70:c5:86:7d:d9:31:7d:48:c5:ef:1d:91:61:f4:e3:a1:
d8:9c:88:c2:95:0f:a5:66:ab:9b:f6:0d:7f:93:bd:96:dd:a8:
34:e6:4d:96:c9:79:41:46:03:95:af:a3:cf:d2:d8:ac:1e:59:
20:ae:34:72:45:f1:31:8e:9e:a4:6c:4a:a8:7d:fb:bc:53:09:
f8:dc:bb:f7:40:ef:cd:fc:2f:64:3e:3e:dc:c6:e0:2c:c1:cb:
bb:05:36:50:bf:f0:61:44:f6:35:90:cf:2e:da:51:72:3a:42:
a8:df:f5:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:37:54 2025 by rpki-client