Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/Y8X3rue2ea4cdHqBHCTLGDw5f_Y.roa
File: Y8X3rue2ea4cdHqBHCTLGDw5f_Y.roa (raw, json)
Hash identifier: n/53escnO3YWTiBRDIf3PsAwEaw0nxAS1ch+RyoeFmo=
Subject key identifier: 63:C5:F7:AE:E7:B6:79:AE:1C:74:7A:81:1C:24:CB:18:3C:39:7F:F6
Certificate issuer: /CN=86d648bdba965461b1e8c11b9dd436c61382873c
Certificate serial: 0194206858D9F641920E70AE8C463E075263
Authority key identifier: 86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/Y8X3rue2ea4cdHqBHCTLGDw5f_Y.roa
Signing time: Wed 01 Jan 2025 05:48:16 +0000
ROA not before: Wed 01 Jan 2025 05:48:16 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212414
IP address blocks: 193.233.76.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:68:58:d9:f6:41:92:0e:70:ae:8c:46:3e:07:52:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86d648bdba965461b1e8c11b9dd436c61382873c
Validity
Not Before: Jan 1 05:48:16 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=63c5f7aee7b679ae1c747a811c24cb183c397ff6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:8d:1a:14:f3:33:56:0f:b3:67:29:c1:92:cb:
6b:42:ef:78:c5:2f:e2:e7:da:cb:8a:91:0a:99:8e:
c4:e3:c4:38:40:f8:50:77:78:6a:fa:ac:46:68:e1:
80:96:ca:bf:4b:3b:d0:3b:c2:b7:d4:72:e3:78:ac:
d9:61:81:f5:cd:19:ce:8b:27:d3:5b:80:a8:8b:1e:
bc:06:20:a5:af:e3:97:03:7b:05:ec:05:f2:cb:9d:
91:49:04:10:16:09:dc:2c:1c:bd:9c:d5:18:1a:dd:
f4:a3:6e:87:a4:d3:00:ed:3f:50:a7:58:51:5e:44:
38:e9:1a:1d:f4:88:17:ee:64:9a:23:f1:62:f5:67:
ff:92:b6:90:5e:5f:fa:19:ee:ae:75:0b:96:14:62:
d3:97:b8:c4:e4:64:15:ae:29:c5:4c:74:e0:c8:39:
0c:1b:12:e4:9a:ff:2d:db:ed:8e:b0:cb:42:93:72:
ed:54:29:88:4c:d7:43:0f:ce:d6:4f:5d:29:3b:8e:
65:75:bd:6f:b0:20:f5:92:a3:83:2b:2b:77:59:f8:
f8:a1:ea:0a:8f:ef:10:30:47:b5:32:ce:c8:7f:7d:
34:96:72:53:7d:42:5e:51:f1:a5:43:d5:f6:2f:08:
02:ba:41:b3:0a:c7:f4:53:8c:90:19:af:b1:9c:c1:
88:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:C5:F7:AE:E7:B6:79:AE:1C:74:7A:81:1C:24:CB:18:3C:39:7F:F6
X509v3 Authority Key Identifier:
keyid:86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/Y8X3rue2ea4cdHqBHCTLGDw5f_Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.233.76.0/23
Signature Algorithm: sha256WithRSAEncryption
52:ad:10:42:21:da:22:21:ea:1b:ea:01:85:ad:7e:fb:ce:1a:
ea:54:4a:b7:62:a7:ef:20:db:c3:cf:4b:94:8a:f1:44:d1:0c:
ca:b3:39:d8:9d:54:00:f0:ab:b7:6a:95:04:62:7a:99:59:6c:
e3:fb:45:46:90:68:91:a4:67:0b:a5:df:cd:4c:62:dc:e5:1b:
6d:11:45:2f:e6:4d:5c:2d:a2:93:e7:e2:53:c4:40:50:f8:be:
af:1a:a3:c0:98:65:20:31:c6:b1:55:57:8c:6f:ba:eb:e7:6a:
6d:15:e3:78:e4:fd:40:87:e1:8f:ce:5b:8e:0f:bb:b8:c1:82:
2e:64:c6:42:61:1b:ea:c2:79:be:c8:66:dd:b6:fc:9a:ec:ad:
0b:3b:1d:07:71:1a:02:26:cc:ae:c0:d6:34:f9:94:af:0a:f9:
85:a8:13:ef:b7:ea:fa:01:fc:68:9c:55:b9:cb:e2:8d:26:61:
2e:20:22:c9:93:c5:d1:bd:0f:4f:6e:af:1a:2e:43:74:fd:42:
98:2b:2c:18:02:8e:e6:2e:ba:4a:84:3b:bf:f5:84:35:c9:91:
84:3a:62:dd:cc:e9:c4:49:ac:ee:24:d5:c3:4c:a8:4c:24:d3:
1c:5e:23:b2:f9:1f:6c:44:c7:ca:23:9b:d2:05:37:08:ad:b8:
cb:e4:7f:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 07:20:08 2025 by rpki-client