Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/6c27f0-137d-471b-9d1d-b7578b10ba7e/1/yuwuNuzvATZfP3JuA06dTGzQ9o8.roa
File: yuwuNuzvATZfP3JuA06dTGzQ9o8.roa (raw, json)
Hash identifier: iaJVdCZsnNb9Cyubf2e2B713adANaUt93mNYt5mCPK4=
Subject key identifier: CA:EC:2E:36:EC:EF:01:36:5F:3F:72:6E:03:4E:9D:4C:6C:D0:F6:8F
Certificate issuer: /CN=c1aaf043fe209c0345362205f8cc7cd61951c27e
Certificate serial: 01942521864E6D8174E451A292A8575FE12A
Authority key identifier: C1:AA:F0:43:FE:20:9C:03:45:36:22:05:F8:CC:7C:D6:19:51:C2:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/warwQ_4gnANFNiIF-Mx81hlRwn4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/6c27f0-137d-471b-9d1d-b7578b10ba7e/1/yuwuNuzvATZfP3JuA06dTGzQ9o8.roa
Signing time: Thu 02 Jan 2025 03:49:01 +0000
ROA not before: Thu 02 Jan 2025 03:49:01 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 29608
IP address blocks: 185.150.88.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:86:4e:6d:81:74:e4:51:a2:92:a8:57:5f:e1:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1aaf043fe209c0345362205f8cc7cd61951c27e
Validity
Not Before: Jan 2 03:49:01 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=caec2e36ecef01365f3f726e034e9d4c6cd0f68f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:ce:d3:24:4b:b3:6a:e1:c6:b9:47:7b:d4:55:
58:59:81:68:c0:e5:9f:a1:89:5d:ae:d8:f8:e5:f4:
0c:89:03:dc:23:05:79:de:b0:83:44:8b:d6:f1:dc:
95:f9:35:2f:11:ea:6b:94:44:3c:75:a6:83:64:5e:
1c:6b:6c:5d:38:91:a0:f7:47:f1:ba:e0:c7:1a:03:
33:23:6a:f2:10:5e:b1:8e:1a:86:a7:a0:f0:d7:45:
78:be:ce:73:c1:13:3b:0b:cc:ce:3e:9c:8e:56:c3:
23:60:fd:92:6c:84:ec:d9:d3:4f:9f:f4:ed:cf:6f:
03:8e:1f:f7:ea:81:90:2b:0a:a5:41:a9:f2:e6:68:
b8:bc:66:5d:3e:21:2a:4d:6a:06:87:ac:a7:15:a8:
c6:4c:f9:83:0e:9a:1a:e1:9a:39:f2:23:9f:0b:0b:
f9:80:cc:78:b4:52:81:89:60:2e:b1:1e:0f:48:35:
8e:2b:dd:1c:dd:08:7f:09:6b:99:8f:cf:a5:19:20:
09:5e:60:8c:35:91:c1:8e:56:11:e1:61:a8:eb:fc:
bd:9b:1d:28:7e:c2:3e:87:37:3b:05:df:68:40:78:
84:c7:c3:91:be:d8:28:0b:36:78:f9:1f:54:d1:d4:
93:3d:57:4b:a1:bf:fd:13:d1:0c:e4:6e:52:48:3a:
17:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:EC:2E:36:EC:EF:01:36:5F:3F:72:6E:03:4E:9D:4C:6C:D0:F6:8F
X509v3 Authority Key Identifier:
keyid:C1:AA:F0:43:FE:20:9C:03:45:36:22:05:F8:CC:7C:D6:19:51:C2:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/warwQ_4gnANFNiIF-Mx81hlRwn4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/6c27f0-137d-471b-9d1d-b7578b10ba7e/1/yuwuNuzvATZfP3JuA06dTGzQ9o8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/6c27f0-137d-471b-9d1d-b7578b10ba7e/1/warwQ_4gnANFNiIF-Mx81hlRwn4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.150.88.0/22
Signature Algorithm: sha256WithRSAEncryption
3f:01:35:51:44:5d:74:8e:8f:c5:ba:97:bb:2e:a2:78:7f:54:
0e:4c:31:1f:bd:e3:d4:de:38:d3:f8:2b:75:94:1b:af:d4:18:
18:4c:93:59:1e:1c:ba:01:83:a6:11:dd:5d:26:82:be:e2:28:
e6:a3:a5:0f:05:53:04:e8:3c:20:01:3e:23:f7:bb:9a:c3:5a:
27:a9:52:e4:76:87:73:13:aa:c9:75:b5:29:6f:ef:95:84:14:
76:0e:4b:53:46:d4:43:df:aa:32:3d:75:9a:0b:4a:b3:8c:a7:
cb:4e:df:57:18:e7:65:c4:f1:f0:4e:23:54:02:45:5d:2e:56:
5a:09:29:d5:5d:1a:d9:6a:c2:40:8d:a5:e2:d7:92:1d:f8:e1:
8b:9d:d1:62:47:e6:25:86:81:26:bd:f4:db:56:6b:72:f6:c0:
81:03:21:99:8c:16:89:96:ac:78:be:19:84:1d:14:61:2f:71:
42:27:8c:96:f8:f6:06:f0:66:f3:4b:46:3a:71:23:f0:ac:f9:
9f:bf:ae:93:66:e7:82:9e:75:a5:53:f3:4f:77:5d:e5:ca:d6:
0c:0a:83:34:aa:63:19:5b:85:d2:b1:b8:65:9e:c8:34:e7:e9:
c8:65:7b:58:3e:1c:a9:0b:b3:22:f4:33:fb:8e:62:1a:31:4c:
c7:ca:9f:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:47:30 2025 by rpki-client