Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/yuC3uQZcLUKDWIgCSaBC4VcmMFk.roa
File: yuC3uQZcLUKDWIgCSaBC4VcmMFk.roa (raw, json)
Hash identifier: gKRXVdB2Nd0SdWsu8JJ/NCE6OmY00ZSVDTeG3jhdjRQ=
Subject key identifier: CA:E0:B7:B9:06:5C:2D:42:83:58:88:02:49:A0:42:E1:57:26:30:59
Certificate issuer: /CN=2663f3db152e055ac145bdbb429e018654204c8d
Certificate serial: 01942067DF4B7ACE7E8DA72537E86CF78847
Authority key identifier: 26:63:F3:DB:15:2E:05:5A:C1:45:BD:BB:42:9E:01:86:54:20:4C:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/yuC3uQZcLUKDWIgCSaBC4VcmMFk.roa
Signing time: Wed 01 Jan 2025 05:47:45 +0000
ROA not before: Wed 01 Jan 2025 05:47:45 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212823
IP address blocks: 194.209.192.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:67:df:4b:7a:ce:7e:8d:a7:25:37:e8:6c:f7:88:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2663f3db152e055ac145bdbb429e018654204c8d
Validity
Not Before: Jan 1 05:47:45 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cae0b7b9065c2d428358880249a042e157263059
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:80:14:7e:1a:e1:fb:bd:26:04:2b:a4:3c:87:
b1:d2:da:56:25:39:1a:75:83:59:98:2a:66:f1:a8:
9a:46:c5:c2:5d:84:03:a4:07:e8:71:de:d3:04:79:
28:87:97:42:9d:65:ae:ed:d1:9a:ed:0f:88:c0:d5:
9c:b1:94:e0:a4:da:21:16:46:eb:89:46:9a:28:4a:
ca:9a:73:d8:e2:c9:c8:59:40:fc:f2:00:d7:df:ad:
0f:43:be:30:cd:2f:38:34:8a:e7:7f:ee:cc:bc:25:
d1:e8:dc:99:a7:78:56:29:9a:38:42:cc:59:96:4f:
77:2c:f5:86:95:30:e5:77:a4:25:41:4d:2d:b9:0d:
c0:95:9f:f3:a4:ff:16:88:11:7c:95:e7:a6:0d:92:
e7:46:3a:c8:c9:1f:11:88:04:b0:76:d3:5f:73:c3:
ea:fc:75:95:38:ad:f9:6a:32:de:4e:33:f8:9e:06:
bb:d6:0d:5c:0a:76:e8:c0:39:a6:e2:e0:96:94:0e:
06:59:9b:5f:e4:1b:31:d7:40:41:ee:9d:9a:2c:42:
ce:b2:bf:ae:57:eb:6f:fa:73:4e:f6:1d:c1:c1:0d:
4f:d6:1f:49:b0:fa:e7:52:ce:ae:5c:ef:0d:be:08:
53:76:a8:f1:7f:9b:0e:e8:7f:16:28:a2:d4:89:d8:
15:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:E0:B7:B9:06:5C:2D:42:83:58:88:02:49:A0:42:E1:57:26:30:59
X509v3 Authority Key Identifier:
keyid:26:63:F3:DB:15:2E:05:5A:C1:45:BD:BB:42:9E:01:86:54:20:4C:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/yuC3uQZcLUKDWIgCSaBC4VcmMFk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/JmPz2xUuBVrBRb27Qp4BhlQgTI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.209.192.0/23
Signature Algorithm: sha256WithRSAEncryption
55:35:1a:d3:ac:ae:a1:9d:36:b3:ed:bd:e8:92:f6:1a:9c:76:
c1:17:bc:25:64:ef:c4:1e:91:01:da:62:0f:22:ea:78:84:13:
7f:b1:cf:6b:e6:aa:cc:a6:9a:e6:3a:c2:f0:23:a1:04:bb:be:
e6:5e:52:07:5d:12:7f:bf:39:c6:86:2b:23:69:1a:4e:3a:2b:
9b:57:16:2f:f2:2d:f4:de:17:10:e8:a0:4b:72:1a:a7:15:2c:
9d:9d:5b:30:e8:ba:1c:b4:42:b7:2f:03:ae:34:7c:c0:4c:13:
d3:df:78:3c:0b:d4:46:39:25:71:01:c3:71:37:a0:88:f4:f5:
29:98:8d:3e:6c:6a:9a:95:b2:19:00:b4:8b:41:02:5d:79:f4:
72:26:6d:81:09:75:76:97:29:2c:97:8e:9c:4e:e0:d7:55:a4:
c6:06:ba:0d:f3:9c:b2:59:40:a0:8f:66:47:90:e5:76:c9:07:
1e:5f:33:9c:ff:37:08:8a:7c:ac:83:10:38:25:6e:b7:10:b8:
9b:fb:2a:93:cf:c7:d8:37:7d:37:09:53:4b:37:3c:cb:f1:08:
0b:e0:91:0a:15:54:a2:37:08:94:3a:76:59:9d:23:3d:5b:31:
c9:12:64:4c:a7:b3:39:27:bc:f5:9b:fd:52:8a:51:95:66:b4:
23:53:7f:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 14:36:41 2025 by rpki-client