Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/y74zxfc3T7TxFAzKOoJ3K2ImCgQ.roa
File: y74zxfc3T7TxFAzKOoJ3K2ImCgQ.roa (raw, json)
Hash identifier: 9cXqO6+RkqL3vFTAJ96TMt5j8uyMT6hOmvxxHIxVvmk=
Subject key identifier: CB:BE:33:C5:F7:37:4F:B4:F1:14:0C:CA:3A:82:77:2B:62:26:0A:04
Certificate issuer: /CN=d60475ebe7f07d74153cb1cca338c16d801f45f7
Certificate serial: 019426D864D15E0F93DA7B49A5EFA4B03CB6
Authority key identifier: D6:04:75:EB:E7:F0:7D:74:15:3C:B1:CC:A3:38:C1:6D:80:1F:45:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1gR16-fwfXQVPLHMozjBbYAfRfc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/y74zxfc3T7TxFAzKOoJ3K2ImCgQ.roa
Signing time: Thu 02 Jan 2025 11:48:23 +0000
ROA not before: Thu 02 Jan 2025 11:48:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 10010
IP address blocks: 94.74.184.0/24 maxlen: 24
94.74.185.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d8:64:d1:5e:0f:93:da:7b:49:a5:ef:a4:b0:3c:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d60475ebe7f07d74153cb1cca338c16d801f45f7
Validity
Not Before: Jan 2 11:48:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cbbe33c5f7374fb4f1140cca3a82772b62260a04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:4a:d4:85:28:47:f9:09:25:db:5b:39:e7:12:
9c:65:84:b6:20:6c:00:9c:a7:0f:02:4e:fc:09:ab:
c3:1e:e9:64:eb:3b:8d:c5:f3:34:fe:4b:e2:d5:51:
6c:d4:b0:57:3e:0f:54:94:aa:82:ab:3a:68:4a:14:
ec:7f:14:5a:ba:d3:96:1c:1e:5b:54:e8:c7:21:92:
d1:4b:20:00:7e:91:84:05:ff:f0:97:f7:ad:2b:62:
2e:69:26:f7:cb:a7:fd:c6:a3:d3:99:3c:c9:bf:1a:
73:04:53:f2:81:4e:3c:11:20:45:63:e8:8d:b9:4e:
11:2d:0b:51:2e:b2:92:98:05:34:ba:67:36:55:ca:
d3:7e:9a:16:f7:ba:3c:1a:42:cc:5a:35:0e:1d:16:
97:18:64:cd:c8:54:58:bd:e1:d6:59:f5:b9:f9:f0:
67:e8:22:d9:22:46:c8:da:d2:ad:a8:42:75:c3:5a:
d4:ba:45:ea:5a:8d:37:a4:cc:10:1c:e3:ae:52:a5:
63:7a:7e:43:04:53:5e:ee:3e:bd:18:32:43:87:99:
a8:d2:d5:a8:1f:50:6b:78:ff:32:3f:c1:de:9e:1d:
34:7e:a7:01:96:fb:fb:04:04:e1:fa:18:ab:36:19:
9f:bd:fa:71:c6:e6:a3:8b:63:c3:d2:6f:18:8a:66:
55:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:BE:33:C5:F7:37:4F:B4:F1:14:0C:CA:3A:82:77:2B:62:26:0A:04
X509v3 Authority Key Identifier:
keyid:D6:04:75:EB:E7:F0:7D:74:15:3C:B1:CC:A3:38:C1:6D:80:1F:45:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1gR16-fwfXQVPLHMozjBbYAfRfc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/y74zxfc3T7TxFAzKOoJ3K2ImCgQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/1gR16-fwfXQVPLHMozjBbYAfRfc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.74.184.0/23
Signature Algorithm: sha256WithRSAEncryption
01:b9:53:1c:8a:ef:1a:44:bc:7e:89:fb:66:a6:f0:18:8c:bc:
d7:4e:90:42:81:e3:dc:8b:6e:51:df:d6:0f:f2:ce:d9:4c:c2:
7e:ce:d7:9a:c0:b1:79:a1:7e:a0:8d:28:ff:b9:e5:b8:ba:09:
58:df:eb:56:25:07:35:a8:04:79:ec:67:da:30:50:6e:0d:81:
39:96:6d:ac:5c:49:6b:4f:90:60:85:d2:5e:13:b3:c5:25:56:
20:3c:42:a1:8b:1d:18:87:36:ec:91:80:51:67:7f:f9:a6:aa:
62:31:9e:2a:68:56:97:10:e1:d0:0b:76:db:35:fd:27:92:10:
2b:e5:37:77:d0:ae:96:b7:4a:b4:f8:07:64:76:a2:27:c4:7a:
86:b1:be:52:88:2f:23:bc:3c:83:2f:51:fb:db:fd:fb:fb:74:
42:fc:76:eb:a4:2c:52:f8:a6:50:b2:c7:68:42:6d:65:ba:6f:
1b:b4:1f:c1:45:44:ca:f7:ee:b0:db:fc:4b:e7:2e:b3:42:be:
17:e9:e0:28:01:dd:5a:f2:2b:75:a1:73:cc:c0:4a:35:58:be:
84:2a:88:8f:2c:41:9b:9b:bb:94:3c:24:0e:52:79:d7:8d:e7:
59:9c:1d:de:83:37:9a:53:0f:5d:b2:94:08:97:ea:67:95:4e:
0b:56:55:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 21:59:54 2025 by rpki-client