Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/Y0YnGi6k44o0BoJxL5xnAWr44SU.roa
File: Y0YnGi6k44o0BoJxL5xnAWr44SU.roa (raw, json)
Hash identifier: dI/fhQJE269HakZOvM4hWuItqfQ6L8k9zmHLPdV5Pro=
Subject key identifier: 63:46:27:1A:2E:A4:E3:8A:34:06:82:71:2F:9C:67:01:6A:F8:E1:25
Certificate issuer: /CN=3183785916cd98d7c770d685145499a8a0a15722
Certificate serial: 01941F8C2C245C7F4F023FF9FF23E9EDDD5C
Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/Y0YnGi6k44o0BoJxL5xnAWr44SU.roa
Signing time: Wed 01 Jan 2025 01:47:47 +0000
ROA not before: Wed 01 Jan 2025 01:47:47 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50886
IP address blocks: 85.122.144.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:2c:24:5c:7f:4f:02:3f:f9:ff:23:e9:ed:dd:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722
Validity
Not Before: Jan 1 01:47:47 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6346271a2ea4e38a340682712f9c67016af8e125
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:18:e3:0a:04:da:2a:a1:35:54:0f:01:a0:9d:
6f:e7:96:fc:2e:22:bd:91:93:2e:08:70:c3:c7:47:
78:d8:36:e4:aa:6a:c1:a2:14:07:d6:6d:ae:d0:95:
95:51:a5:8c:39:7a:83:29:d3:98:a8:a8:10:bd:1b:
23:db:2e:3a:fa:4a:26:f0:9f:7f:5a:03:63:cb:02:
8b:dd:ac:98:16:d1:1d:35:2d:7d:e5:ce:5b:e3:5d:
68:6c:f7:45:c8:a4:0f:b3:d8:11:61:49:a7:b3:50:
53:59:f0:61:cc:6f:37:60:a2:70:c8:9a:d7:6e:64:
f0:79:84:3d:27:bd:dd:e2:16:4c:3a:2a:1b:f9:f6:
92:84:be:81:13:53:ff:f1:9a:e1:46:78:2d:b8:a9:
d8:e8:10:45:be:38:1f:b0:dc:cf:68:21:76:3e:63:
7e:fb:8a:27:4d:d9:2b:9e:c2:81:cb:b2:34:4e:71:
e7:b1:30:e3:d1:de:a0:34:67:c1:47:63:8a:44:c5:
3e:f8:d5:d0:55:f1:d4:72:c1:48:39:76:15:42:be:
a4:3d:93:b8:2d:39:d1:c3:f8:d9:ca:e1:b0:54:90:
bf:2b:8d:16:fb:8f:65:f9:f4:76:67:48:7d:4e:d1:
ca:60:82:e7:06:5b:56:92:93:2b:25:41:91:b4:88:
0f:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:46:27:1A:2E:A4:E3:8A:34:06:82:71:2F:9C:67:01:6A:F8:E1:25
X509v3 Authority Key Identifier:
keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/Y0YnGi6k44o0BoJxL5xnAWr44SU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.122.144.0/21
Signature Algorithm: sha256WithRSAEncryption
b7:8f:41:aa:2d:0c:af:d4:d1:59:30:e3:b6:fe:c6:36:a1:62:
c5:ad:11:ab:bf:90:e8:34:ea:31:32:04:93:4a:28:19:d7:6b:
da:94:1c:75:bc:5f:ea:b1:8f:b5:4c:ef:a8:fa:3c:1e:64:d7:
94:9d:e4:22:4f:0c:8d:84:1f:02:71:4f:1b:a1:5d:bf:82:7a:
24:31:e5:65:ef:84:4d:67:11:0c:d5:9e:9c:21:52:96:96:ad:
79:ec:c1:55:75:03:48:78:78:c1:d3:29:db:ff:72:f7:8a:2c:
c9:fb:2b:52:f6:83:70:25:64:72:e3:52:aa:bf:e2:48:2e:cd:
4a:bb:1f:33:fa:bc:47:28:54:86:b1:0c:c8:98:ea:a2:33:d9:
e1:cb:4a:b5:fd:71:06:d7:f7:ea:ac:9c:61:e7:5e:cd:4e:5d:
f0:20:e0:57:52:62:96:dc:3a:ba:b2:4c:1c:55:1d:bd:df:b4:
9f:d5:1e:ab:d9:9f:1b:be:c6:7f:95:d1:df:97:75:ef:32:d2:
7c:46:b1:ae:5d:6d:dc:aa:94:b3:6d:e1:17:98:29:50:10:b8:
a2:16:be:2f:d6:4f:f9:d1:ba:55:cb:a2:55:8b:42:93:18:2b:
bb:d6:0c:32:e0:70:d4:98:74:ab:95:db:cc:b2:93:52:b7:59:
6b:f7:54:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 19:13:16 2025 by rpki-client