Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/d57a64-bd32-4c91-be06-fee8eaf73b0d/1/yc556VZRN51TX5Opo32pMpmaqyc.roa
File: yc556VZRN51TX5Opo32pMpmaqyc.roa (raw, json)
Hash identifier: JUEUgIf6cuFn4ydX3ZXU1bMUG5S/hNysKafNtqmmPcs=
Subject key identifier: C9:CE:79:E9:56:51:37:9D:53:5F:93:A9:A3:7D:A9:32:99:9A:AB:27
Certificate issuer: /CN=6d088cef28e02af7d00f297816c55f8e3c43d535
Certificate serial: 019428270516205E62DE6B917B03C5736892
Authority key identifier: 6D:08:8C:EF:28:E0:2A:F7:D0:0F:29:78:16:C5:5F:8E:3C:43:D5:35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bQiM7yjgKvfQDyl4FsVfjjxD1TU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/d57a64-bd32-4c91-be06-fee8eaf73b0d/1/yc556VZRN51TX5Opo32pMpmaqyc.roa
Signing time: Thu 02 Jan 2025 17:53:53 +0000
ROA not before: Thu 02 Jan 2025 17:53:53 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49418
IP address blocks: 91.209.135.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:27:05:16:20:5e:62:de:6b:91:7b:03:c5:73:68:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d088cef28e02af7d00f297816c55f8e3c43d535
Validity
Not Before: Jan 2 17:53:53 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c9ce79e95651379d535f93a9a37da932999aab27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:fc:ac:1b:76:2a:1a:f6:68:b4:57:8c:d4:48:
06:58:47:ff:7b:e0:f7:b3:87:91:45:38:13:6f:b1:
b1:9f:47:dd:e3:27:1e:5b:e1:62:52:eb:6e:37:c0:
b8:c3:12:a6:b9:8b:1f:40:a8:2e:de:95:8b:ef:ea:
a7:cf:12:94:2c:fb:31:c5:16:97:2d:2f:54:e6:b7:
10:9b:3b:35:ed:c3:c5:f3:6b:d0:d7:7b:53:f2:8e:
03:85:2d:89:ce:1a:69:a4:ae:51:18:af:c1:90:98:
a8:14:fd:01:8b:7f:35:bf:ab:83:07:97:04:c0:e1:
db:88:2b:68:ab:e0:58:4d:29:49:82:e3:f7:9e:88:
69:59:69:7c:d4:5c:8e:49:cb:3d:98:ca:08:f8:89:
b9:4c:9c:ce:a4:0a:e7:a3:7b:ec:72:1b:a8:d2:d1:
d8:35:54:df:64:e0:2b:cf:fa:ec:98:b2:ac:f9:c6:
cb:f8:39:ce:92:92:17:22:fe:3d:07:f9:4b:61:8b:
12:32:4b:3b:ff:87:a8:ae:91:8a:ca:07:d8:91:ce:
84:99:0d:25:23:e4:1f:f5:e6:ab:94:56:6e:84:73:
9b:06:44:41:7f:37:57:e2:99:14:55:ba:7d:74:7c:
4d:46:c3:c3:ae:09:aa:7b:c0:2b:bc:d6:1b:c9:ae:
9d:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:CE:79:E9:56:51:37:9D:53:5F:93:A9:A3:7D:A9:32:99:9A:AB:27
X509v3 Authority Key Identifier:
keyid:6D:08:8C:EF:28:E0:2A:F7:D0:0F:29:78:16:C5:5F:8E:3C:43:D5:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bQiM7yjgKvfQDyl4FsVfjjxD1TU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/d57a64-bd32-4c91-be06-fee8eaf73b0d/1/yc556VZRN51TX5Opo32pMpmaqyc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/d57a64-bd32-4c91-be06-fee8eaf73b0d/1/bQiM7yjgKvfQDyl4FsVfjjxD1TU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.209.135.0/24
Signature Algorithm: sha256WithRSAEncryption
35:c3:62:21:5c:b2:f9:d2:9d:f4:04:91:36:18:28:ee:76:bc:
38:aa:ad:a1:22:3a:54:5b:4a:cf:6c:aa:ab:08:bd:2e:0a:bd:
d9:84:64:ab:fc:75:0b:38:bc:e7:7d:8f:8b:9a:5f:a8:d0:b9:
8e:c5:bb:5e:d0:7d:68:c9:31:38:d1:44:da:ba:55:fc:a0:b5:
da:d5:4d:d4:88:b7:dd:b9:42:95:4d:cd:89:af:8d:b0:55:28:
11:7a:c5:47:70:19:46:d0:d4:92:dc:fd:18:51:b4:36:e4:55:
eb:9a:c1:35:ff:5d:60:03:38:99:0d:7d:a7:4e:64:13:65:d9:
c7:90:e9:95:79:a7:57:f8:6a:88:ad:a1:40:90:e5:79:b3:b8:
41:80:df:f6:04:64:a1:d2:d0:6e:1a:0b:69:ee:7a:ca:16:04:
7d:61:05:22:95:30:dc:0b:d5:67:28:a2:ba:7d:fe:af:c5:fe:
17:4c:71:56:85:fe:ef:22:98:5b:80:b6:97:91:9e:ba:89:af:
6b:aa:46:e0:b6:90:c4:99:5a:26:1f:0e:11:c2:b3:02:31:49:
a3:b4:7c:48:40:12:f7:d9:ca:20:8f:8c:3f:d1:0e:96:2b:ff:
48:c1:74:23:90:44:1f:fc:58:4a:32:11:e2:9a:a7:61:e7:47:
96:51:5a:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 11:59:30 2025 by rpki-client