Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/cc8f4a-4c02-404b-8d93-2cde65f3112a/1/YxuPih3fAlXVoEE31gDs9iD2i1w.roa
File: YxuPih3fAlXVoEE31gDs9iD2i1w.roa (raw, json)
Hash identifier: x8butTOJLg1TuADmdhNJfjqeOtty4tQbuYOKyeZNAJI=
Subject key identifier: 63:1B:8F:8A:1D:DF:02:55:D5:A0:41:37:D6:00:EC:F6:20:F6:8B:5C
Certificate issuer: /CN=87be093097097c4457ff5aa3e5893c8c15432612
Certificate serial: 0194221FC06B261A0FD4F96074404D76DB1D
Authority key identifier: 87:BE:09:30:97:09:7C:44:57:FF:5A:A3:E5:89:3C:8C:15:43:26:12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h74JMJcJfERX_1qj5Yk8jBVDJhI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/cc8f4a-4c02-404b-8d93-2cde65f3112a/1/YxuPih3fAlXVoEE31gDs9iD2i1w.roa
Signing time: Wed 01 Jan 2025 13:48:13 +0000
ROA not before: Wed 01 Jan 2025 13:48:13 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60790
IP address blocks: 37.153.157.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:c0:6b:26:1a:0f:d4:f9:60:74:40:4d:76:db:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87be093097097c4457ff5aa3e5893c8c15432612
Validity
Not Before: Jan 1 13:48:13 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=631b8f8a1ddf0255d5a04137d600ecf620f68b5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:cd:1c:5e:fc:d3:56:d9:ed:8a:87:30:7d:0a:
0a:56:a8:13:8f:24:29:3b:83:4d:22:8e:25:4e:ea:
94:70:78:3a:a5:54:e9:2b:99:e3:88:94:25:b8:11:
58:2d:b5:92:4b:10:a2:25:3b:19:80:db:6e:9a:8d:
9a:9f:6e:ea:fd:5b:6c:3c:e1:c1:8f:f5:ca:db:80:
af:52:bc:0b:c0:0b:41:84:2d:68:3f:c2:40:0a:a4:
15:c7:ac:28:48:9a:73:57:98:32:94:68:e6:a0:a9:
83:9b:e5:70:a9:0f:25:49:05:d1:29:08:d1:8b:eb:
4c:84:e3:b3:3d:59:e0:9c:6a:c7:c5:0a:8c:2a:bb:
b1:27:fb:11:e7:8c:e5:37:42:74:91:19:e9:96:f4:
ec:e4:56:6a:76:81:2d:cd:9d:41:63:80:dc:f2:98:
d7:8f:33:0b:ea:7c:09:0c:37:20:c4:da:36:b0:b0:
6a:a6:e7:ea:fb:a0:b6:67:2c:ca:cf:2d:40:24:a1:
95:c2:c3:b1:69:58:de:f8:43:25:25:04:63:aa:e5:
6a:e3:64:38:d6:35:6f:7d:f9:6a:0d:ef:6e:dc:10:
5a:dd:25:3d:a1:ac:51:96:55:a8:9c:1a:2d:a6:d6:
bf:ff:c1:b3:ef:7a:70:1a:e6:ee:aa:36:9c:bc:8b:
ef:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:1B:8F:8A:1D:DF:02:55:D5:A0:41:37:D6:00:EC:F6:20:F6:8B:5C
X509v3 Authority Key Identifier:
keyid:87:BE:09:30:97:09:7C:44:57:FF:5A:A3:E5:89:3C:8C:15:43:26:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h74JMJcJfERX_1qj5Yk8jBVDJhI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/cc8f4a-4c02-404b-8d93-2cde65f3112a/1/YxuPih3fAlXVoEE31gDs9iD2i1w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/cc8f4a-4c02-404b-8d93-2cde65f3112a/1/h74JMJcJfERX_1qj5Yk8jBVDJhI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.153.157.0/24
Signature Algorithm: sha256WithRSAEncryption
a3:a0:96:e6:6e:4e:53:e3:ca:42:05:b6:a1:65:46:e9:89:34:
0c:72:83:0b:47:61:c9:80:64:42:27:0e:ea:f7:f8:73:9b:ef:
c0:a5:d8:2c:cb:0c:02:fc:7b:57:e5:06:29:06:22:ce:a2:ac:
c1:08:28:98:65:bf:50:79:67:ea:15:e3:70:c5:ee:50:70:0e:
55:4d:20:86:18:99:e7:61:55:41:2f:6c:13:b0:6b:f3:0b:8c:
44:3a:c0:69:7c:e3:71:cd:3f:e0:2a:0f:7d:dd:ad:58:67:1c:
82:14:50:9f:b3:a6:c7:8b:ff:eb:18:53:cd:70:0b:46:79:b7:
fe:78:8b:ba:11:7f:82:21:fb:4b:9d:9d:83:f7:8f:1b:ea:04:
a3:ca:f1:3b:78:0d:78:86:19:36:ec:38:dd:ba:ea:90:1e:2d:
83:01:8c:34:78:4f:e6:0e:16:a8:c0:74:34:36:fe:b0:99:2e:
8c:67:ec:a2:0a:14:f0:1c:ea:58:44:18:bf:6b:e3:05:ab:b3:
67:15:b0:b4:67:27:c5:0b:7c:c6:4f:51:d4:cc:41:05:6f:5c:
94:44:02:43:3a:f6:3d:ac:9d:4d:39:2a:59:a2:53:45:41:f2:
13:a8:a0:64:60:d2:09:60:73:ac:1b:43:1f:2c:e6:f3:52:44:
49:3b:2a:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:31:21 2025 by rpki-client