Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/c991ef-84b4-496f-a856-5ce4d8dbd159/1/y5tzb01k1PpQPPhZNGuxqy5H_jE.roa
File: y5tzb01k1PpQPPhZNGuxqy5H_jE.roa (raw, json)
Hash identifier: 6SFQda12ho7/2/R+Mhk8bos1CKCU4ablq0g73XEsqaQ=
Subject key identifier: CB:9B:73:6F:4D:64:D4:FA:50:3C:F8:59:34:6B:B1:AB:2E:47:FE:31
Certificate issuer: /CN=1e65ede3b6aae7475c354b1e9b84d6a7832b077b
Certificate serial: 01942444889FEBAC31BF28DC066B8BC9EAE0
Authority key identifier: 1E:65:ED:E3:B6:AA:E7:47:5C:35:4B:1E:9B:84:D6:A7:83:2B:07:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HmXt47aq50dcNUsem4TWp4MrB3s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/c991ef-84b4-496f-a856-5ce4d8dbd159/1/y5tzb01k1PpQPPhZNGuxqy5H_jE.roa
Signing time: Wed 01 Jan 2025 23:47:38 +0000
ROA not before: Wed 01 Jan 2025 23:47:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51088
IP address blocks: 193.53.249.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:44:88:9f:eb:ac:31:bf:28:dc:06:6b:8b:c9:ea:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e65ede3b6aae7475c354b1e9b84d6a7832b077b
Validity
Not Before: Jan 1 23:47:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cb9b736f4d64d4fa503cf859346bb1ab2e47fe31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:d9:9b:24:c6:1e:f0:07:4c:73:c7:fe:fc:c0:
67:61:0f:92:05:e4:1e:30:96:ae:78:b3:37:8f:88:
41:2e:61:cf:eb:e2:03:da:95:31:a0:b0:d5:68:7f:
eb:b3:70:af:02:eb:66:2f:8e:43:51:02:78:2e:6c:
9a:a1:f2:c9:4f:db:ba:bb:8d:e7:77:0c:d5:6f:ce:
09:04:fa:cc:04:0d:6d:91:d0:af:7d:a8:de:3e:57:
e2:c3:3c:2b:24:3e:d5:4b:4a:ca:11:dc:3d:64:25:
b6:fb:55:4f:1f:10:d9:8c:23:98:e7:1c:24:83:a2:
62:a3:da:cf:ba:68:4f:2a:67:fd:10:98:94:6a:29:
4e:21:99:03:33:c1:9a:52:b3:dc:81:9e:ad:93:cd:
d0:14:5c:37:e6:7d:b8:67:80:1b:ba:ae:a9:79:91:
36:d2:88:91:6a:a6:f8:50:b8:a7:82:c6:29:8a:89:
5a:25:24:e7:16:0d:da:df:7f:8a:04:a2:76:65:b4:
40:e8:65:b8:21:29:58:3f:05:80:b4:e0:c6:ac:4d:
1c:0f:e1:61:d8:f9:98:b0:65:5e:d2:71:e7:d7:b8:
8a:41:39:0c:9f:e5:bc:76:85:c9:e8:c5:88:f4:a1:
5a:84:3c:f7:4e:93:50:05:96:d4:df:8c:f6:0e:44:
9d:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:9B:73:6F:4D:64:D4:FA:50:3C:F8:59:34:6B:B1:AB:2E:47:FE:31
X509v3 Authority Key Identifier:
keyid:1E:65:ED:E3:B6:AA:E7:47:5C:35:4B:1E:9B:84:D6:A7:83:2B:07:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HmXt47aq50dcNUsem4TWp4MrB3s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/c991ef-84b4-496f-a856-5ce4d8dbd159/1/y5tzb01k1PpQPPhZNGuxqy5H_jE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/c991ef-84b4-496f-a856-5ce4d8dbd159/1/HmXt47aq50dcNUsem4TWp4MrB3s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.53.249.0/24
Signature Algorithm: sha256WithRSAEncryption
aa:67:49:fe:8a:cf:ec:39:44:c2:36:d7:34:aa:17:ac:ef:55:
0f:7a:4f:aa:81:6d:b5:08:12:16:1f:a4:3b:09:2b:b1:04:54:
eb:eb:57:59:d0:3c:ef:df:c1:e9:60:43:5d:dc:eb:84:22:79:
be:3a:01:6d:fc:10:bd:82:ba:21:7c:bd:df:34:a7:b6:27:06:
6b:ec:f1:89:cb:de:02:24:3c:7f:64:1c:47:e0:09:09:d1:93:
5c:0c:03:32:88:3f:33:e8:19:e5:96:13:8e:43:87:29:b2:02:
0f:3b:c4:af:9e:02:91:e2:e3:f0:cc:8d:3f:73:bb:93:6e:16:
22:16:68:bf:ea:8f:16:1b:a0:59:c2:af:08:bd:6e:60:37:00:
db:24:a2:f0:f5:8f:b6:a0:fd:f9:d2:70:2f:f6:a6:4e:34:d4:
03:3a:5b:7e:bf:b0:8a:9e:1d:d1:4c:6e:2c:9e:6b:1f:a8:b4:
00:b1:8f:83:a5:bf:95:d1:12:dd:32:1c:45:0a:46:bf:d5:11:
f2:1e:f4:fa:b5:f0:d0:f3:e6:46:3e:2e:90:db:c3:84:59:8a:
22:37:77:d2:05:bb:e7:c6:0b:e6:57:a1:3e:63:f5:09:95:54:
30:d5:a6:7f:d3:35:a3:0d:0a:3a:a3:55:0d:c5:7a:38:57:af:
a3:64:f3:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 13:23:19 2025 by rpki-client