Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/8ce795-3fa9-4cb7-831a-1de56e475fbf/1/ymt9m8t916HfzE2dDMrSbVzjGNQ.roa
File: ymt9m8t916HfzE2dDMrSbVzjGNQ.roa (raw, json)
Hash identifier: RKU18Ug3MIC4PR8xDDXo0qG3ZhoSZmVX9c0pIDSEpi8=
Subject key identifier: CA:6B:7D:9B:CB:7D:D7:A1:DF:CC:4D:9D:0C:CA:D2:6D:5C:E3:18:D4
Certificate issuer: /CN=c373fae99d651298845d22f89d8d2b2e1d13bc04
Certificate serial: 019427B5503C04BE03F09C081A9A2E27FAF7
Authority key identifier: C3:73:FA:E9:9D:65:12:98:84:5D:22:F8:9D:8D:2B:2E:1D:13:BC:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w3P66Z1lEpiEXSL4nY0rLh0TvAQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/8ce795-3fa9-4cb7-831a-1de56e475fbf/1/ymt9m8t916HfzE2dDMrSbVzjGNQ.roa
Signing time: Thu 02 Jan 2025 15:49:41 +0000
ROA not before: Thu 02 Jan 2025 15:49:41 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200195
IP address blocks: 188.190.10.0/24 maxlen: 24
188.190.11.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:50:3c:04:be:03:f0:9c:08:1a:9a:2e:27:fa:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c373fae99d651298845d22f89d8d2b2e1d13bc04
Validity
Not Before: Jan 2 15:49:41 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ca6b7d9bcb7dd7a1dfcc4d9d0ccad26d5ce318d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:a7:25:2b:ee:56:8b:f8:b5:0b:98:75:53:63:
3a:fe:24:98:16:9f:42:a4:b4:38:9c:48:91:8d:1c:
89:eb:c8:dd:ed:ee:32:0e:d2:ef:03:b8:32:d9:8e:
11:a7:d8:f5:80:a1:12:15:d2:2d:bc:aa:9d:3d:f9:
a7:79:06:cb:aa:56:23:99:7b:50:9a:cd:5c:48:47:
f2:94:03:86:cc:b5:4d:3c:a9:24:3b:12:f1:4e:20:
04:75:dc:3f:ac:fb:14:23:cf:74:a2:b2:19:c7:89:
9e:b4:b5:c5:e3:94:3c:92:2f:39:be:46:92:3a:34:
5a:f8:c0:2a:8a:5f:f4:8b:a7:02:60:5c:fe:d3:74:
7e:84:a9:1f:c8:de:7c:a4:dc:de:d5:99:df:e7:19:
45:9c:a5:3c:57:53:0e:44:18:f9:a5:81:d1:b0:1e:
f3:6d:38:4b:54:1f:ce:9f:a6:76:f1:e9:45:84:d2:
a8:79:f7:5f:3d:a6:1f:c9:55:dc:08:b5:c2:16:0c:
5d:60:95:0e:f1:c1:c2:ec:1a:ed:a4:b6:00:bc:49:
7a:6e:4d:ab:58:a3:96:61:70:29:99:48:cc:a2:7c:
86:8e:86:f7:f3:6b:53:6a:32:e1:51:64:08:74:98:
99:72:fd:26:9f:45:c3:00:fa:c8:06:2f:2e:ff:52:
cf:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:6B:7D:9B:CB:7D:D7:A1:DF:CC:4D:9D:0C:CA:D2:6D:5C:E3:18:D4
X509v3 Authority Key Identifier:
keyid:C3:73:FA:E9:9D:65:12:98:84:5D:22:F8:9D:8D:2B:2E:1D:13:BC:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w3P66Z1lEpiEXSL4nY0rLh0TvAQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/8ce795-3fa9-4cb7-831a-1de56e475fbf/1/ymt9m8t916HfzE2dDMrSbVzjGNQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/8ce795-3fa9-4cb7-831a-1de56e475fbf/1/w3P66Z1lEpiEXSL4nY0rLh0TvAQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.190.10.0/23
Signature Algorithm: sha256WithRSAEncryption
66:8a:f6:e9:95:f5:ac:f9:0c:e9:8f:6f:17:35:52:bb:31:0d:
fb:82:72:cc:4c:3d:cd:8a:2b:15:d9:e3:53:1e:d0:28:b0:70:
a9:a3:bd:0b:0b:cb:bd:70:bb:b8:30:7b:45:6f:ab:f1:68:1c:
d6:27:06:a8:37:ae:d7:38:4b:71:33:67:e4:36:2f:d5:52:ac:
46:01:9d:b3:ff:5f:66:a5:01:31:25:17:6a:90:21:80:b7:fb:
d5:cd:32:75:b6:70:89:f5:1f:bb:9c:2b:86:fa:21:d8:ef:6e:
6c:c2:4b:10:24:69:7e:fd:69:17:c4:f3:12:01:f7:22:49:8d:
67:69:f6:f6:4b:28:82:e7:e3:17:47:9b:82:82:9e:0c:3f:3a:
16:88:76:31:c0:8d:bd:0b:f3:cc:69:ac:37:36:82:ba:f9:b4:
3f:87:4e:0f:11:27:20:ef:74:78:a1:f8:6c:cf:24:a3:99:4c:
5e:8f:0c:ec:51:14:7e:74:5f:35:9a:73:38:63:f2:85:a0:4b:
61:b3:ad:1a:21:6a:cb:f5:1e:f7:d1:36:e4:66:8a:0e:b6:55:
7a:90:1b:3e:32:ba:d7:72:1b:94:e5:af:1d:5a:25:07:bd:b7:
2d:5f:d6:66:32:a9:c6:d1:f3:93:cf:25:4d:2b:29:42:c0:f7:
ae:9e:fa:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 22:44:06 2025 by rpki-client