Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/yiom7g5J-FxNOrVeCmhlnxWj0Vo.roa
File: yiom7g5J-FxNOrVeCmhlnxWj0Vo.roa (raw, json)
Hash identifier: 2Hxefhx3wuChXkU5AGiCUyQC61OoJnMXcBzSNu3NYBQ=
Subject key identifier: CA:2A:26:EE:0E:49:F8:5C:4D:3A:B5:5E:0A:68:65:9F:15:A3:D1:5A
Certificate issuer: /CN=2663f3db152e055ac145bdbb429e018654204c8d
Certificate serial: 50E4FFB9
Authority key identifier: 26:63:F3:DB:15:2E:05:5A:C1:45:BD:BB:42:9E:01:86:54:20:4C:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/yiom7g5J-FxNOrVeCmhlnxWj0Vo.roa
Signing time: Sat 01 Jan 2022 16:01:57 +0000
ROA not before: Sat 01 Jan 2022 16:01:57 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 204510
IP address blocks: 194.209.28.0/24 maxlen: 24
194.209.4.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1357184953 (0x50e4ffb9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2663f3db152e055ac145bdbb429e018654204c8d
Validity
Not Before: Jan 1 16:01:57 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ca2a26ee0e49f85c4d3ab55e0a68659f15a3d15a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:ef:89:19:78:62:b9:ce:63:60:85:b0:f1:0e:
97:02:76:e3:f0:16:64:0c:76:e0:1d:4a:f9:f4:75:
99:45:db:78:d0:fc:7e:df:38:17:24:76:22:f1:b1:
bd:8e:58:fc:fe:a6:af:c7:0a:ad:03:be:53:cd:71:
d7:ab:f4:1c:75:78:bb:56:d5:1d:8b:62:e3:73:ca:
5e:98:38:11:2d:e3:ad:0d:e5:7a:69:1f:e9:33:65:
90:95:2d:21:33:a4:1d:ed:af:13:2b:4e:d6:79:a7:
de:45:37:ec:aa:26:9d:ec:99:5a:6b:e0:8b:dd:79:
e5:51:cc:4e:d8:28:e5:88:df:bf:35:45:5a:ff:33:
7d:bb:cf:ce:66:0a:6e:bf:8b:6a:af:7e:11:e9:32:
4f:1c:a8:e1:91:24:6a:4d:bb:2e:9f:82:3a:65:17:
2a:c3:c2:c5:65:e7:c6:46:0a:c7:9c:db:98:60:c0:
6e:f9:34:ad:fd:83:0a:52:a9:90:1e:e0:88:7b:3f:
35:10:35:a6:bf:06:b0:6f:80:1c:6e:9c:91:8d:23:
96:d0:94:71:b0:5b:6c:4e:3d:72:7a:a4:b8:96:88:
69:7d:62:2b:59:06:48:dc:fc:04:a3:26:b3:03:1b:
43:19:11:6a:69:9e:05:f3:45:eb:aa:8b:94:68:df:
5d:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:2A:26:EE:0E:49:F8:5C:4D:3A:B5:5E:0A:68:65:9F:15:A3:D1:5A
X509v3 Authority Key Identifier:
keyid:26:63:F3:DB:15:2E:05:5A:C1:45:BD:BB:42:9E:01:86:54:20:4C:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/yiom7g5J-FxNOrVeCmhlnxWj0Vo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/JmPz2xUuBVrBRb27Qp4BhlQgTI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.209.4.0/24
194.209.28.0/24
Signature Algorithm: sha256WithRSAEncryption
ad:92:8f:39:f3:1b:7d:f7:20:86:ed:7b:c0:60:ba:bd:11:a3:
21:99:11:c0:73:76:cd:c7:ac:11:df:2f:49:4d:80:a0:30:6b:
0c:ae:57:63:eb:04:cb:68:b3:8f:8b:aa:33:04:2c:cc:e4:3c:
c0:7b:5b:c3:e2:d7:b7:38:e6:aa:c7:ac:ed:c9:c6:91:79:78:
cc:b8:d1:c2:19:dd:b6:82:24:76:95:11:10:d6:3e:4d:6b:2f:
ab:28:88:2a:dd:cf:72:80:b3:29:be:cc:b5:8c:c1:40:77:71:
7f:10:2c:38:99:b7:07:3d:ab:86:fd:f4:33:4e:99:1c:74:0f:
11:d7:30:aa:a9:77:f6:8c:a0:12:54:e7:45:27:94:f2:48:d7:
10:04:9d:b9:2c:25:23:62:41:ab:2f:28:cc:84:af:8d:6a:07:
56:e9:ed:3c:7e:8d:fa:72:e9:3f:0b:8c:82:78:a7:56:81:31:
4a:32:16:48:c2:d6:ca:b9:18:4c:dd:45:6a:74:d7:eb:1e:6e:
81:6b:bb:f4:5d:2f:8b:2a:c1:a4:73:36:0a:d3:ac:71:28:87:
1e:10:e6:42:62:21:b5:a2:a5:ba:e7:f6:7c:26:38:66:1a:43:
d1:cd:c4:8c:d2:cb:d8:15:dd:93:b0:9e:24:16:95:d2:37:45:
8a:ce:91:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 10:52:53 2025 by rpki-client