Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/88eae8-4b86-4389-aadb-c257792dadc4/1/YtSu06eBvsaI_VOFmqz1IslXnNc.roa
File: YtSu06eBvsaI_VOFmqz1IslXnNc.roa (raw, json)
Hash identifier: 0dn7VD8ICYAbfWAEObXxBVJEjbsCWfJ8U7nwROGAGsU=
Subject key identifier: 62:D4:AE:D3:A7:81:BE:C6:88:FD:53:85:9A:AC:F5:22:C9:57:9C:D7
Certificate issuer: /CN=c84d61cd17ed92e54bb3397f1e5a6b3904ac6f05
Certificate serial: 019427485DB3F1755AA5B3747EFCFA105B8E
Authority key identifier: C8:4D:61:CD:17:ED:92:E5:4B:B3:39:7F:1E:5A:6B:39:04:AC:6F:05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yE1hzRftkuVLszl_HlprOQSsbwU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/88eae8-4b86-4389-aadb-c257792dadc4/1/YtSu06eBvsaI_VOFmqz1IslXnNc.roa
Signing time: Thu 02 Jan 2025 13:50:41 +0000
ROA not before: Thu 02 Jan 2025 13:50:41 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 39537
IP address blocks: 31.210.128.0/21 maxlen: 24
37.35.88.0/21 maxlen: 24
45.145.180.0/22 maxlen: 24
87.237.64.0/21 maxlen: 24
93.95.8.0/21 maxlen: 24
94.190.240.0/21 maxlen: 24
94.199.184.0/21 maxlen: 24
109.69.80.0/21 maxlen: 24
151.236.208.0/21 maxlen: 24
185.11.240.0/22 maxlen: 24
185.31.252.0/22 maxlen: 24
185.33.184.0/22 maxlen: 24
185.49.236.0/22 maxlen: 24
185.68.0.0/22 maxlen: 24
185.71.24.0/22 maxlen: 24
185.122.216.0/22 maxlen: 24
195.94.112.0/20 maxlen: 24
2a00:e620::/32 maxlen: 36
2a01:500::/29 maxlen: 32
2a01:b280::/29 maxlen: 36
2a03:25e0::/32 maxlen: 36
2a04:5ac0::/29 maxlen: 36
2a0a:fd80::/29 maxlen: 36
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:5d:b3:f1:75:5a:a5:b3:74:7e:fc:fa:10:5b:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c84d61cd17ed92e54bb3397f1e5a6b3904ac6f05
Validity
Not Before: Jan 2 13:50:41 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=62d4aed3a781bec688fd53859aacf522c9579cd7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:f8:75:67:10:a3:a5:e2:2f:cf:ce:fc:4b:54:
c8:bd:1f:ab:ac:68:59:9b:0c:e7:83:ef:80:6a:0c:
83:0b:38:c9:01:18:92:5b:4e:d5:92:48:ac:cc:66:
51:aa:44:60:cc:8d:34:10:2c:6e:c6:8f:99:fa:c5:
96:a6:ad:43:07:54:5e:1f:c6:fd:34:8a:3c:74:dc:
a3:65:f2:f0:6e:7b:e8:20:07:aa:66:df:80:3d:99:
bd:84:1a:09:a5:92:b0:1d:bd:76:d6:63:86:26:d9:
cd:84:af:bd:66:00:04:50:85:53:8f:6a:83:1d:f3:
8a:4c:27:8f:54:16:0f:e6:5d:e6:73:e5:33:c3:bf:
6c:21:cf:56:db:d1:36:bc:24:86:1a:bb:86:d4:b2:
b3:d5:49:87:73:58:5d:cb:f2:bd:63:02:81:99:a8:
0c:4c:8e:81:32:90:b3:a9:74:7e:1a:32:ed:4b:34:
53:22:cb:01:ff:06:94:49:70:cf:50:ad:f9:53:da:
0d:f3:cc:ca:74:4b:e2:99:fd:db:08:fb:33:3b:b2:
ca:80:d7:6c:e5:3b:77:c3:b4:db:9b:ac:f5:c5:70:
3a:7c:84:8d:b5:be:48:e4:66:d7:c2:7e:db:c7:39:
c1:34:27:c4:cc:9c:6a:e4:9c:52:60:6e:d2:c6:7d:
6a:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:D4:AE:D3:A7:81:BE:C6:88:FD:53:85:9A:AC:F5:22:C9:57:9C:D7
X509v3 Authority Key Identifier:
keyid:C8:4D:61:CD:17:ED:92:E5:4B:B3:39:7F:1E:5A:6B:39:04:AC:6F:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yE1hzRftkuVLszl_HlprOQSsbwU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/88eae8-4b86-4389-aadb-c257792dadc4/1/YtSu06eBvsaI_VOFmqz1IslXnNc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/88eae8-4b86-4389-aadb-c257792dadc4/1/yE1hzRftkuVLszl_HlprOQSsbwU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.210.128.0/21
37.35.88.0/21
45.145.180.0/22
87.237.64.0/21
93.95.8.0/21
94.190.240.0/21
94.199.184.0/21
109.69.80.0/21
151.236.208.0/21
185.11.240.0/22
185.31.252.0/22
185.33.184.0/22
185.49.236.0/22
185.68.0.0/22
185.71.24.0/22
185.122.216.0/22
195.94.112.0/20
IPv6:
2a00:e620::/32
2a01:500::/29
2a01:b280::/29
2a03:25e0::/32
2a04:5ac0::/29
2a0a:fd80::/29
Signature Algorithm: sha256WithRSAEncryption
4a:3c:af:df:26:80:74:56:ed:37:a0:ca:3f:81:7c:d7:fc:1e:
d5:c8:e1:5a:45:ba:3d:40:f3:28:7e:c0:6b:ec:42:6a:1f:25:
00:0d:79:24:48:7a:2f:b9:6e:8e:07:16:b6:9f:c9:88:39:38:
0c:62:3f:89:44:1d:4a:65:d1:0e:38:67:38:17:dc:92:1a:f8:
12:ef:13:d9:38:70:22:40:8a:a8:e8:2c:c7:b7:88:68:66:c4:
ce:1f:64:4c:db:f1:62:93:08:49:87:af:9f:8d:8a:fd:35:91:
87:4c:62:ea:1e:15:de:4a:38:09:26:a4:ca:f2:03:2e:75:df:
c1:8b:66:c5:59:68:6c:1b:08:38:79:23:25:09:3c:85:5d:d2:
3c:33:dd:b6:7e:e8:e9:4d:91:58:c5:6b:e6:50:44:6b:b0:6b:
b1:ad:40:52:05:b4:41:dd:54:a1:5e:48:ad:59:f8:6b:21:e4:
3a:ea:28:d2:bb:da:85:53:56:de:37:78:ee:7e:49:09:a6:3f:
ce:23:2c:e7:57:87:3a:87:5a:ca:52:fe:fb:f2:6b:9e:74:ff:
ef:02:7b:9c:47:f2:7b:4a:ac:7c:40:e2:7f:cd:92:64:47:f6:
15:cd:0f:d0:88:ad:20:b6:96:a7:bb:c3:24:63:aa:f5:c3:82:
c9:74:fe:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 18:19:34 2025 by rpki-client