Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/364b94-6ca4-4f9a-88a5-8b3d527c49e4/1/Y5W9e3UXtchMX-JAltaaFRtUTcQ.roa
File: Y5W9e3UXtchMX-JAltaaFRtUTcQ.roa (raw, json)
Hash identifier: a+EjsS97j2kxczYQzwf/rheKM4WVXM0FPGaxc3TrdqY=
Subject key identifier: 63:95:BD:7B:75:17:B5:C8:4C:5F:E2:40:96:D6:9A:15:1B:54:4D:C4
Certificate issuer: /CN=58bf7f3ad53f29a3c43f0ad82017a05368c0104a
Certificate serial: 0188BDCC07E824155EEC43AF45C7F5A8AA2E
Authority key identifier: 58:BF:7F:3A:D5:3F:29:A3:C4:3F:0A:D8:20:17:A0:53:68:C0:10:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WL9_OtU_KaPEPwrYIBegU2jAEEo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/364b94-6ca4-4f9a-88a5-8b3d527c49e4/1/Y5W9e3UXtchMX-JAltaaFRtUTcQ.roa
Signing time: Thu 15 Jun 2023 06:44:05 +0000
ROA not before: Thu 15 Jun 2023 06:44:05 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212384
IP address blocks: 193.109.196.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:bd:cc:07:e8:24:15:5e:ec:43:af:45:c7:f5:a8:aa:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58bf7f3ad53f29a3c43f0ad82017a05368c0104a
Validity
Not Before: Jun 15 06:44:05 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6395bd7b7517b5c84c5fe24096d69a151b544dc4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:5c:f0:05:cc:ea:d7:1b:77:d0:23:be:28:45:
b9:8f:bb:ca:88:5f:99:23:6f:11:40:7a:a2:0d:99:
f6:b8:42:4a:3b:78:bd:fd:27:26:c4:2d:4f:b5:f2:
1a:cf:08:1f:45:72:5f:5b:18:68:0c:19:7b:54:f2:
6e:5c:db:b7:07:af:28:5b:52:46:13:97:4c:0e:d5:
60:45:99:5d:4f:a0:61:26:07:92:cb:d2:0c:f7:4d:
68:fe:39:cd:b2:43:a4:e6:af:51:32:6b:e7:9f:f0:
f0:35:e4:05:42:5e:0e:cb:15:d1:8d:c4:b6:61:25:
e6:45:95:0b:29:ed:df:38:c1:41:3f:b2:7d:18:ff:
79:bc:10:23:e1:3a:b5:9b:2f:7d:14:e5:0f:ac:29:
44:41:99:6a:f2:d9:51:a8:0a:f4:63:8a:63:2c:f1:
66:40:ff:52:af:f0:47:42:56:9c:40:04:84:9f:5d:
94:7d:a4:03:6c:cb:4b:af:c3:f0:50:4f:03:f5:a8:
3f:45:30:9e:20:9f:be:a2:7b:5b:89:44:8b:20:95:
79:74:d7:61:19:f7:45:97:ab:3e:91:2c:c5:ce:40:
39:e2:7f:72:62:77:41:fb:c3:21:d0:6e:2d:73:d1:
a4:ad:cb:1e:54:83:38:45:ca:8d:1f:9b:cf:7f:a0:
ae:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:95:BD:7B:75:17:B5:C8:4C:5F:E2:40:96:D6:9A:15:1B:54:4D:C4
X509v3 Authority Key Identifier:
keyid:58:BF:7F:3A:D5:3F:29:A3:C4:3F:0A:D8:20:17:A0:53:68:C0:10:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WL9_OtU_KaPEPwrYIBegU2jAEEo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/364b94-6ca4-4f9a-88a5-8b3d527c49e4/1/Y5W9e3UXtchMX-JAltaaFRtUTcQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/364b94-6ca4-4f9a-88a5-8b3d527c49e4/1/WL9_OtU_KaPEPwrYIBegU2jAEEo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.109.196.0/24
Signature Algorithm: sha256WithRSAEncryption
97:c7:b3:ff:b1:e1:75:eb:08:38:50:ea:29:82:00:43:02:3c:
7b:fa:f9:f6:ff:f3:9b:38:d4:ee:de:b2:7d:d2:ad:58:b4:60:
a4:79:ea:65:c0:12:42:e2:73:38:2c:94:44:0f:3c:c1:ee:48:
c0:f3:2e:23:08:7a:1f:af:ab:68:89:8e:55:0a:af:a7:64:c1:
ef:15:74:10:2a:fb:3b:91:8d:29:34:e0:1a:04:03:d0:9e:07:
9b:d0:f0:b3:aa:25:d0:07:25:82:7a:97:d0:3f:ce:d6:17:36:
c9:c5:72:e4:a8:70:ca:9f:b4:a0:b3:93:4c:6d:dc:35:69:a7:
ef:b4:4c:0d:a3:cc:fa:f4:50:ca:e5:c2:ed:ac:3c:69:da:8a:
91:75:31:f6:19:38:f6:11:82:a1:f4:6d:65:fa:76:f5:d3:b3:
af:9e:83:ac:f3:1c:51:c0:18:06:a9:2c:e0:9a:20:66:95:70:
1c:b2:39:32:3e:05:36:dc:27:39:74:6a:3a:57:f2:61:1b:c7:
e7:8c:12:91:6c:4f:c8:3d:f6:25:aa:4d:6b:57:41:6e:88:65:
17:82:d4:d0:4b:bb:7c:a4:7b:00:a5:ba:b8:28:9a:a4:47:67:
01:5e:8e:50:c5:80:f3:02:62:56:bd:2b:82:98:18:85:ab:98:
c1:29:00:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:52:51 2025 by rpki-client