Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/dc64b3-b6d0-4e17-9d05-4e35fc717eab/1/yyuBf99BMpfvLJ2WWh_FhBxb2BQ.roa
File: yyuBf99BMpfvLJ2WWh_FhBxb2BQ.roa (raw, json)
Hash identifier: Y4GdDf6nJDobIIYDVorazhvdDqV2GuMmpjjzqa1uYGk=
Subject key identifier: CB:2B:81:7F:DF:41:32:97:EF:2C:9D:96:5A:1F:C5:84:1C:5B:D8:14
Certificate issuer: /CN=5c09fb6905d48eae2be5edf3cbfbca6b5fee9752
Certificate serial: 0185737A775F88DF0598CA1E4A0A18DC1B1A
Authority key identifier: 5C:09:FB:69:05:D4:8E:AE:2B:E5:ED:F3:CB:FB:CA:6B:5F:EE:97:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XAn7aQXUjq4r5e3zy_vKa1_ul1I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/dc64b3-b6d0-4e17-9d05-4e35fc717eab/1/yyuBf99BMpfvLJ2WWh_FhBxb2BQ.roa
Signing time: Mon 02 Jan 2023 17:14:43 +0000
ROA not before: Mon 02 Jan 2023 17:14:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 50346
IP address blocks: 193.104.202.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:73:7a:77:5f:88:df:05:98:ca:1e:4a:0a:18:dc:1b:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c09fb6905d48eae2be5edf3cbfbca6b5fee9752
Validity
Not Before: Jan 2 17:14:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cb2b817fdf413297ef2c9d965a1fc5841c5bd814
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:33:d6:5e:e6:8d:88:22:ef:ae:44:ba:dd:82:
99:15:3b:e2:35:9b:03:b3:d8:f1:94:f2:de:49:55:
19:25:09:d9:d2:1c:7b:3b:13:78:8f:2a:1d:1a:80:
ca:d9:f7:ce:87:00:19:92:4d:e9:59:f9:c9:35:7c:
44:20:32:96:bf:43:fe:00:fe:52:77:13:2e:30:ea:
b3:56:cf:6b:83:d2:bc:5a:42:0b:0f:b5:8b:0b:78:
53:ea:01:bc:80:a0:fd:a5:09:3b:7c:03:ce:c5:ce:
46:46:cd:de:fc:a7:4f:bc:b3:68:eb:c9:df:b4:59:
31:12:f3:25:c2:91:99:cf:09:ba:ce:56:69:f8:4c:
17:cd:58:03:7f:48:0d:56:a9:57:1d:5c:23:8f:2f:
07:d6:7b:7e:82:02:20:95:03:a8:43:c9:cd:46:da:
af:dd:3e:7f:5d:55:7b:f1:f9:52:e3:56:ac:ae:b6:
f5:b6:64:b8:64:dd:cf:28:8c:85:60:cd:03:b0:64:
c6:36:81:ae:67:d8:b3:5e:e0:04:bc:77:06:49:a6:
54:21:de:84:0c:f8:ba:9c:5e:20:bc:f9:59:ed:03:
83:21:22:4e:63:a1:cc:c9:68:5b:38:e6:20:3e:50:
78:a7:5c:6c:af:a1:8b:27:4e:ae:dd:cc:25:86:a9:
60:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:2B:81:7F:DF:41:32:97:EF:2C:9D:96:5A:1F:C5:84:1C:5B:D8:14
X509v3 Authority Key Identifier:
keyid:5C:09:FB:69:05:D4:8E:AE:2B:E5:ED:F3:CB:FB:CA:6B:5F:EE:97:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XAn7aQXUjq4r5e3zy_vKa1_ul1I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/dc64b3-b6d0-4e17-9d05-4e35fc717eab/1/yyuBf99BMpfvLJ2WWh_FhBxb2BQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/dc64b3-b6d0-4e17-9d05-4e35fc717eab/1/XAn7aQXUjq4r5e3zy_vKa1_ul1I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.104.202.0/24
Signature Algorithm: sha256WithRSAEncryption
c4:6c:ae:b0:ff:19:6e:97:23:5f:e5:7e:40:46:94:84:c9:57:
00:1a:b8:ef:bb:53:55:0e:df:ac:34:cd:8f:b3:62:33:bd:c2:
88:75:df:02:fa:fd:91:10:26:2a:e1:28:93:ad:50:e9:c2:34:
9d:83:bd:35:9b:29:73:ad:09:4d:73:aa:9c:a7:1a:af:b0:f1:
7b:aa:53:66:69:cc:7f:0e:f2:76:67:75:8c:f6:b6:4c:82:e5:
a4:a9:05:d0:56:ae:25:a2:fa:88:6a:9b:05:4d:e9:be:43:a1:
e8:83:98:ae:bf:a1:25:2f:c6:99:8f:8b:a5:f9:df:40:e8:45:
e5:89:0f:71:0f:64:de:2b:4c:05:8b:71:07:c2:ed:37:3e:5e:
98:02:35:31:a9:32:51:2e:4f:0b:49:bc:a8:95:a9:4f:80:b2:
39:51:9e:a9:f1:f5:ec:80:33:0d:c3:ab:54:35:b8:d0:ae:a1:
95:73:37:64:39:8f:fd:5e:9f:b3:34:ea:77:59:d6:9a:ea:3f:
de:97:e7:29:2b:9a:bb:c3:24:0a:3b:20:4d:7b:1c:d1:26:49:
6b:c4:d3:91:dd:76:c3:2e:bb:20:af:18:d4:62:3a:8f:2b:be:
b6:4f:ce:79:f2:d6:ac:9e:a0:72:fc:1b:8b:70:62:7f:20:ea:
09:ec:d3:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:51:35 2025 by rpki-client