Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/YsZQqpzGyO1J3wLt5OCph2RVf-g.roa
File: YsZQqpzGyO1J3wLt5OCph2RVf-g.roa (raw, json)
Hash identifier: 5B24Aua7t62yOZEjqSceVnUpCklWWABUnoRKfsl+Dwg=
Subject key identifier: 62:C6:50:AA:9C:C6:C8:ED:49:DF:02:ED:E4:E0:A9:87:64:55:7F:E8
Certificate issuer: /CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Certificate serial: 01942445200ABE1781F8ED272882EAC37FA9
Authority key identifier: D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/YsZQqpzGyO1J3wLt5OCph2RVf-g.roa
Signing time: Wed 01 Jan 2025 23:48:17 +0000
ROA not before: Wed 01 Jan 2025 23:48:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51219
IP address blocks: 194.104.230.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:45:20:0a:be:17:81:f8:ed:27:28:82:ea:c3:7f:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Validity
Not Before: Jan 1 23:48:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=62c650aa9cc6c8ed49df02ede4e0a98764557fe8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:83:da:8a:8f:36:90:15:8f:65:9a:f3:7d:07:
52:ec:7f:93:74:a1:8a:07:88:f8:0b:94:83:a0:e6:
19:6d:c2:23:07:8b:16:f5:c2:4d:f9:99:b9:4b:25:
c0:25:82:e7:a7:c7:18:2c:91:0c:66:2e:35:83:99:
35:91:86:53:af:dd:8d:27:5b:42:7f:1c:82:9a:47:
8c:c4:76:c7:51:e2:4b:58:bf:eb:92:eb:5d:cc:78:
df:4c:25:a2:7e:89:ba:88:c8:ed:0f:ef:cc:e0:89:
45:c1:4b:a9:cc:a5:6f:0e:28:3a:4a:c3:1f:68:ba:
fb:b0:dc:44:ad:69:cc:cc:5a:68:36:14:0d:ab:7d:
1b:20:48:01:21:d8:f7:b1:32:e0:e1:bc:a1:78:f9:
8a:9f:f9:c7:72:c7:72:29:d6:9e:49:c3:5a:4a:cc:
5c:22:dd:f2:42:3a:20:e9:8b:23:7f:81:f0:b1:87:
b6:d2:cc:8b:90:9d:71:b0:c8:44:76:7a:09:6a:0b:
03:ef:bf:fa:5e:04:42:41:9a:6e:88:fb:70:65:b2:
9d:48:bc:ea:fe:f4:3e:bf:ea:76:a1:7e:68:9d:b9:
97:65:b7:3b:ab:2c:f0:a9:98:c5:ae:d4:54:7f:10:
db:1d:32:aa:50:fb:6d:b7:eb:21:cf:5f:62:82:9d:
27:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:C6:50:AA:9C:C6:C8:ED:49:DF:02:ED:E4:E0:A9:87:64:55:7F:E8
X509v3 Authority Key Identifier:
keyid:D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/YsZQqpzGyO1J3wLt5OCph2RVf-g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.104.230.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:95:b1:ab:3d:3f:63:aa:cf:1f:8a:56:b0:03:cb:4a:12:17:
59:62:cd:96:bd:b1:8f:2e:ab:86:03:8d:c9:81:5e:1a:16:8a:
fb:85:23:0e:55:1f:f0:35:01:47:01:d7:69:8f:2c:49:59:6f:
10:57:3d:b5:d9:7f:9b:2d:75:13:47:dc:ec:28:e3:f3:7b:be:
77:33:aa:cd:6b:e6:bd:8d:39:f6:e2:a2:51:b7:35:53:58:7b:
3d:4a:03:42:bc:ea:c6:b1:7e:fb:da:03:90:e2:e4:d4:1a:6c:
bc:cd:91:4e:7f:96:5f:67:2a:74:42:a0:cd:de:2d:47:1c:da:
05:13:a5:b2:55:4b:bc:23:a5:93:62:9e:c9:6f:7f:17:d6:c9:
9f:ab:fc:f6:d6:c3:0c:ab:8d:79:db:65:f2:82:33:dc:e8:e6:
18:57:6e:80:96:3f:ef:93:77:44:64:af:50:2f:96:f2:4d:43:
99:3a:7b:6f:48:3a:fc:c7:55:3f:6f:22:a6:71:27:02:44:50:
6c:b5:d0:43:a1:09:3f:4b:65:44:3c:df:bf:f9:43:37:f8:e3:
5e:76:1f:ea:0f:da:9d:bc:28:c0:8f:27:13:f3:6e:e4:9b:2c:
f6:b2:c3:02:e7:42:d2:35:15:e0:82:80:9b:07:7a:de:8e:21:
de:a9:4b:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 17:36:45 2025 by rpki-client