Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/af3d81-0047-413c-91f4-0470b4bb30db/1/YiJDJxdXmW5pjPfG0IUkaGicKHY.roa
File: YiJDJxdXmW5pjPfG0IUkaGicKHY.roa (raw, json)
Hash identifier: bVSSzrSwg5yj9TOUMUyP9WWPx/GzK60pZw9sc3oEndk=
Subject key identifier: 62:22:43:27:17:57:99:6E:69:8C:F7:C6:D0:85:24:68:68:9C:28:76
Certificate issuer: /CN=f879988e0f49971a326f419e5cfacbfddcc993e7
Certificate serial: 01955B2275D284BCA1060ED30DA86D6C4153
Authority key identifier: F8:79:98:8E:0F:49:97:1A:32:6F:41:9E:5C:FA:CB:FD:DC:C9:93:E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-HmYjg9Jlxoyb0GeXPrL_dzJk-c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/af3d81-0047-413c-91f4-0470b4bb30db/1/YiJDJxdXmW5pjPfG0IUkaGicKHY.roa
Signing time: Mon 03 Mar 2025 08:32:19 +0000
ROA not before: Mon 03 Mar 2025 08:32:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 83.136.212.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:5b:22:75:d2:84:bc:a1:06:0e:d3:0d:a8:6d:6c:41:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f879988e0f49971a326f419e5cfacbfddcc993e7
Validity
Not Before: Mar 3 08:32:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=622243271757996e698cf7c6d0852468689c2876
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:dd:8a:86:32:4b:e8:a7:13:f7:79:db:1e:28:
d2:e3:f8:b4:ac:03:73:b7:9e:de:59:fd:12:69:f6:
2f:f6:4e:55:16:7f:8b:2c:e6:33:ce:a1:ed:7d:63:
65:a7:72:72:76:e8:16:25:12:f2:f9:7b:9b:f5:1a:
1f:ac:51:bb:9c:7b:71:4a:8e:5c:f5:59:60:d4:a2:
3e:16:c0:46:75:94:e5:73:c6:45:3c:17:72:2a:c3:
b4:11:57:a7:52:87:f3:4a:af:90:bc:ed:75:c2:88:
4b:f4:82:44:b4:a4:67:59:20:91:af:09:5f:ff:4a:
e3:bc:5b:d8:77:dd:83:aa:43:47:a5:72:9b:ca:8a:
36:f1:e7:74:35:92:0c:e8:db:29:5b:b7:30:c5:52:
f9:7e:02:d3:5e:4a:d4:1c:ed:af:1d:18:67:e4:64:
28:b1:22:00:da:90:36:62:51:63:71:a7:2e:11:2f:
95:3e:aa:ba:ab:a0:f3:b9:10:2a:4f:c1:09:85:b0:
7a:6f:ab:dd:7b:2b:7b:90:51:b4:f5:1c:fb:7f:2c:
df:1b:7c:c8:44:81:f6:ff:c6:6b:b8:0a:26:44:4e:
d2:63:de:f7:eb:ad:77:dc:d3:71:12:dd:2b:e7:42:
c8:60:d0:08:37:37:50:ea:5f:68:85:aa:70:0c:46:
89:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:22:43:27:17:57:99:6E:69:8C:F7:C6:D0:85:24:68:68:9C:28:76
X509v3 Authority Key Identifier:
keyid:F8:79:98:8E:0F:49:97:1A:32:6F:41:9E:5C:FA:CB:FD:DC:C9:93:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-HmYjg9Jlxoyb0GeXPrL_dzJk-c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/af3d81-0047-413c-91f4-0470b4bb30db/1/YiJDJxdXmW5pjPfG0IUkaGicKHY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/af3d81-0047-413c-91f4-0470b4bb30db/1/1-HmYjg9Jlxoyb0GeXPrL_dzJk-c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.136.212.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:85:5a:e7:67:5f:e9:ba:b9:79:d0:ff:ed:71:3f:5c:c0:2a:
20:e4:1b:35:63:bb:b1:05:7b:95:a6:c4:f9:8b:3e:f5:c8:ab:
cf:68:c6:b3:f8:9b:d9:a5:f4:36:0a:fa:25:1f:a3:ed:0e:fe:
ce:48:d7:0e:c8:e4:b7:60:df:f8:20:0e:88:4e:ec:e6:26:ed:
6c:f1:a1:85:2c:1c:2f:0f:37:6b:ad:4d:59:84:05:51:a1:e8:
57:35:10:33:21:9f:92:22:79:22:68:f3:22:d1:50:79:22:c4:
82:a9:d5:2c:50:71:87:27:f3:92:88:bf:7f:0b:dd:c2:99:87:
75:99:c9:0b:7f:da:31:1b:12:0d:42:ce:ed:02:5b:18:db:fa:
b4:af:e9:af:42:ed:31:3c:65:c4:6d:c3:54:9d:c5:e5:e7:d1:
7f:8c:8c:8c:d0:bb:d3:8a:fd:c2:4c:2b:c2:2b:3a:ea:8a:2f:
e8:0d:f8:a5:4e:c1:de:f7:ce:3c:79:75:27:a3:47:4d:4a:9d:
c4:e3:66:99:49:02:12:28:ea:aa:c6:23:a2:38:c0:a0:d9:95:
37:80:47:7c:b5:29:b9:8d:ec:df:ef:b6:b5:e6:e5:a4:f6:e0:
e8:9f:8e:9e:43:92:b1:15:08:17:83:23:04:ae:f0:be:f5:18:
27:26:9b:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 11:08:38 2025 by rpki-client