Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/69ed29-af4e-4524-adfb-e15437380099/1/yvNRdoKPa6T74yCCtKA2QvJhdbs.roa
File: yvNRdoKPa6T74yCCtKA2QvJhdbs.roa (raw, json)
Hash identifier: gmVjs/E675HoTkgwked1IKQnLBzNPHHSFLe/DEwf98c=
Subject key identifier: CA:F3:51:76:82:8F:6B:A4:FB:E3:20:82:B4:A0:36:42:F2:61:75:BB
Certificate issuer: /CN=83991afcd455eb1b174fcf89f8e10eaf7f70b355
Certificate serial: 019423D6FD2AD9D2578FAFC9FCE9D7A4504F
Authority key identifier: 83:99:1A:FC:D4:55:EB:1B:17:4F:CF:89:F8:E1:0E:AF:7F:70:B3:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g5ka_NRV6xsXT8-J-OEOr39ws1U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/69ed29-af4e-4524-adfb-e15437380099/1/yvNRdoKPa6T74yCCtKA2QvJhdbs.roa
Signing time: Wed 01 Jan 2025 21:47:59 +0000
ROA not before: Wed 01 Jan 2025 21:47:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 136787
IP address blocks: 5.44.248.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d6:fd:2a:d9:d2:57:8f:af:c9:fc:e9:d7:a4:50:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83991afcd455eb1b174fcf89f8e10eaf7f70b355
Validity
Not Before: Jan 1 21:47:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=caf35176828f6ba4fbe32082b4a03642f26175bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:2b:48:f9:4e:8d:20:41:90:95:c2:71:ed:1f:
71:91:f1:6c:42:be:0f:32:70:f5:56:5b:d0:4b:ee:
f2:ef:6a:82:4d:fa:58:59:d2:b1:e9:17:ad:3b:5c:
e6:51:dd:c0:2f:4f:b4:d3:2d:9b:d5:2c:1e:65:9b:
ff:c3:57:37:fc:f1:e3:01:d8:70:dc:b2:27:3c:cd:
59:f1:80:e0:e3:9b:72:d5:25:99:be:24:92:7e:e2:
5d:1e:56:cc:83:d6:6e:e1:5c:0d:0e:1c:51:10:7f:
2f:6b:bf:80:6b:d8:c8:6a:32:59:42:09:f3:50:23:
fb:7e:08:d4:ee:27:40:d2:48:0e:29:2d:43:1b:54:
2c:a6:ab:6d:cb:4c:ef:40:12:dd:45:ff:3c:0a:2c:
6c:1a:1e:da:1a:d1:7b:57:a0:39:21:bd:f9:0c:ca:
cb:19:1a:5a:13:41:ad:6c:bd:4f:36:91:55:c9:4e:
9b:27:fb:a1:f7:7b:ec:4c:f6:63:3a:f1:e8:36:14:
6c:77:22:66:43:84:aa:f8:fe:82:3b:1c:06:7d:2d:
bd:e5:af:b9:b9:ce:85:ed:97:3e:22:3e:03:fd:03:
ff:f1:d8:5e:74:3f:74:9b:bc:3c:6b:ad:d5:f2:38:
c3:4f:d1:58:ca:ca:10:29:77:dc:54:39:83:02:55:
11:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:F3:51:76:82:8F:6B:A4:FB:E3:20:82:B4:A0:36:42:F2:61:75:BB
X509v3 Authority Key Identifier:
keyid:83:99:1A:FC:D4:55:EB:1B:17:4F:CF:89:F8:E1:0E:AF:7F:70:B3:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g5ka_NRV6xsXT8-J-OEOr39ws1U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/69ed29-af4e-4524-adfb-e15437380099/1/yvNRdoKPa6T74yCCtKA2QvJhdbs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/69ed29-af4e-4524-adfb-e15437380099/1/g5ka_NRV6xsXT8-J-OEOr39ws1U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.44.248.0/24
Signature Algorithm: sha256WithRSAEncryption
32:de:bd:ca:f1:c3:ec:c5:03:76:cd:36:2c:c7:cc:d9:2e:89:
05:fc:f3:80:26:9a:70:ca:69:1b:2d:ca:06:12:f6:d9:ec:60:
f3:0f:8f:c7:44:b0:65:8e:ae:dd:1f:38:d4:f1:97:cb:b2:c4:
89:61:84:50:84:68:dd:6a:fc:55:b2:1a:df:8f:a5:7a:b9:3c:
85:ed:72:5f:1b:6c:a8:09:75:06:57:da:a4:4c:0c:66:fc:6f:
b7:c5:a7:b8:0b:cf:e6:e3:9f:64:66:fe:4c:35:c9:c0:28:7b:
d1:94:04:9f:d2:ec:0a:8d:b8:4f:bf:71:48:b8:0d:6b:b7:8a:
6a:91:d5:79:78:55:e9:b5:1f:9d:f5:79:20:fa:7a:bf:b5:74:
52:3d:64:a5:9b:ef:cd:31:3c:30:a7:18:74:23:99:ec:ce:22:
6e:37:cc:c3:e5:27:4c:d3:54:22:0b:78:fc:a8:02:1d:24:ca:
69:eb:9b:67:42:c5:a7:18:b0:2e:f4:21:c0:79:1d:fc:0d:54:
16:b9:ea:d2:ad:e9:a0:8b:07:df:ff:17:86:37:99:09:49:71:
90:38:5f:18:fc:4e:b4:45:fe:c6:f9:76:3a:ae:af:80:a9:b1:
a4:3c:0e:a4:df:36:13:2f:5b:f2:6d:3b:53:94:ec:4e:b4:f8:
00:62:eb:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 13:25:03 2025 by rpki-client