Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/YlMP4zhlQfTyMGH61vkhjPMGCQc.roa
File: YlMP4zhlQfTyMGH61vkhjPMGCQc.roa (raw, json)
Hash identifier: omb2czdZsJtIEWaNIdL65PLUqF8DcyFUsRmNRNNiWyQ=
Subject key identifier: 62:53:0F:E3:38:65:41:F4:F2:30:61:FA:D6:F9:21:8C:F3:06:09:07
Certificate issuer: /CN=3183785916cd98d7c770d685145499a8a0a15722
Certificate serial: 019449988305DF7405EBCE5E48F72C070B8A
Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/YlMP4zhlQfTyMGH61vkhjPMGCQc.roa
Signing time: Thu 09 Jan 2025 05:45:19 +0000
ROA not before: Thu 09 Jan 2025 05:45:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200019
IP address blocks: 194.102.105.0/24 maxlen: 24
217.156.64.0/24 maxlen: 24
217.156.65.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:49:98:83:05:df:74:05:eb:ce:5e:48:f7:2c:07:0b:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722
Validity
Not Before: Jan 9 05:45:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=62530fe3386541f4f23061fad6f9218cf3060907
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:b2:d6:54:59:f8:c2:a1:ee:52:b1:6e:0a:0e:
dd:6d:42:1f:1b:b8:07:14:6a:8c:c9:43:25:6b:e9:
56:c0:04:10:46:2c:b9:3e:e7:06:ec:1c:60:ed:b5:
98:31:52:7c:35:d9:4a:73:ef:73:ad:9a:0c:e8:23:
e9:da:53:f2:b0:56:38:ea:a9:c6:e8:b3:ea:07:b5:
81:1c:95:d1:80:b2:0f:77:8b:e0:49:22:fd:19:d8:
1c:ae:ce:c9:83:d9:e2:e3:97:7d:0e:41:89:c6:5d:
38:8b:45:50:2a:30:99:a6:7e:7c:02:20:27:18:c0:
c9:9c:ea:4c:7e:f5:93:41:10:69:de:bc:78:8f:f6:
17:3a:ae:3c:68:94:91:8f:0d:43:cd:41:31:3a:38:
5d:f9:ab:28:d7:42:c9:36:f3:96:af:e8:46:84:99:
14:92:87:44:6a:0e:d6:44:97:b6:9b:f5:d7:45:77:
dc:11:32:07:74:55:57:cf:1f:05:c8:34:d9:59:14:
b9:7e:ca:a3:92:41:b9:60:3c:82:b3:66:12:93:31:
0d:08:36:17:17:fb:5b:fa:42:93:8f:9b:a0:91:08:
3a:90:58:da:63:86:7e:51:5f:47:1f:16:9a:38:cf:
5f:35:10:7e:5c:53:3a:01:a8:a8:b5:a0:c6:1b:0b:
da:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:53:0F:E3:38:65:41:F4:F2:30:61:FA:D6:F9:21:8C:F3:06:09:07
X509v3 Authority Key Identifier:
keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/YlMP4zhlQfTyMGH61vkhjPMGCQc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.102.105.0/24
217.156.64.0/23
Signature Algorithm: sha256WithRSAEncryption
46:13:89:4d:05:2f:6d:48:0c:43:cf:51:c8:c8:f5:5c:7d:d9:
00:b0:5a:f0:48:56:78:1c:29:df:d7:ec:90:e0:c8:3b:81:35:
71:92:4b:e6:ba:e1:1d:af:3c:8c:ef:40:fb:0a:0f:3a:4f:53:
0e:6c:38:22:07:9d:d5:23:64:f3:2a:81:f1:52:1e:b7:35:f8:
61:70:68:92:f2:61:26:d1:40:e2:a4:4f:cb:fe:f8:a9:42:e1:
e0:8b:c5:7b:72:57:31:94:0b:0f:7f:56:6f:cd:91:00:44:5e:
0b:97:7a:aa:82:ac:4e:38:a2:18:bc:ca:29:04:61:6b:7d:60:
7d:50:ff:ca:5c:06:5a:e3:b9:a1:15:68:c5:8a:23:38:cb:d1:
1d:c4:b7:5a:5e:d3:92:13:70:45:32:5d:b8:c5:14:7c:3c:97:
d8:46:f1:cd:c3:d6:90:eb:f3:6e:5b:9b:5b:67:30:f5:e4:68:
d2:86:5e:d0:34:99:2b:27:45:dd:ca:be:e8:b6:e8:1e:e7:0e:
05:0e:3a:53:f1:55:a3:d4:1d:3a:31:7c:19:72:c0:d4:4b:e5:
dd:64:6c:4e:ce:df:b8:90:83:ca:5f:64:e2:20:eb:10:e5:26:
53:aa:bb:70:68:0c:e0:0d:80:d4:50:0b:06:11:80:d9:77:d0:
37:d6:bc:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 15:31:29 2025 by rpki-client