Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/dd3dd1-09b5-4aa2-aec0-9fb1ce4d720b/1/ykuZpqMlHSUIWtYa1mPsmyPe9Ho.roa
File: ykuZpqMlHSUIWtYa1mPsmyPe9Ho.roa (raw, json)
Hash identifier: yZcmu9TrDVEdaIS3LL1L046LUfG1VEvG/7HySIUseIc=
Subject key identifier: CA:4B:99:A6:A3:25:1D:25:08:5A:D6:1A:D6:63:EC:9B:23:DE:F4:7A
Certificate issuer: /CN=54584a219f6f5066d848ed2ab964da8966d40a2a
Certificate serial: 0194266BD9A10E2020F34BD77EA3B89C3E6D
Authority key identifier: 54:58:4A:21:9F:6F:50:66:D8:48:ED:2A:B9:64:DA:89:66:D4:0A:2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VFhKIZ9vUGbYSO0quWTaiWbUCio.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/dd3dd1-09b5-4aa2-aec0-9fb1ce4d720b/1/ykuZpqMlHSUIWtYa1mPsmyPe9Ho.roa
Signing time: Thu 02 Jan 2025 09:49:49 +0000
ROA not before: Thu 02 Jan 2025 09:49:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49420
IP address blocks: 91.212.242.0/24 maxlen: 24
91.231.221.0/24 maxlen: 24
185.42.185.0/24 maxlen: 24
2001:67c:24c::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:d9:a1:0e:20:20:f3:4b:d7:7e:a3:b8:9c:3e:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54584a219f6f5066d848ed2ab964da8966d40a2a
Validity
Not Before: Jan 2 09:49:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ca4b99a6a3251d25085ad61ad663ec9b23def47a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:47:66:d9:8a:e1:2c:00:59:89:c4:d5:77:63:
d2:b3:0c:0e:f8:04:46:cf:7a:eb:82:52:e9:1b:1d:
84:7c:7c:02:c3:23:61:6a:8d:1e:77:60:a4:ae:33:
ae:02:3a:be:e6:40:21:d8:f8:9c:d1:75:d4:6a:92:
4a:35:fc:4a:e6:c5:72:4b:ef:2e:8a:93:47:ef:9c:
a6:01:cd:94:59:4e:71:32:7a:86:b6:8b:db:5e:04:
80:71:0a:55:64:0b:47:d6:92:55:d8:b2:6a:fb:29:
02:bf:68:a6:a1:e7:2d:73:a9:59:68:58:5c:d5:90:
75:f9:2c:58:d5:7c:77:c2:db:d5:6c:6d:ee:78:3b:
32:28:75:c4:20:3e:27:ed:40:e5:9d:60:03:c5:70:
79:88:5c:d5:8a:d5:5b:b7:7c:a2:c8:73:2f:42:1a:
dd:0b:70:10:3e:50:2f:f2:fa:99:55:6a:81:8b:76:
db:49:de:db:8f:b9:91:84:a7:1f:a1:41:d1:bd:eb:
40:81:a8:45:44:ba:39:8f:90:5c:c1:bf:a9:a9:e6:
5a:10:6b:a3:c3:7a:f7:7d:cb:2d:07:17:2c:ed:a1:
47:17:84:28:72:60:df:d3:da:e0:b1:a1:03:87:cd:
66:77:6c:dd:52:1e:4c:1f:2e:f8:7c:c3:ae:e2:0c:
74:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:4B:99:A6:A3:25:1D:25:08:5A:D6:1A:D6:63:EC:9B:23:DE:F4:7A
X509v3 Authority Key Identifier:
keyid:54:58:4A:21:9F:6F:50:66:D8:48:ED:2A:B9:64:DA:89:66:D4:0A:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VFhKIZ9vUGbYSO0quWTaiWbUCio.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/dd3dd1-09b5-4aa2-aec0-9fb1ce4d720b/1/ykuZpqMlHSUIWtYa1mPsmyPe9Ho.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/dd3dd1-09b5-4aa2-aec0-9fb1ce4d720b/1/VFhKIZ9vUGbYSO0quWTaiWbUCio.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.212.242.0/24
91.231.221.0/24
185.42.185.0/24
IPv6:
2001:67c:24c::/48
Signature Algorithm: sha256WithRSAEncryption
1d:d1:b4:c5:3c:10:b4:26:85:6b:96:02:f9:ab:97:3a:b0:2a:
b7:ee:db:f5:eb:3e:a5:15:f1:0c:a8:b2:1f:05:4d:9d:c7:3b:
f2:f1:32:43:d0:e6:41:80:e9:b1:54:f8:94:1f:38:58:4c:33:
7a:2b:08:97:53:c9:ea:a2:34:47:dc:34:0b:86:52:09:9c:66:
f8:3c:95:4e:f7:38:35:9d:71:df:b4:78:e6:92:69:73:d7:62:
db:7c:63:1a:ab:db:4a:9f:ba:4c:7a:15:76:39:70:2a:fd:3b:
c7:5d:26:26:20:42:51:d6:0e:42:be:f6:5a:94:c1:b8:3b:b1:
c6:fd:c2:db:8b:75:c1:b4:cd:37:5f:6e:06:7b:27:b0:33:7e:
fb:d5:20:3a:dc:cb:9b:b3:ed:bb:cd:b3:d7:c3:9e:42:d1:4e:
a9:0e:a2:50:58:63:40:47:a0:83:fc:87:ec:cc:c5:74:85:26:
02:85:6a:3b:de:55:d0:d6:1b:03:5b:96:19:7b:e7:cd:04:ec:
7c:79:81:46:4e:9d:07:17:6d:a0:99:93:99:1c:83:05:15:31:
88:66:bd:0c:cb:2c:66:ae:9a:4b:f7:f9:63:5c:24:de:66:ef:
42:70:71:a7:b6:0f:b7:16:18:6c:dd:11:80:a0:66:25:95:48:
18:e9:45:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:58:42 2025 by rpki-client