Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/Yed44AUAbqpY6pzy3aMkteNGQ_g.roa
File: Yed44AUAbqpY6pzy3aMkteNGQ_g.roa (raw, json)
Hash identifier: FZrMifpRX5lyJO47EzwgH+UZbzIMubq2K2YsFTZ5WZI=
Subject key identifier: 61:E7:78:E0:05:00:6E:AA:58:EA:9C:F2:DD:A3:24:B5:E3:46:43:F8
Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Certificate serial: 019427B55A694CE8E84E1D71F1A057173A14
Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/Yed44AUAbqpY6pzy3aMkteNGQ_g.roa
Signing time: Thu 02 Jan 2025 15:49:44 +0000
ROA not before: Thu 02 Jan 2025 15:49:44 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200923
IP address blocks: 93.186.74.0/23 maxlen: 23
93.186.76.0/24 maxlen: 24
93.186.78.0/24 maxlen: 24
188.255.218.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:5a:69:4c:e8:e8:4e:1d:71:f1:a0:57:17:3a:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Validity
Not Before: Jan 2 15:49:44 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=61e778e005006eaa58ea9cf2dda324b5e34643f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:0f:59:02:b7:16:80:39:53:d5:7c:bf:b6:05:
8e:eb:fc:dc:62:44:65:bd:4c:31:98:85:0a:c2:a0:
d8:33:1d:ca:c3:39:24:54:a3:ea:e0:1d:c1:9f:9e:
8d:ee:9e:bf:8b:b3:8d:61:3d:c1:5a:b5:b9:8a:b1:
5a:4e:60:5c:c0:1c:2b:45:6a:0b:d8:83:d9:38:be:
2a:a2:ef:1d:28:96:90:da:61:a1:8e:4c:05:00:f1:
ed:9b:9f:73:c9:fd:8b:19:e2:8c:3b:d4:e8:49:13:
00:f7:f2:38:99:6f:b2:e4:c4:ea:14:0b:06:f4:86:
2e:b5:41:4d:89:7c:16:71:a8:a4:d6:d7:e2:c1:f1:
67:8f:32:d9:96:72:0a:c3:9f:99:c7:df:55:66:7e:
0a:47:86:23:e9:9b:8e:a3:43:a6:13:a9:5c:ab:20:
6e:cc:a7:74:19:09:56:95:e5:69:03:34:01:5b:e7:
51:be:7d:c0:dd:ab:86:7f:55:a4:9b:75:f4:1e:02:
30:bc:65:51:1c:2d:d1:4a:12:84:00:0f:50:3d:4b:
df:b1:85:c5:77:33:ef:58:f7:33:1d:f0:17:a4:38:
de:ef:46:7a:9e:9f:d5:5c:db:ad:94:e5:bb:24:4b:
be:5e:94:1b:38:56:63:9d:8f:c3:47:bd:5b:f0:59:
e5:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:E7:78:E0:05:00:6E:AA:58:EA:9C:F2:DD:A3:24:B5:E3:46:43:F8
X509v3 Authority Key Identifier:
keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/Yed44AUAbqpY6pzy3aMkteNGQ_g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.186.74.0-93.186.76.255
93.186.78.0/24
188.255.218.0/24
Signature Algorithm: sha256WithRSAEncryption
98:21:f2:a9:7f:0a:b8:5f:19:1f:06:7a:76:ac:bd:0c:46:e4:
ea:69:56:fe:e9:1e:c7:d9:2b:35:29:ec:c8:31:5e:09:78:bf:
e9:c8:9d:9b:aa:f6:8a:a6:55:68:03:85:c6:84:b0:24:da:bf:
cd:0a:a7:e5:11:15:1f:64:0b:64:41:72:79:6c:26:dc:5d:bf:
aa:3b:d9:28:c9:f7:66:d7:f9:f0:55:8d:7d:ac:c4:80:fa:b8:
8a:b6:ff:23:86:c8:bf:4e:1f:f8:09:cd:12:2f:7e:0d:de:cb:
4d:ca:93:02:75:56:9f:ac:96:d5:52:17:f8:d6:9c:78:1f:bb:
66:c3:33:db:7f:ee:7b:5f:41:23:7b:31:0c:d0:af:07:b4:8f:
83:37:6e:10:6b:d3:8c:6e:78:2f:2b:35:88:de:c7:b2:c7:ce:
5f:fa:2f:9c:ef:08:a1:b2:e5:3a:f4:30:18:88:8f:77:d5:55:
91:45:39:cd:d4:ba:e8:1d:10:db:06:bb:7d:14:de:e3:c1:96:
57:ca:5e:01:5f:2d:e7:31:2c:d4:a9:eb:7b:be:8f:fe:f5:2b:
e3:b9:03:0f:10:0a:09:53:7b:65:e9:de:b1:57:de:7a:19:10:
aa:d9:b6:cf:35:e0:e4:c4:cc:47:c9:fc:d9:a9:17:d3:3b:e6:
f1:38:13:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 07:15:18 2025 by rpki-client