Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/2ae6a0-0d6b-4843-a48e-7cd80135cc72/1/Yh7_7WlmuOXv4YP0_a1U25oKTco.roa
File: Yh7_7WlmuOXv4YP0_a1U25oKTco.roa (raw, json)
Hash identifier: srIq1419PyM6F2ASJ4Wrd6J4qQDJdQrKOc6kXJUDjCs=
Subject key identifier: 62:1E:FF:ED:69:66:B8:E5:EF:E1:83:F4:FD:AD:54:DB:9A:0A:4D:CA
Certificate issuer: /CN=c82f486a7d9de0af491a878ad3b3dd4491c24b28
Certificate serial: 018673CAD201868945A8CD39D017E10CAD19
Authority key identifier: C8:2F:48:6A:7D:9D:E0:AF:49:1A:87:8A:D3:B3:DD:44:91:C2:4B:28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yC9Ian2d4K9JGoeK07PdRJHCSyg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/2ae6a0-0d6b-4843-a48e-7cd80135cc72/1/Yh7_7WlmuOXv4YP0_a1U25oKTco.roa
Signing time: Tue 21 Feb 2023 11:45:17 +0000
ROA not before: Tue 21 Feb 2023 11:45:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207279
IP address blocks: 193.9.124.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:73:ca:d2:01:86:89:45:a8:cd:39:d0:17:e1:0c:ad:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c82f486a7d9de0af491a878ad3b3dd4491c24b28
Validity
Not Before: Feb 21 11:45:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=621effed6966b8e5efe183f4fdad54db9a0a4dca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:72:ef:0e:0a:e7:ec:34:05:b8:df:c0:b0:2b:
72:32:92:44:67:e2:3e:a9:6a:af:6e:16:91:6f:2c:
25:18:0c:f3:80:54:ed:71:93:c0:0c:89:2c:f3:6a:
28:2d:49:75:4f:27:be:60:68:83:74:23:f0:21:73:
1e:fd:26:9a:1c:e1:df:ce:4d:12:57:39:cf:01:7a:
ba:94:a5:43:a9:ab:9a:b8:e9:c4:ed:63:24:52:ea:
f2:f9:bf:db:73:48:f3:77:32:ae:5c:f4:b5:dd:97:
79:76:93:79:a2:b9:66:08:25:ac:6d:58:68:6d:5a:
e3:1b:cb:2b:d8:88:e5:21:2d:d0:d2:c9:f2:6e:19:
eb:af:f6:03:87:c7:81:86:13:5b:78:71:3d:31:a1:
cb:be:1e:4c:ce:ef:ac:8c:cb:56:bc:11:12:85:34:
5b:54:3f:bb:55:2c:2e:3d:ad:8d:ac:0c:a9:05:20:
fa:d0:3e:18:68:ff:07:85:39:94:82:57:1a:85:83:
54:00:d8:91:a2:4a:bd:d2:78:94:7f:85:53:1c:16:
4a:be:f8:7e:e3:fa:b7:db:64:98:dd:91:f4:84:01:
bc:dc:20:5d:8e:61:49:4f:60:bb:10:ab:e5:b1:07:
2b:2f:44:b4:6b:59:07:68:79:22:2a:a3:90:f1:d6:
96:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:1E:FF:ED:69:66:B8:E5:EF:E1:83:F4:FD:AD:54:DB:9A:0A:4D:CA
X509v3 Authority Key Identifier:
keyid:C8:2F:48:6A:7D:9D:E0:AF:49:1A:87:8A:D3:B3:DD:44:91:C2:4B:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yC9Ian2d4K9JGoeK07PdRJHCSyg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2ae6a0-0d6b-4843-a48e-7cd80135cc72/1/Yh7_7WlmuOXv4YP0_a1U25oKTco.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2ae6a0-0d6b-4843-a48e-7cd80135cc72/1/yC9Ian2d4K9JGoeK07PdRJHCSyg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.9.124.0/24
Signature Algorithm: sha256WithRSAEncryption
79:44:a0:31:ca:a6:62:91:05:69:75:1c:74:3c:57:8c:a5:ca:
7d:12:b1:f5:a0:97:64:ff:6d:b2:63:c2:7c:f4:80:30:64:a1:
da:5b:cf:15:3f:7d:68:d0:ce:fe:33:50:df:4b:36:04:ac:41:
7f:52:d7:f9:ea:a1:96:dd:17:83:93:16:11:a2:d7:71:1a:f6:
4e:ee:06:8b:c4:8c:f8:db:3f:66:d3:b1:f3:6c:c9:7a:da:45:
67:97:2b:a8:3e:48:29:1a:bc:fe:69:5d:3c:14:b8:bf:03:de:
5d:a9:4d:75:2a:0d:57:48:7b:b6:8d:ea:ad:e4:0e:6a:4f:e3:
2a:5a:2b:8d:ad:97:f4:85:a0:2a:79:33:c6:66:6a:f5:f5:dc:
b0:aa:e6:7d:5c:19:59:05:d7:c0:e1:ac:05:47:ec:87:49:3c:
cb:da:47:76:28:49:5e:b7:17:95:ad:9b:f8:73:6d:51:e1:c4:
77:ba:8d:8d:a9:1a:80:95:1d:1f:21:07:a9:e6:49:d2:6f:39:
f0:09:ac:58:a7:e5:6c:d6:c9:fe:9d:f4:8f:65:19:02:a2:16:
32:39:df:7f:10:6e:fa:65:fe:c1:8d:48:9f:30:a6:18:e2:20:
ae:0a:d5:7c:a7:9b:5c:f5:df:31:77:b3:db:f8:9e:2b:db:9e:
e5:4d:7b:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 11:36:30 2025 by rpki-client