Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/14e920-14a7-41cf-bdd7-57786951b78f/1/yMJ3AJXV7WGJHJvJkUciZtrsXJU.roa
File: yMJ3AJXV7WGJHJvJkUciZtrsXJU.roa (raw, json)
Hash identifier: 37d132ZgeZzFj9E9ztJtsj57NHyMBeOjocVH6T1LNrs=
Subject key identifier: C8:C2:77:00:95:D5:ED:61:89:1C:9B:C9:91:47:22:66:DA:EC:5C:95
Certificate issuer: /CN=2e0d40517a873b7dc2aeb28d0ed6a2f993a3d74d
Certificate serial: 018CC50154B35098EC0A7925F17E617A203E
Authority key identifier: 2E:0D:40:51:7A:87:3B:7D:C2:AE:B2:8D:0E:D6:A2:F9:93:A3:D7:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Lg1AUXqHO33CrrKNDtai-ZOj100.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/14e920-14a7-41cf-bdd7-57786951b78f/1/yMJ3AJXV7WGJHJvJkUciZtrsXJU.roa
Signing time: Mon 01 Jan 2024 12:30:47 +0000
ROA not before: Mon 01 Jan 2024 12:30:47 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 13039
IP address blocks: 192.54.45.0/24 maxlen: 24
192.109.252.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:01:54:b3:50:98:ec:0a:79:25:f1:7e:61:7a:20:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e0d40517a873b7dc2aeb28d0ed6a2f993a3d74d
Validity
Not Before: Jan 1 12:30:47 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c8c2770095d5ed61891c9bc991472266daec5c95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:60:85:07:f7:57:38:b6:0d:c5:3e:aa:ca:78:
af:6e:4f:d8:2b:1a:a5:18:6d:7f:4b:59:15:10:b9:
d3:74:9f:b2:2c:84:22:79:47:70:f7:d3:5e:5e:c9:
e3:87:80:82:e4:14:4f:1b:26:08:e9:ef:07:86:d6:
de:83:f2:66:59:22:4d:c6:4c:38:58:ee:3f:d7:f3:
2d:20:2a:6a:a1:8f:6c:82:95:a3:88:1e:d5:26:c8:
04:8d:9b:61:7c:a7:a1:26:2e:8e:4f:ba:86:9b:4b:
ec:91:11:3b:36:68:b6:29:3e:0a:b4:3f:69:b1:45:
ae:7a:87:ed:c9:76:aa:8c:68:b8:10:0a:cb:5b:d2:
db:8c:d7:66:ee:fd:31:bf:9d:c0:2a:87:3f:e8:1c:
ec:ac:97:05:6c:e8:6d:c2:e6:74:f7:ad:3c:11:70:
a8:32:18:3d:41:24:e7:e0:f3:52:a9:49:6c:54:2c:
6a:5b:36:b1:9e:72:4a:ec:35:3a:fe:77:07:c0:4a:
96:52:7e:3c:e8:42:b4:c4:d6:e7:6f:ca:e6:80:31:
1d:e8:9e:94:0c:6e:80:a4:ea:2c:71:c0:6e:e0:99:
e6:3b:13:f0:fd:96:5b:fd:fe:7e:f9:9a:b6:e8:22:
81:dd:61:dc:58:60:ba:3c:89:ce:27:3c:50:de:c5:
7f:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:C2:77:00:95:D5:ED:61:89:1C:9B:C9:91:47:22:66:DA:EC:5C:95
X509v3 Authority Key Identifier:
keyid:2E:0D:40:51:7A:87:3B:7D:C2:AE:B2:8D:0E:D6:A2:F9:93:A3:D7:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lg1AUXqHO33CrrKNDtai-ZOj100.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/14e920-14a7-41cf-bdd7-57786951b78f/1/yMJ3AJXV7WGJHJvJkUciZtrsXJU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/14e920-14a7-41cf-bdd7-57786951b78f/1/Lg1AUXqHO33CrrKNDtai-ZOj100.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.54.45.0/24
192.109.252.0/24
Signature Algorithm: sha256WithRSAEncryption
59:5d:44:ca:4c:89:ee:3f:48:d1:39:c8:f2:79:a5:b3:6c:9b:
ba:cd:53:a7:f1:69:33:a3:84:5e:cf:ed:53:a8:33:ee:19:3d:
f7:86:df:26:2f:a1:b7:06:2a:3d:c9:5f:ab:96:28:ea:5e:46:
5e:82:a9:cc:99:b1:f1:7b:69:51:f9:28:be:7c:1f:be:6a:77:
f4:84:73:4e:0e:38:79:e3:e2:af:8d:6b:1e:04:cf:bd:b8:20:
4a:cf:d5:46:ea:99:08:94:e7:c4:55:90:77:f1:dd:4e:93:41:
43:1c:0b:31:b1:55:33:a9:0f:1f:3f:54:42:9f:eb:a5:7f:02:
b6:2f:20:b7:b5:fd:53:b1:73:c7:09:57:b6:ff:ee:7f:53:39:
39:dc:4d:c7:99:99:8f:40:d1:3d:cc:fc:e8:92:8e:98:eb:75:
aa:fc:96:3a:bf:f9:1c:28:02:3c:f4:94:2e:32:46:2c:da:c2:
9f:5c:42:f8:dd:3c:d5:95:53:04:5a:f5:86:92:d2:4b:57:ee:
1b:1a:82:b1:c8:27:c1:87:74:40:a6:26:dc:4f:31:65:da:67:
37:d8:f4:e6:9a:82:28:d1:f7:bb:0b:06:ab:dd:69:ad:c7:20:
4a:7d:16:7a:a3:c1:60:24:0b:bd:13:66:2a:ef:a0:d4:f7:3a:
7b:cc:93:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 13:26:49 2025 by rpki-client