Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/yx-yW8BiAYp-7URgBd1T7s8yW5g.roa
File: yx-yW8BiAYp-7URgBd1T7s8yW5g.roa (raw, json)
Hash identifier: 0Quiu2iPhpGYeOCV4r6C/rlJ/WsEbGGPslRDFU+Dm8Y=
Subject key identifier: CB:1F:B2:5B:C0:62:01:8A:7E:ED:44:60:05:DD:53:EE:CF:32:5B:98
Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Certificate serial: 0194228D8E48619CC1159BC6D64302C973CD
Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/yx-yW8BiAYp-7URgBd1T7s8yW5g.roa
Signing time: Wed 01 Jan 2025 15:48:09 +0000
ROA not before: Wed 01 Jan 2025 15:48:09 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9033
IP address blocks: 194.122.80.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:8e:48:61:9c:c1:15:9b:c6:d6:43:02:c9:73:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Validity
Not Before: Jan 1 15:48:09 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cb1fb25bc062018a7eed446005dd53eecf325b98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:56:8f:b0:3f:07:59:01:b9:32:3e:77:ce:64:
43:52:70:6a:2a:c1:69:19:ee:32:3e:14:e3:a0:21:
e1:55:3d:57:53:db:00:fc:aa:31:82:41:62:96:38:
6e:5f:05:65:bc:26:a6:2b:0c:b3:93:8c:47:92:45:
4f:e4:30:46:16:dd:7e:4f:64:7e:30:5b:ce:c3:2a:
af:3d:d3:36:87:93:5d:70:77:1d:87:25:cb:df:75:
e5:4a:5c:0e:44:ee:df:31:ed:f3:fa:53:ae:7d:4e:
77:6a:dc:cd:10:de:d4:d2:62:7a:4c:9f:de:1e:d7:
1c:0c:b1:c6:cd:e4:24:d7:94:96:8f:85:1b:0d:7a:
19:c2:ac:ca:d2:5d:6e:3b:38:b7:37:0e:b1:7a:49:
1b:9b:7b:74:33:28:76:23:4d:6b:6c:07:da:f0:aa:
43:6b:43:c8:8d:97:7d:4d:24:90:66:a3:2a:68:d6:
f3:a6:ca:fb:d3:27:8b:5a:5d:5c:88:5c:45:89:ef:
68:eb:f2:91:b1:ef:a4:6d:40:bd:90:4f:3f:ba:f9:
7c:ae:e8:f7:8b:24:9c:6b:1b:2f:be:20:87:06:46:
3d:83:1a:fa:47:d8:b7:2a:3c:5b:60:e0:26:b5:a0:
53:a8:c5:a3:f8:a5:89:73:da:7b:42:e5:97:58:f0:
1e:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:1F:B2:5B:C0:62:01:8A:7E:ED:44:60:05:DD:53:EE:CF:32:5B:98
X509v3 Authority Key Identifier:
keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/yx-yW8BiAYp-7URgBd1T7s8yW5g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.122.80.0/22
Signature Algorithm: sha256WithRSAEncryption
d2:63:bd:8a:62:56:e7:61:c8:2c:ec:5e:64:a6:15:70:e7:7d:
e3:a3:73:4b:29:2a:85:44:99:01:15:b9:fa:42:50:f1:35:4a:
e1:c9:20:60:16:59:4f:3f:52:94:e0:02:96:4e:91:56:07:30:
ec:cb:2c:b0:88:27:f4:46:28:24:20:fd:ae:a0:cd:64:86:bd:
05:4b:50:1d:b7:18:72:db:84:e9:8f:e7:a5:ee:83:df:ef:61:
e2:b4:91:34:1c:a8:d4:44:a1:9a:35:22:62:fa:f5:57:62:fd:
9c:35:38:41:93:9e:c4:3b:36:8d:f1:47:a4:04:42:27:f5:93:
8b:e8:30:e8:79:29:b8:bc:65:9e:7c:a3:f2:84:1e:be:07:45:
5e:10:c3:a2:31:f8:c5:cf:46:02:41:b7:44:32:72:72:62:c0:
80:39:4c:c8:9b:37:50:01:d9:06:a9:e1:f0:be:cb:60:30:92:
ac:7d:04:cd:f4:57:86:44:99:ff:f4:de:43:49:37:31:3b:b7:
b9:71:90:67:50:c2:a7:d6:47:b9:84:a5:73:1d:0c:6a:6f:65:
8d:93:ff:d6:68:e9:b4:f2:e8:1b:40:76:a8:c5:a3:11:68:7f:
74:38:be:f5:11:bc:9d:45:62:73:72:2e:d3:6f:a2:d9:9c:c6:
6d:71:17:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:12:48 2025 by rpki-client