Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/7f1c89-6ab3-4285-98eb-c918e2f729aa/1/y_a5vDBNlNinRXcYyksflErXkis.roa
File: y_a5vDBNlNinRXcYyksflErXkis.roa (raw, json)
Hash identifier: WWaucHsCtZRIuRAqLOZS3ZMFzYhV4x3wEWpilnSPSDo=
Subject key identifier: CB:F6:B9:BC:30:4D:94:D8:A7:45:77:18:CA:4B:1F:94:4A:D7:92:2B
Certificate issuer: /CN=74733e08ddc25367be6f3ad8a6cefd18e75eed82
Certificate serial: 018776900011C4AEDE38EBCAE99518725969
Authority key identifier: 74:73:3E:08:DD:C2:53:67:BE:6F:3A:D8:A6:CE:FD:18:E7:5E:ED:82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dHM-CN3CU2e-bzrYps79GOde7YI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/7f1c89-6ab3-4285-98eb-c918e2f729aa/1/y_a5vDBNlNinRXcYyksflErXkis.roa
Signing time: Wed 12 Apr 2023 17:42:41 +0000
ROA not before: Wed 12 Apr 2023 17:42:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 205124
IP address blocks: 149.62.35.0/24 maxlen: 24
149.62.33.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:76:90:00:11:c4:ae:de:38:eb:ca:e9:95:18:72:59:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74733e08ddc25367be6f3ad8a6cefd18e75eed82
Validity
Not Before: Apr 12 17:42:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cbf6b9bc304d94d8a7457718ca4b1f944ad7922b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:2a:d2:00:5b:2b:c6:d5:1d:b1:d1:b9:cb:6b:
ca:5e:96:87:c5:25:32:7b:d6:d9:20:cf:1f:76:e2:
fb:c7:7c:02:09:47:87:5e:03:2d:3a:d6:8b:87:40:
5a:4f:fb:14:b1:06:27:2a:6c:0b:19:99:bd:c0:2e:
cf:36:42:e7:3f:70:af:29:c9:63:0a:c7:6f:5e:1e:
33:c2:57:7a:d8:be:aa:fd:4e:17:97:e8:4c:a5:8f:
e3:f3:b2:9a:3d:21:db:80:66:2f:71:c3:e8:8a:65:
47:8f:98:8b:b1:9a:b4:b3:d1:56:08:54:ef:3c:b1:
82:04:4a:ba:80:fc:19:22:08:bb:68:f3:ff:5e:6d:
f1:1c:95:2e:ad:8a:5b:81:bd:06:5b:09:33:e7:13:
e9:e7:02:6f:5a:01:10:7f:01:63:5d:1f:cb:d7:cd:
25:ca:22:16:bc:1f:cf:c2:21:fb:f1:e3:b0:c0:ac:
89:d7:91:5a:7b:76:9e:aa:47:5d:03:f9:d8:5d:b1:
f6:68:a9:86:6d:e6:7d:1b:9b:4d:7a:b6:56:d1:16:
49:fa:97:c5:84:71:d0:1a:19:c5:11:97:19:6a:33:
28:cc:54:4a:01:cc:d7:21:d1:14:3f:f2:ad:8c:db:
31:a1:be:cf:02:58:5e:32:6b:ee:f6:01:51:bf:cb:
99:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:F6:B9:BC:30:4D:94:D8:A7:45:77:18:CA:4B:1F:94:4A:D7:92:2B
X509v3 Authority Key Identifier:
keyid:74:73:3E:08:DD:C2:53:67:BE:6F:3A:D8:A6:CE:FD:18:E7:5E:ED:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dHM-CN3CU2e-bzrYps79GOde7YI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/7f1c89-6ab3-4285-98eb-c918e2f729aa/1/y_a5vDBNlNinRXcYyksflErXkis.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/7f1c89-6ab3-4285-98eb-c918e2f729aa/1/dHM-CN3CU2e-bzrYps79GOde7YI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
149.62.33.0/24
149.62.35.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:21:d2:8c:11:b9:d0:e4:96:e6:9d:1c:82:56:b7:5d:90:a2:
66:c7:38:64:93:f2:f7:3c:b3:0d:d0:e1:9c:92:40:db:4a:c9:
a7:b6:75:40:b9:4f:9a:ca:4a:25:4c:0c:30:aa:32:06:20:7c:
fb:19:50:6c:ac:38:db:ef:5b:3b:59:3a:ef:c3:d5:6c:e7:b5:
af:0a:cc:bf:d1:81:fd:ae:c6:f7:c5:b5:dd:ae:59:87:3e:0a:
0d:b9:4c:c0:f9:4c:8d:92:8f:d1:a1:c9:98:48:da:55:63:47:
14:01:af:14:d0:c9:51:ab:df:ad:c3:b4:79:6f:62:69:13:88:
f8:80:83:9a:83:cb:78:e8:14:5d:8c:cb:aa:2e:13:91:9c:d0:
f5:09:9a:86:01:d5:28:bc:e1:a3:de:1b:1f:5c:e4:c5:38:fd:
42:4c:ac:1e:17:88:5f:89:29:27:d0:5a:47:49:a8:64:e4:f7:
9f:ac:65:c7:1c:6a:9c:42:3a:90:a4:ad:23:7d:25:23:90:63:
ce:fb:6a:e9:73:c4:1c:eb:b6:01:96:95:e4:8c:b5:50:ce:d8:
bb:70:54:6c:33:34:83:45:a2:b3:51:50:22:40:14:82:0d:a7:
c0:af:3e:e8:28:31:09:4d:08:70:14:ee:5b:f2:00:5d:91:bb:
79:db:6d:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 06:40:57 2025 by rpki-client