Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/YJOFhBw383worybBw3sM9COYwnc.roa
File: YJOFhBw383worybBw3sM9COYwnc.roa (raw, json)
Hash identifier: qeGZcJuMtsUGeBbfctITGo0a9iE8vQg2lv3ipKtWjDI=
Subject key identifier: 60:93:85:84:1C:37:F3:7C:28:AF:26:C1:C3:7B:0C:F4:23:98:C2:77
Certificate issuer: /CN=2663f3db152e055ac145bdbb429e018654204c8d
Certificate serial: 50CEC83F
Authority key identifier: 26:63:F3:DB:15:2E:05:5A:C1:45:BD:BB:42:9E:01:86:54:20:4C:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/YJOFhBw383worybBw3sM9COYwnc.roa
Signing time: Sat 01 Jan 2022 16:01:45 +0000
ROA not before: Sat 01 Jan 2022 16:01:45 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 29058
IP address blocks: 194.209.3.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1355728959 (0x50cec83f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2663f3db152e055ac145bdbb429e018654204c8d
Validity
Not Before: Jan 1 16:01:45 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=609385841c37f37c28af26c1c37b0cf42398c277
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:f1:e6:4c:81:01:2e:16:d0:6f:13:99:ea:aa:
b5:63:dc:8f:18:85:3e:a7:ef:78:65:c7:f7:fa:7b:
66:3c:c6:47:c3:b9:65:c3:b6:89:fd:99:66:46:5e:
ed:cd:21:5a:17:1a:89:70:20:61:9c:11:2f:7a:9e:
eb:d5:c8:c2:6f:fa:dc:f3:ea:11:df:47:57:fa:f1:
26:93:04:4a:a8:82:73:c5:46:c1:3d:1c:f4:4d:c4:
08:f2:d3:dc:c2:d6:49:81:db:47:a2:c7:c3:08:17:
c9:46:d1:c0:15:71:f2:fe:9a:2e:f4:c4:c3:52:95:
41:63:5e:62:c9:d0:91:ff:dc:08:29:fd:6e:d5:87:
87:3f:4d:06:27:93:63:3e:97:68:46:ab:b9:76:5f:
a3:32:ed:7d:93:93:84:51:a1:9e:93:3b:e6:ae:5b:
2e:7f:ef:10:06:9f:0e:8c:bf:2b:48:f2:74:ca:05:
c1:c5:23:18:d2:8f:b1:03:84:3b:8e:9d:79:7e:a0:
81:a2:48:94:23:7b:65:97:15:7d:52:e4:a2:c8:2a:
c0:33:86:0c:f9:f3:c0:c7:62:1f:a0:5d:69:0c:08:
61:d9:3a:ab:1b:fb:1e:b8:f3:87:6d:58:e7:63:50:
7d:09:98:b9:0b:14:0d:de:ca:81:de:7a:ab:a9:1b:
f1:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:93:85:84:1C:37:F3:7C:28:AF:26:C1:C3:7B:0C:F4:23:98:C2:77
X509v3 Authority Key Identifier:
keyid:26:63:F3:DB:15:2E:05:5A:C1:45:BD:BB:42:9E:01:86:54:20:4C:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/YJOFhBw383worybBw3sM9COYwnc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/JmPz2xUuBVrBRb27Qp4BhlQgTI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.209.3.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:5a:98:20:0b:62:a4:0b:48:3c:b2:f3:c8:df:44:d6:30:d2:
65:1e:3f:38:6f:c6:76:f3:05:42:c8:2d:cf:8d:91:2a:47:25:
9b:5d:b0:ad:4f:b4:6a:03:b6:f4:4a:4a:55:42:b7:b7:ef:8a:
f2:31:aa:96:55:99:9f:22:18:ce:27:82:b1:df:54:92:a4:7a:
96:86:fc:60:8c:ae:e4:55:a2:b4:91:8b:ed:29:05:84:34:43:
5d:d6:5a:26:0a:b7:e1:f8:f7:89:0d:af:da:90:a5:c4:ba:1f:
ac:f2:1d:be:e3:5a:03:f9:ed:2d:13:7d:e8:d2:c5:c8:50:dd:
a9:b2:72:90:d8:79:e1:7c:fa:a9:2b:23:b2:bb:6a:1e:2e:43:
32:83:fb:38:fd:0d:ff:2e:02:72:e3:29:ac:82:96:d1:3d:93:
72:c3:50:f5:65:ee:ed:55:89:3b:6c:4e:6c:4c:3e:55:a0:9b:
1e:e0:bb:b2:8b:54:08:25:11:6a:b9:80:f4:02:eb:18:e0:cf:
1d:8c:42:39:e7:61:a3:68:77:a1:04:2f:94:23:6b:da:86:e1:
c4:50:c7:5b:5d:d9:c7:45:9c:fb:9e:79:3f:d1:e2:0b:9a:3c:
fc:95:99:42:47:2f:79:0c:7a:65:fb:32:43:df:d3:39:8d:02:
69:e2:16:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 17:06:58 2025 by rpki-client