Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/025122-5b87-40de-858b-0731a526211d/1/yZQLTG006ORc8tk2gGHyZ6awP7Q.roa
File: yZQLTG006ORc8tk2gGHyZ6awP7Q.roa (raw, json)
Hash identifier: 84awqjTnHIBVa1ApUtn31gmrV6IcAiTBMv8779q2a2Q=
Subject key identifier: C9:94:0B:4C:6D:34:E8:E4:5C:F2:D9:36:80:61:F2:67:A6:B0:3F:B4
Certificate issuer: /CN=85bb7b75b26dfe13e8583ea7c1ae621944c8ce30
Certificate serial: 01857067420073098243D80F747185CE8475
Authority key identifier: 85:BB:7B:75:B2:6D:FE:13:E8:58:3E:A7:C1:AE:62:19:44:C8:CE:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hbt7dbJt_hPoWD6nwa5iGUTIzjA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/025122-5b87-40de-858b-0731a526211d/1/yZQLTG006ORc8tk2gGHyZ6awP7Q.roa
Signing time: Mon 02 Jan 2023 02:54:53 +0000
ROA not before: Mon 02 Jan 2023 02:54:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 398464
IP address blocks: 194.26.202.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:67:42:00:73:09:82:43:d8:0f:74:71:85:ce:84:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85bb7b75b26dfe13e8583ea7c1ae621944c8ce30
Validity
Not Before: Jan 2 02:54:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c9940b4c6d34e8e45cf2d9368061f267a6b03fb4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:53:50:bf:99:35:75:92:54:07:7d:76:4e:f9:
e5:56:ba:41:92:d9:c2:3f:62:60:23:03:32:da:97:
e8:8d:ac:04:c6:54:4a:c4:a4:e8:52:69:bc:2d:ab:
e6:ac:e6:32:22:53:66:3c:49:89:05:45:5f:35:0e:
f0:08:99:61:ea:4d:3a:40:73:42:71:d7:f8:ba:d4:
6c:fb:b8:5c:99:2d:1b:da:7d:7f:1f:c1:7b:7e:0a:
52:67:24:e8:09:bf:9a:d4:19:f7:e0:55:1e:92:03:
fc:b3:c0:db:a0:75:90:ef:52:a7:5e:25:b6:75:57:
0d:99:89:c4:65:3f:67:3c:fa:b7:da:4f:c5:08:db:
2c:28:4b:f6:42:5e:36:6c:a9:de:c5:72:81:73:88:
ae:90:fc:62:aa:c1:69:d3:4d:09:2d:27:0b:f4:86:
9b:06:18:09:6a:c6:0d:13:1d:4b:08:88:62:18:55:
52:02:3c:99:f9:a6:fa:d5:7d:8f:b9:d2:75:1f:ca:
02:c1:91:e1:ee:fd:ba:30:ae:33:78:fa:ea:70:b1:
49:ba:c7:da:a5:ea:78:e3:5c:a1:0f:05:c6:89:3e:
2b:25:fe:d7:14:cf:50:c8:16:ed:49:a0:eb:f7:ce:
7f:78:89:5c:5d:65:c0:30:04:1a:a9:83:6f:9e:0a:
0a:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:94:0B:4C:6D:34:E8:E4:5C:F2:D9:36:80:61:F2:67:A6:B0:3F:B4
X509v3 Authority Key Identifier:
keyid:85:BB:7B:75:B2:6D:FE:13:E8:58:3E:A7:C1:AE:62:19:44:C8:CE:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hbt7dbJt_hPoWD6nwa5iGUTIzjA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/025122-5b87-40de-858b-0731a526211d/1/yZQLTG006ORc8tk2gGHyZ6awP7Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/025122-5b87-40de-858b-0731a526211d/1/hbt7dbJt_hPoWD6nwa5iGUTIzjA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.26.202.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:52:c0:c0:54:da:f0:c4:e4:5f:f5:b3:cb:db:67:f0:a0:77:
bb:a7:55:4c:45:35:a7:44:d4:89:76:cb:13:51:63:d7:45:a1:
02:98:2a:49:ed:08:7b:b1:23:b6:64:6f:14:5b:3a:d3:19:d1:
d6:a4:25:44:05:2e:33:4e:66:6e:87:ea:fe:64:7d:51:a8:b4:
b7:86:1b:90:82:f0:c9:79:bc:12:c2:d5:40:1b:5b:04:e3:22:
22:00:b3:6d:6d:77:27:fc:d0:41:55:83:eb:29:e3:01:d9:73:
26:db:2a:69:85:15:f7:5c:5a:c3:a4:69:0c:99:f7:0a:ac:43:
8d:b6:63:75:50:64:c9:0d:07:eb:8e:ed:ea:43:d1:f9:5e:28:
13:f6:10:95:3f:22:9c:05:56:de:93:d8:36:61:67:61:3a:20:
cc:1d:9d:3f:62:e9:41:6e:b3:0d:6e:25:73:8a:b4:27:47:e7:
d0:99:b9:2d:3c:16:55:38:3f:f6:18:b4:74:90:f6:4b:60:87:
52:77:eb:28:96:f7:f9:94:59:fc:b3:ed:5f:b9:62:f4:91:d5:
17:06:31:5a:f8:2e:40:04:84:27:69:6d:58:59:69:19:13:ee:
43:db:cd:5b:fe:3d:d3:4b:1d:fe:88:90:af:1a:35:ec:25:b6:
7b:4e:d9:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:13:11 2025 by rpki-client