Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/ybt1ga0_vsN4KgTOqCIx6p76TyI.roa
File: ybt1ga0_vsN4KgTOqCIx6p76TyI.roa (raw, json)
Hash identifier: +Au68nUXgRDHemgu2ODT+EBUxbABQU2c90g5EDmI6o4=
Subject key identifier: C9:BB:75:81:AD:3F:BE:C3:78:2A:04:CE:A8:22:31:EA:9E:FA:4F:22
Certificate issuer: /CN=131881732a3e245a959bc679e0458c39f893e46b
Certificate serial: 0194266C316DD3D3A815AF755F193B9348E0
Authority key identifier: 13:18:81:73:2A:3E:24:5A:95:9B:C6:79:E0:45:8C:39:F8:93:E4:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/ybt1ga0_vsN4KgTOqCIx6p76TyI.roa
Signing time: Thu 02 Jan 2025 09:50:12 +0000
ROA not before: Thu 02 Jan 2025 09:50:12 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215433
IP address blocks: 5.39.251.0/24 maxlen: 24
5.178.104.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6c:31:6d:d3:d3:a8:15:af:75:5f:19:3b:93:48:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=131881732a3e245a959bc679e0458c39f893e46b
Validity
Not Before: Jan 2 09:50:12 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c9bb7581ad3fbec3782a04cea82231ea9efa4f22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:ba:42:46:c7:07:b9:7c:25:27:ed:57:84:d8:
35:5f:c8:d7:b3:77:3c:92:36:f6:97:75:1b:aa:c3:
ad:db:dd:e3:f2:70:d9:ea:47:36:ec:27:25:c0:65:
65:6b:a8:eb:68:6c:cb:06:77:52:2f:28:c9:e8:67:
0b:aa:86:e4:b1:59:c0:0f:6a:d4:91:05:95:74:cc:
e0:a9:e8:db:f0:e9:a0:b7:6b:e3:ff:8d:fc:91:a5:
d8:b0:6c:37:6b:06:ed:2c:f4:36:c7:a2:f3:5a:21:
37:90:06:2d:88:6a:da:75:96:6d:ad:d0:4f:0a:54:
5b:bd:b7:b4:72:7d:70:a3:82:c6:2b:ac:e1:76:19:
38:9a:2d:45:7c:87:34:96:4e:93:58:17:39:af:c6:
ce:ba:8d:15:f8:ee:51:f1:96:a6:86:51:7a:5b:c1:
ef:df:36:0b:57:51:98:5c:3e:7f:6f:ed:97:85:ca:
d4:07:3e:dd:ef:49:03:94:79:17:3e:48:11:7b:32:
ab:74:07:ca:f2:e8:d3:7a:f7:ce:04:36:f0:50:5e:
ab:85:fd:75:86:75:33:b6:af:17:c1:16:33:f5:0f:
25:fb:9e:99:73:52:fa:ae:7b:10:e5:70:c9:16:7d:
67:3b:c7:db:bd:9c:c4:27:d1:da:ba:ea:5e:1a:74:
43:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:BB:75:81:AD:3F:BE:C3:78:2A:04:CE:A8:22:31:EA:9E:FA:4F:22
X509v3 Authority Key Identifier:
keyid:13:18:81:73:2A:3E:24:5A:95:9B:C6:79:E0:45:8C:39:F8:93:E4:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/ybt1ga0_vsN4KgTOqCIx6p76TyI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.39.251.0/24
5.178.104.0/24
Signature Algorithm: sha256WithRSAEncryption
ab:97:49:ad:25:5b:6c:d9:57:93:74:46:4f:cb:7f:03:97:40:
4d:74:d6:58:0e:ec:90:1b:26:d4:98:c0:d4:28:1f:42:3d:3a:
b4:2d:f0:69:bc:cb:46:a9:f6:26:54:04:ab:09:c1:64:df:d7:
95:6c:ae:a0:08:ac:86:e4:6f:e9:0a:2e:db:b8:bb:e1:0b:a6:
30:6d:8b:8b:1a:30:46:a4:2c:86:d3:e5:88:ae:6d:5a:44:fb:
14:62:30:0d:3d:51:ca:7d:6c:70:d3:0c:8f:d3:9a:a7:78:dd:
53:93:15:8f:f9:c6:a7:96:75:c3:13:96:37:a7:c4:1c:2e:5b:
4b:7c:61:82:ff:f6:a8:c5:80:ab:8a:bd:a7:9c:42:d7:11:cd:
72:bf:53:76:ae:e9:f9:d0:a7:c3:e1:2b:08:45:c0:b9:28:d5:
14:82:67:a4:76:74:07:ba:da:bf:44:d3:e6:9c:cd:ac:32:d6:
17:8a:21:f0:cf:2c:07:ea:07:8a:64:99:a4:d8:83:ce:6b:97:
60:3c:7f:13:76:be:db:ef:08:03:e0:81:62:97:98:fb:fb:88:
63:1a:95:23:e4:3d:62:46:4f:64:b2:13:f7:03:cd:85:d2:78:
f8:22:92:d2:17:bb:ae:4f:af:05:14:01:62:32:96:68:04:a3:
71:f9:03:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 11:44:51 2025 by rpki-client