Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/6a2946-f0a4-4e85-930e-d4edf16e0978/1/YCXRBD7Zei1Us8_1Zrh0WouSVoc.roa
File: YCXRBD7Zei1Us8_1Zrh0WouSVoc.roa (raw, json)
Hash identifier: uf8QrvagAa32Z+Kqsvosmb8r/ocn/wRQquN7YdO8AOY=
Subject key identifier: 60:25:D1:04:3E:D9:7A:2D:54:B3:CF:F5:66:B8:74:5A:8B:92:56:87
Certificate issuer: /CN=1bdba013655b9bb0caa285d75c142c1ee30f8854
Certificate serial: 019426D9358463E1FA3C17145278504239DE
Authority key identifier: 1B:DB:A0:13:65:5B:9B:B0:CA:A2:85:D7:5C:14:2C:1E:E3:0F:88:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G9ugE2Vbm7DKooXXXBQsHuMPiFQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/6a2946-f0a4-4e85-930e-d4edf16e0978/1/YCXRBD7Zei1Us8_1Zrh0WouSVoc.roa
Signing time: Thu 02 Jan 2025 11:49:16 +0000
ROA not before: Thu 02 Jan 2025 11:49:16 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 62054
IP address blocks: 193.176.252.0/24 maxlen: 24
193.176.254.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:35:84:63:e1:fa:3c:17:14:52:78:50:42:39:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1bdba013655b9bb0caa285d75c142c1ee30f8854
Validity
Not Before: Jan 2 11:49:16 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6025d1043ed97a2d54b3cff566b8745a8b925687
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:61:85:50:94:66:d8:c3:dc:a8:94:72:73:96:
2b:97:94:ba:5b:24:9c:dc:db:ff:e9:db:37:6b:17:
38:1b:2f:15:06:98:07:58:bb:20:b7:a6:1b:ff:fe:
2e:76:84:ca:5a:64:f5:ce:de:14:91:dc:43:42:9f:
37:68:ce:17:54:d8:ee:95:80:3e:de:fd:40:71:2e:
a7:b5:27:d6:3a:0e:97:68:ca:64:8c:83:18:6a:10:
32:be:12:52:47:9b:2f:b4:6b:31:de:ff:5e:6b:96:
40:ed:a5:84:16:c5:cd:6e:40:1f:b5:77:bd:cd:b6:
0c:22:5b:50:e9:2d:6d:9e:7c:b5:ea:0c:8d:d7:4c:
98:34:d4:fd:b3:be:14:b1:aa:5e:85:d8:f7:16:a6:
c1:dd:7a:fc:63:d1:72:08:35:f1:b3:2f:08:fa:60:
b7:63:ad:2c:ee:2d:49:63:1e:37:66:6e:56:82:22:
37:b3:64:96:f3:c8:2e:ed:0f:ba:02:61:13:77:0d:
06:06:76:e9:ce:05:d2:44:ab:09:c8:60:a5:1e:e6:
3c:08:66:69:ac:48:72:9e:09:02:bd:5f:47:90:00:
56:99:ff:39:6c:26:b8:f9:4f:4a:fc:c1:fd:cc:8e:
62:e5:c0:50:88:1b:48:c7:72:a4:a1:2b:a7:c6:fe:
b3:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:25:D1:04:3E:D9:7A:2D:54:B3:CF:F5:66:B8:74:5A:8B:92:56:87
X509v3 Authority Key Identifier:
keyid:1B:DB:A0:13:65:5B:9B:B0:CA:A2:85:D7:5C:14:2C:1E:E3:0F:88:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G9ugE2Vbm7DKooXXXBQsHuMPiFQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/6a2946-f0a4-4e85-930e-d4edf16e0978/1/YCXRBD7Zei1Us8_1Zrh0WouSVoc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/6a2946-f0a4-4e85-930e-d4edf16e0978/1/G9ugE2Vbm7DKooXXXBQsHuMPiFQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.176.252.0/24
193.176.254.0/24
Signature Algorithm: sha256WithRSAEncryption
76:13:ed:40:69:91:75:8a:27:b4:8e:cc:31:e6:a7:83:6b:f8:
ef:41:05:95:ae:ef:f1:42:ac:e0:52:94:b8:a2:f2:8f:65:64:
4c:90:33:52:ee:3a:7c:aa:b4:55:ec:45:0b:de:13:e2:2a:b0:
e5:7d:7d:b1:96:c6:d0:30:03:f1:a0:35:81:dd:f7:b0:6d:6b:
73:75:71:4e:51:64:73:99:f1:52:88:93:3a:2c:93:2e:ce:a0:
8d:f4:f5:ca:f4:cb:b3:b0:c7:4b:b6:d7:8d:55:0a:72:f1:66:
d9:50:ae:40:cc:09:15:a5:b8:73:65:f4:8a:a7:85:2d:95:7f:
4d:93:ee:02:86:17:8f:49:dc:93:6c:60:1a:5c:f0:fa:ea:61:
49:96:0c:df:4d:98:fd:e8:c3:97:30:fa:22:f5:3f:72:e0:6d:
d6:77:75:00:3b:38:e4:45:e6:a9:48:cf:77:ff:a4:39:19:42:
74:94:0d:c8:37:e6:5d:8b:45:4a:25:2b:9f:4f:46:e2:2f:b2:
ba:8c:c9:c7:58:95:d2:7b:4a:2e:79:8c:44:0f:89:60:19:93:
e2:41:06:dc:e9:0f:c5:78:c0:4b:23:3a:16:48:67:ec:2f:da:
a6:51:2e:d6:79:fa:9f:4d:b7:7f:9b:37:4e:7e:f9:65:ae:67:
fb:66:c8:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:31:03 2025 by rpki-client