Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/3b1313-72e2-4c45-8568-ba2d1a0ac42d/1/Ykyjs8iaCc_0xgAHuJrGbC86c7k.roa
File: Ykyjs8iaCc_0xgAHuJrGbC86c7k.roa (raw, json)
Hash identifier: Qr/8WiHaklvI5dOtfnKgZj+PbkDNdXUsWBzbjvFjVl8=
Subject key identifier: 62:4C:A3:B3:C8:9A:09:CF:F4:C6:00:07:B8:9A:C6:6C:2F:3A:73:B9
Certificate issuer: /CN=fc8569520e0da7d87aa682124a2774d63666b5e8
Certificate serial: 018570D52C0E19B0D63F464D9E71B007A895
Authority key identifier: FC:85:69:52:0E:0D:A7:D8:7A:A6:82:12:4A:27:74:D6:36:66:B5:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_IVpUg4Np9h6poISSid01jZmteg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/3b1313-72e2-4c45-8568-ba2d1a0ac42d/1/Ykyjs8iaCc_0xgAHuJrGbC86c7k.roa
Signing time: Mon 02 Jan 2023 04:54:56 +0000
ROA not before: Mon 02 Jan 2023 04:54:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 58061
IP address blocks: 193.47.41.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:d5:2c:0e:19:b0:d6:3f:46:4d:9e:71:b0:07:a8:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc8569520e0da7d87aa682124a2774d63666b5e8
Validity
Not Before: Jan 2 04:54:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=624ca3b3c89a09cff4c60007b89ac66c2f3a73b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:d1:7d:9a:31:20:e5:b4:9c:c9:22:c3:1f:14:
9f:91:a3:e2:6b:80:6f:36:2c:be:c2:b5:92:cc:7b:
d2:79:e3:92:77:12:f8:65:fc:ff:6d:b7:00:bf:98:
db:0a:69:7c:02:d8:71:df:83:01:b5:bb:27:e4:c8:
c9:41:22:30:fa:ea:12:d5:71:70:89:7b:f9:c1:62:
89:35:3b:e8:b2:21:79:e5:39:68:2f:d1:7f:aa:97:
12:27:db:c7:68:f3:7a:39:d0:51:b1:cf:35:6e:dd:
d9:bc:13:32:17:98:f2:5b:8c:92:9a:71:93:16:54:
de:63:a2:91:df:c9:b0:d2:ef:84:a9:cb:7f:37:24:
51:17:7f:09:07:07:3c:ad:d5:f7:d9:71:39:90:b5:
74:0b:f7:0e:43:df:09:dd:9d:f2:ea:24:4d:af:76:
2c:85:0a:41:c3:d2:f2:ff:47:9f:9b:93:76:bb:5c:
40:6b:83:c9:a9:7e:22:15:97:1e:2d:44:7a:93:23:
fe:e1:40:37:3f:50:61:63:f2:94:7a:43:86:03:b5:
c6:cb:60:56:ba:18:80:da:0d:c6:7f:5d:7c:cf:f6:
62:40:5d:58:45:3b:e1:bc:59:c4:aa:57:70:9d:4e:
44:2b:88:7e:f0:72:55:0d:8d:42:2a:58:38:b8:96:
00:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:4C:A3:B3:C8:9A:09:CF:F4:C6:00:07:B8:9A:C6:6C:2F:3A:73:B9
X509v3 Authority Key Identifier:
keyid:FC:85:69:52:0E:0D:A7:D8:7A:A6:82:12:4A:27:74:D6:36:66:B5:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_IVpUg4Np9h6poISSid01jZmteg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/3b1313-72e2-4c45-8568-ba2d1a0ac42d/1/Ykyjs8iaCc_0xgAHuJrGbC86c7k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/3b1313-72e2-4c45-8568-ba2d1a0ac42d/1/_IVpUg4Np9h6poISSid01jZmteg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.47.41.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:63:10:d6:7c:ca:d3:53:4c:d7:88:67:4f:cf:3b:10:55:b2:
1b:31:4a:08:69:56:a5:8b:aa:12:0c:ba:01:ff:18:96:1a:4f:
28:69:6d:d3:2c:fc:bd:db:b1:35:54:cd:c4:c8:fc:d4:41:86:
13:2f:56:0b:d6:6e:f7:2d:c5:a1:5b:d6:c0:12:0b:ba:70:41:
d2:4c:e3:95:7b:56:b2:7a:03:52:53:eb:6b:64:f1:88:b0:4f:
b6:18:7a:56:cb:7a:73:1c:c0:40:5c:e3:26:37:fa:4a:59:11:
64:02:bb:f8:90:59:79:40:a5:15:2a:6f:77:d6:f8:a1:65:3c:
86:40:83:82:e5:50:92:fa:4e:73:84:fa:70:b1:66:2b:cb:4e:
e6:34:b4:ab:32:9e:35:63:a5:47:36:42:bf:a9:45:e9:7c:78:
8c:32:f8:da:26:05:e1:de:45:77:5e:ae:af:54:2c:df:0e:a5:
26:43:0c:ad:25:e0:2a:4b:92:22:7d:bc:48:ca:33:f2:27:44:
77:0a:7f:2d:3a:a9:40:31:47:c0:4b:b4:74:a8:21:09:37:cc:
86:71:73:ca:71:b7:eb:3c:1d:e4:ee:ec:5a:25:e5:d9:14:28:
dc:b4:33:b5:3d:50:3a:be:e8:7a:98:e8:f7:b7:a3:aa:30:82:
b2:ca:df:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 10:41:19 2025 by rpki-client