Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/yKTPLu22S9rj03xE3J6Zev0TkTs.roa
File: yKTPLu22S9rj03xE3J6Zev0TkTs.roa (raw, json)
Hash identifier: fyy/FEdShpSGZ+nWPR3utDR6Fh8bg5RKQoThlQxC0YI=
Subject key identifier: C8:A4:CF:2E:ED:B6:4B:DA:E3:D3:7C:44:DC:9E:99:7A:FD:13:91:3B
Certificate issuer: /CN=d08da9cf00d4d58b854ffc62010f235b06df354a
Certificate serial: 0193BF832483B0681DDBA35A2264BE6E8075
Authority key identifier: D0:8D:A9:CF:00:D4:D5:8B:85:4F:FC:62:01:0F:23:5B:06:DF:35:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/yKTPLu22S9rj03xE3J6Zev0TkTs.roa
Signing time: Fri 13 Dec 2024 10:14:22 +0000
ROA not before: Fri 13 Dec 2024 10:14:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 5511
IP address blocks: 194.38.49.0/24 maxlen: 24
194.38.51.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:bf:83:24:83:b0:68:1d:db:a3:5a:22:64:be:6e:80:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d08da9cf00d4d58b854ffc62010f235b06df354a
Validity
Not Before: Dec 13 10:14:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c8a4cf2eedb64bdae3d37c44dc9e997afd13913b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:53:f8:8c:5a:4f:4d:56:fe:f4:9c:bb:76:ea:
38:58:7d:bb:8e:89:ca:f2:82:79:70:bd:b1:33:79:
91:54:be:db:8e:7a:05:62:ad:28:64:a1:33:a6:b2:
2a:08:a8:e3:ed:b0:a5:3d:5d:13:ec:9f:1b:92:a4:
55:bb:eb:35:ae:40:8c:44:0b:2b:0d:03:e8:54:84:
34:8b:a7:93:55:52:3f:9e:27:30:f6:d7:7a:03:e9:
60:8f:d6:d3:06:39:65:aa:49:15:30:63:4e:42:b6:
25:c1:78:93:1d:41:b5:47:76:dd:66:0d:02:20:fb:
b9:1a:1b:78:b4:66:36:12:e8:47:03:25:1e:2a:5f:
5c:91:23:73:42:2d:1e:d1:1e:e7:ff:6c:42:1d:43:
e5:20:39:3c:08:93:fe:19:53:ef:f3:c2:65:67:de:
ac:85:52:d4:8b:3d:b2:83:08:0c:49:01:77:ed:ea:
48:d1:de:d6:67:23:a1:82:ad:1d:00:c9:56:cc:06:
a1:76:1d:c5:b1:ef:b1:46:96:67:f3:c1:ba:4e:8f:
b9:0f:d5:82:79:e3:66:1d:62:1d:ff:85:f1:9d:ce:
7a:4d:f4:d6:fa:0e:3f:7e:fe:ff:6c:42:23:70:54:
b7:89:8c:1f:b2:d1:b6:15:bd:dd:35:b6:50:ac:06:
41:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:A4:CF:2E:ED:B6:4B:DA:E3:D3:7C:44:DC:9E:99:7A:FD:13:91:3B
X509v3 Authority Key Identifier:
keyid:D0:8D:A9:CF:00:D4:D5:8B:85:4F:FC:62:01:0F:23:5B:06:DF:35:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/yKTPLu22S9rj03xE3J6Zev0TkTs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.38.49.0/24
194.38.51.0/24
Signature Algorithm: sha256WithRSAEncryption
33:25:c5:ac:a2:de:8b:7d:ac:4f:21:c8:f7:b2:a3:f1:7a:77:
4e:00:e5:1b:61:94:41:38:6f:14:68:7e:01:56:3f:40:87:27:
6d:c3:f5:1a:92:b6:21:08:c2:2d:1a:3a:8a:9e:23:04:87:28:
04:1c:4f:8b:5c:a1:7b:4c:b7:a3:a1:dc:9d:65:d4:8b:49:3f:
d1:e3:89:6f:86:40:74:8b:b9:5e:41:fb:34:4a:e0:b9:6e:61:
d3:24:e7:70:c5:0d:d7:7d:39:a0:c0:98:78:a9:ed:9b:85:9a:
aa:14:30:da:31:a1:a6:3a:cf:d4:e3:81:e0:27:07:98:cc:af:
68:09:0a:01:1f:2a:69:74:a0:b3:b3:94:16:a8:b4:eb:28:b2:
17:d1:61:fc:1f:f1:2f:bb:63:25:28:98:d1:e9:c4:56:ef:24:
64:99:ea:38:65:01:9b:7f:a8:48:ec:13:61:f1:ba:3b:b9:42:
0b:30:d0:3b:81:a1:92:18:9f:77:04:85:54:f1:17:2b:ae:33:
e6:76:c0:14:9e:65:74:f1:7c:ff:67:59:94:82:04:ad:79:32:
81:42:c7:17:ff:85:83:61:b5:e0:1e:1e:9b:d2:45:9c:6e:96:
61:7c:0a:14:d9:78:dc:45:a5:f1:87:80:61:ff:d0:6f:7e:9f:
f2:c3:c4:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 19:08:43 2025 by rpki-client