Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/492c8d-61a9-4804-9b05-c39c2cdc8362/1/Y4M02NjeW7DldjUvfZR_ymuxISc.roa
File: Y4M02NjeW7DldjUvfZR_ymuxISc.roa (raw, json)
Hash identifier: YMDoTAS9ZcbvID2GafVFk/2kZWTGFZXflAp5CAmBDZs=
Subject key identifier: 63:83:34:D8:D8:DE:5B:B0:E5:76:35:2F:7D:94:7F:CA:6B:B1:21:27
Certificate issuer: /CN=bc075a22749762ecaaff9cbc217b82f17269e362
Certificate serial: 01941F8C6B2C32CB6B28F88D0C7AFB4DBD9F
Authority key identifier: BC:07:5A:22:74:97:62:EC:AA:FF:9C:BC:21:7B:82:F1:72:69:E3:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vAdaInSXYuyq_5y8IXuC8XJp42I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/492c8d-61a9-4804-9b05-c39c2cdc8362/1/Y4M02NjeW7DldjUvfZR_ymuxISc.roa
Signing time: Wed 01 Jan 2025 01:48:03 +0000
ROA not before: Wed 01 Jan 2025 01:48:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210728
IP address blocks: 213.173.39.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:6b:2c:32:cb:6b:28:f8:8d:0c:7a:fb:4d:bd:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc075a22749762ecaaff9cbc217b82f17269e362
Validity
Not Before: Jan 1 01:48:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=638334d8d8de5bb0e576352f7d947fca6bb12127
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:34:f6:94:62:02:4c:92:1d:0a:33:91:f3:5e:
29:51:71:60:6a:8f:bb:6b:bc:dd:cf:a2:08:e2:c9:
11:3d:c6:34:81:fe:2d:50:25:ba:57:04:44:90:cf:
2a:ec:f8:8b:18:3a:b7:69:b0:df:06:84:7b:b7:4f:
8e:8a:a6:08:f3:0c:48:6d:5b:05:d4:5c:23:7e:23:
a3:0b:ad:2c:47:22:2c:7d:5b:d6:c0:14:6b:49:96:
1d:18:22:2d:a4:96:ae:f7:e9:dd:1d:a6:dc:a8:c4:
a3:39:34:2c:46:2e:d4:fb:68:6a:25:ef:34:22:92:
5c:64:66:c3:65:29:1f:a9:16:ec:d1:dd:df:ba:dc:
09:3f:d4:d2:9e:d9:33:49:1b:a2:11:fd:09:44:30:
b4:1e:de:19:16:43:a2:cb:77:d9:d1:b2:96:87:c4:
09:75:9b:df:b2:19:65:6c:44:3d:af:cc:df:75:17:
04:6e:ad:71:83:e3:49:f2:71:b9:96:4d:62:de:a1:
a6:1e:af:1c:7b:90:1e:92:d7:c1:46:6e:74:4c:f3:
37:d2:8b:67:44:5d:f5:4f:fb:b8:00:32:b5:be:a2:
71:3d:7f:21:6d:d0:4d:f0:cc:44:71:39:cd:c3:54:
85:d1:a0:0b:f1:49:77:3c:58:c1:c6:43:15:89:d4:
77:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:83:34:D8:D8:DE:5B:B0:E5:76:35:2F:7D:94:7F:CA:6B:B1:21:27
X509v3 Authority Key Identifier:
keyid:BC:07:5A:22:74:97:62:EC:AA:FF:9C:BC:21:7B:82:F1:72:69:E3:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vAdaInSXYuyq_5y8IXuC8XJp42I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/492c8d-61a9-4804-9b05-c39c2cdc8362/1/Y4M02NjeW7DldjUvfZR_ymuxISc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/492c8d-61a9-4804-9b05-c39c2cdc8362/1/vAdaInSXYuyq_5y8IXuC8XJp42I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.173.39.0/24
Signature Algorithm: sha256WithRSAEncryption
84:a3:99:2b:3d:fb:b8:76:3f:2c:7e:39:95:76:26:35:fc:5c:
15:96:8f:7e:ed:1a:40:9d:97:15:e0:8e:76:7f:89:11:0f:8c:
6b:4c:54:9e:7b:eb:c2:f3:c9:2f:62:1a:c6:c0:6d:93:c4:bb:
96:01:32:d0:33:63:75:dc:6c:c2:56:45:60:4e:4d:cb:85:93:
e3:67:dd:7e:5c:5c:4f:9f:c0:72:01:c5:7f:57:08:45:27:5c:
64:d7:a7:a4:cf:6f:1a:4d:73:2e:0c:89:fd:ba:72:2c:ea:7b:
df:3d:88:4b:e1:22:24:0e:fc:97:58:da:b4:cd:08:66:ee:fe:
23:20:ab:0c:ea:7d:55:32:f8:c5:00:b2:d8:08:3c:10:25:6d:
0d:10:25:b0:ff:b5:da:25:8e:da:ab:ff:6f:fc:e7:94:6b:56:
3f:3f:d5:e6:9c:cb:15:60:67:0e:2a:cd:fa:86:b8:10:e0:57:
5e:14:60:2d:d5:98:e8:1c:43:be:7b:06:ca:bd:46:45:ef:9b:
11:0f:48:e6:79:34:1f:60:e5:52:74:09:c9:a4:11:43:b3:f1:
96:e6:c9:73:61:f9:a4:64:04:87:2c:a4:39:f9:23:e8:81:46:
10:d6:65:dc:b9:f1:e4:9e:c4:7b:e2:b4:7f:8d:fc:0a:7e:cb:
be:7d:90:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:57:48 2025 by rpki-client