Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/29b42b-566e-43e9-a2dc-f548699f947a/1/yCz-ewAMqZx7lCDPn4Ya6LAQnZ4.roa
File: yCz-ewAMqZx7lCDPn4Ya6LAQnZ4.roa (raw, json)
Hash identifier: biH7dwZg2HQ2zwVaqcwP5LR/5HOneIgO7AJ9Gj1riJ4=
Subject key identifier: C8:2C:FE:7B:00:0C:A9:9C:7B:94:20:CF:9F:86:1A:E8:B0:10:9D:9E
Certificate issuer: /CN=30a27580649a992e41e32cf8c12245e07ff9f9c5
Certificate serial: 019420D609DCB39E4B09465BF1B560ADC5EA
Authority key identifier: 30:A2:75:80:64:9A:99:2E:41:E3:2C:F8:C1:22:45:E0:7F:F9:F9:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MKJ1gGSamS5B4yz4wSJF4H_5-cU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/29b42b-566e-43e9-a2dc-f548699f947a/1/yCz-ewAMqZx7lCDPn4Ya6LAQnZ4.roa
Signing time: Wed 01 Jan 2025 07:48:05 +0000
ROA not before: Wed 01 Jan 2025 07:48:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 3303
IP address blocks: 193.247.58.0/24 maxlen: 24
193.247.60.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d6:09:dc:b3:9e:4b:09:46:5b:f1:b5:60:ad:c5:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30a27580649a992e41e32cf8c12245e07ff9f9c5
Validity
Not Before: Jan 1 07:48:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c82cfe7b000ca99c7b9420cf9f861ae8b0109d9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:90:a1:99:fe:37:5a:59:91:16:c3:53:81:f5:
96:62:12:c2:2a:60:aa:53:fa:cd:e1:8d:f2:11:8d:
e1:fe:58:c1:ed:23:13:fa:60:03:17:07:af:6b:6e:
05:cc:7d:ba:9b:fe:96:2c:96:7b:53:d6:a2:b5:7e:
6c:f2:f7:c2:09:cf:e9:c2:52:bb:ce:08:a7:a2:1b:
32:24:27:50:43:91:fa:fa:46:8c:af:61:2c:92:97:
f2:a3:49:18:a3:4a:d9:07:e8:c9:80:7d:24:90:0a:
ba:b6:43:c7:5b:12:f2:67:c9:44:62:d1:94:56:cb:
d6:0b:61:4a:d6:fb:51:67:10:08:74:0f:18:6c:ad:
a9:72:86:26:02:36:3e:6c:b0:78:a3:ff:51:94:2a:
12:f9:47:0c:75:98:1a:c0:24:92:26:8e:49:9a:20:
04:ac:57:a1:44:18:e0:09:64:25:4b:19:63:1e:4c:
8d:5d:d0:22:6d:61:70:f3:21:c7:18:57:85:28:87:
e7:5b:ec:39:4d:77:a2:27:5a:ba:df:4d:0e:d7:9b:
4f:98:90:16:aa:76:a2:7e:81:3c:9f:f4:8d:18:2d:
3d:35:b5:b6:3a:fb:87:b3:10:5d:a2:6c:f9:28:60:
15:a7:f1:f2:b7:4e:55:ea:86:7f:98:8b:bd:b9:aa:
86:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:2C:FE:7B:00:0C:A9:9C:7B:94:20:CF:9F:86:1A:E8:B0:10:9D:9E
X509v3 Authority Key Identifier:
keyid:30:A2:75:80:64:9A:99:2E:41:E3:2C:F8:C1:22:45:E0:7F:F9:F9:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MKJ1gGSamS5B4yz4wSJF4H_5-cU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/29b42b-566e-43e9-a2dc-f548699f947a/1/yCz-ewAMqZx7lCDPn4Ya6LAQnZ4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/29b42b-566e-43e9-a2dc-f548699f947a/1/MKJ1gGSamS5B4yz4wSJF4H_5-cU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.247.58.0/24
193.247.60.0/23
Signature Algorithm: sha256WithRSAEncryption
10:f9:fa:ef:5e:e6:a7:a8:b7:7a:fa:d9:2c:ea:25:b3:34:7f:
5d:67:bd:e0:13:ea:e1:80:7a:90:f5:07:f4:4c:e8:7d:2f:e5:
7d:f6:3d:a9:39:5e:1b:dc:c8:7d:cd:94:36:ba:a1:4a:99:4e:
50:f6:f1:21:b3:18:18:3e:15:7a:c9:4b:90:5f:40:bd:9c:52:
69:13:01:2a:9b:7e:81:16:89:4d:8d:15:0b:d8:71:6a:55:14:
32:36:87:a3:e1:da:6e:ab:50:90:a2:2b:e4:32:c5:94:7a:dc:
03:a8:8a:d3:42:1c:be:b5:b1:26:5c:79:ee:6b:22:f0:ec:bc:
a0:a8:e1:b3:ef:69:48:92:6d:6f:79:77:7d:64:a3:04:61:02:
44:1b:c8:27:9c:0d:fa:2f:9a:9d:26:30:f4:98:cc:7b:e8:94:
b6:18:64:43:62:1e:ba:d6:83:5f:db:3f:f3:4b:30:76:2d:9a:
c9:f0:62:aa:87:86:73:51:1b:25:3c:95:96:bf:d8:fb:e2:a6:
87:81:04:5f:ec:7b:7e:8b:2e:12:67:e3:e9:28:a2:c9:42:44:
6f:b0:3f:14:82:db:a2:82:8f:88:b4:0a:b1:70:c0:9b:01:fa:
57:12:68:3e:d2:01:bb:ea:ad:6e:5f:84:76:0b:41:31:27:3a:
94:fe:e1:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 20:06:48 2025 by rpki-client