Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/yu0xzmtTaKriJ_lJy_NBnyWIzqA.roa
File: yu0xzmtTaKriJ_lJy_NBnyWIzqA.roa (raw, json)
Hash identifier: XsEweA5pD1Iz/gu3+nPQTgRbGjSO3CAZOJUp7c8jfRo=
Subject key identifier: CA:ED:31:CE:6B:53:68:AA:E2:27:F9:49:CB:F3:41:9F:25:88:CE:A0
Certificate issuer: /CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
Certificate serial: 019427B5944A8D6A1A6782499FD4837E51DD
Authority key identifier: EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/yu0xzmtTaKriJ_lJy_NBnyWIzqA.roa
Signing time: Thu 02 Jan 2025 15:49:58 +0000
ROA not before: Thu 02 Jan 2025 15:49:58 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8492
IP address blocks: 5.8.17.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:94:4a:8d:6a:1a:67:82:49:9f:d4:83:7e:51:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
Validity
Not Before: Jan 2 15:49:58 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=caed31ce6b5368aae227f949cbf3419f2588cea0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:55:59:76:66:44:50:62:1a:54:bb:7d:3c:29:
9f:e3:1d:c9:6f:76:06:21:0d:89:bb:c3:40:1b:e3:
92:a4:2b:e6:8b:60:90:b2:bb:37:9d:3e:8c:c6:f0:
ab:31:f7:67:9a:46:81:fa:89:74:1f:e5:a6:b9:53:
ad:69:1d:da:ec:fa:9a:01:91:31:d4:8b:04:ef:02:
e4:eb:c2:b8:78:45:3f:e9:b2:c1:af:f8:09:70:94:
69:df:70:a5:2a:7a:68:2e:6b:98:c5:ee:17:dd:bc:
e3:db:98:4e:a9:9a:81:6d:87:a5:20:92:28:3d:24:
40:94:73:f9:5c:5f:09:60:3b:cf:35:c2:82:f1:8f:
f6:8e:3f:b4:f1:a9:b7:77:84:f4:e8:19:3b:ed:0d:
91:a6:4a:0c:29:c7:8b:88:26:09:86:3e:9d:af:fb:
8b:31:b4:f3:fd:63:b2:67:a5:d8:ef:6b:b9:5a:d1:
40:8f:25:e7:91:d0:f8:db:80:7c:0d:2d:2c:33:86:
0d:a7:98:97:64:f7:15:ee:5e:c3:fc:3e:aa:87:93:
e7:91:ca:7b:fe:74:a7:19:fe:6c:dd:25:c1:77:3b:
f8:57:94:1c:c5:ca:5f:b8:b0:04:dd:15:57:ff:9c:
ae:f2:95:e1:4e:e5:53:77:4c:06:c4:9b:05:dd:e4:
67:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:ED:31:CE:6B:53:68:AA:E2:27:F9:49:CB:F3:41:9F:25:88:CE:A0
X509v3 Authority Key Identifier:
keyid:EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/yu0xzmtTaKriJ_lJy_NBnyWIzqA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.8.17.0/24
Signature Algorithm: sha256WithRSAEncryption
28:d4:8c:31:d5:44:52:db:01:92:6d:b5:26:4a:b4:08:4e:bb:
3f:b8:22:98:e8:c1:b4:d0:90:3a:89:a3:91:e4:45:63:c7:b0:
e3:fd:f7:7b:16:c5:86:d9:08:96:1a:8e:c1:7a:c2:9a:8e:33:
1a:d9:84:ca:47:36:d4:80:58:48:75:45:bb:9c:27:a1:7a:38:
17:1c:57:a2:b6:76:dc:b9:9d:84:9e:f1:57:b7:b8:77:9c:c9:
f2:cc:7b:fa:38:f6:d0:8c:5d:a3:46:48:a5:5c:65:85:66:3c:
0e:00:09:1b:87:ad:63:57:c5:78:1a:e6:ec:c1:2a:f0:61:cf:
cf:a0:ed:64:67:2f:c9:fe:dc:3b:c0:b6:a7:bf:0c:6d:6f:23:
91:6c:04:b4:6a:34:56:ef:b7:cf:d4:1f:a1:98:fb:74:07:39:
e4:50:50:54:8e:d9:55:ab:d7:ac:d8:56:59:37:11:bf:3f:91:
00:3f:11:1d:73:e9:02:d1:c5:52:bf:70:f1:65:cb:d1:82:70:
6d:bc:e4:d1:e2:d3:bb:30:2f:9e:7c:a1:a5:d4:f7:78:64:1b:
22:85:60:55:4c:6f:39:d9:57:22:c9:13:f7:7f:68:0b:cb:85:
6d:61:71:5c:a4:9d:7c:e4:96:d4:0d:71:9a:65:d9:c8:77:82:
b4:61:3c:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 11:36:38 2025 by rpki-client