Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/Y71tyYD8XpUrmbiDbNNAPk6hr3o.roa
File: Y71tyYD8XpUrmbiDbNNAPk6hr3o.roa (raw, json)
Hash identifier: /t92JdiaUoVvmXD+1T9H/5pSHrNo8Xa6kxGQrWIwPNk=
Subject key identifier: 63:BD:6D:C9:80:FC:5E:95:2B:99:B8:83:6C:D3:40:3E:4E:A1:AF:7A
Certificate issuer: /CN=6f75e4e94b5cb74517b7b01568015da9e6eecdb6
Certificate serial: 018CCA2A369F98B71498172FEE265BD0A4A3
Authority key identifier: 6F:75:E4:E9:4B:5C:B7:45:17:B7:B0:15:68:01:5D:A9:E6:EE:CD:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/Y71tyYD8XpUrmbiDbNNAPk6hr3o.roa
Signing time: Tue 02 Jan 2024 12:33:33 +0000
ROA not before: Tue 02 Jan 2024 12:33:33 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 207326
IP address blocks: 185.65.62.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2a:36:9f:98:b7:14:98:17:2f:ee:26:5b:d0:a4:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f75e4e94b5cb74517b7b01568015da9e6eecdb6
Validity
Not Before: Jan 2 12:33:33 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=63bd6dc980fc5e952b99b8836cd3403e4ea1af7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:ad:a0:24:34:99:71:5d:6f:3b:9e:41:a6:4e:
60:15:28:62:03:57:a0:45:09:07:36:62:6e:6f:b3:
4a:2c:db:36:61:6e:00:bb:c9:ac:22:8e:09:ae:9d:
1c:b6:88:36:12:e6:d2:64:1e:99:6f:5a:c0:9c:cf:
7f:e6:c8:f7:0f:e6:c0:d1:f3:c5:42:e5:db:43:7b:
d1:e5:9a:5f:8a:14:3a:04:26:be:4d:ad:55:6e:80:
09:18:e3:1a:57:3f:77:4c:a8:78:f7:0d:99:0e:fd:
ec:28:3a:d6:6c:93:81:66:62:30:f6:5b:ce:9a:72:
4a:8f:15:0e:5f:65:8b:b6:b2:19:80:c5:bc:8c:73:
d0:63:c7:5f:51:ad:86:53:97:ad:11:af:c6:15:81:
93:ba:cb:25:c3:83:f0:cc:d8:62:87:40:28:2f:75:
47:1a:4e:ab:d2:10:9e:ae:51:4c:e5:d7:15:f3:cf:
d6:19:51:1d:4c:46:46:0e:98:37:35:80:a9:fa:61:
50:02:28:54:88:c6:c9:f4:35:bb:3f:c4:3f:de:4e:
18:c2:53:63:59:e6:05:2d:b9:31:b8:13:3d:ed:24:
21:ff:c1:f3:a8:ff:d4:b4:c9:11:30:d0:3d:6c:62:
08:8c:01:ad:12:3b:3a:4e:ad:6f:53:54:b6:4e:b6:
12:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:BD:6D:C9:80:FC:5E:95:2B:99:B8:83:6C:D3:40:3E:4E:A1:AF:7A
X509v3 Authority Key Identifier:
keyid:6F:75:E4:E9:4B:5C:B7:45:17:B7:B0:15:68:01:5D:A9:E6:EE:CD:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/Y71tyYD8XpUrmbiDbNNAPk6hr3o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/b3Xk6Utct0UXt7AVaAFdqebuzbY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.65.62.0/24
Signature Algorithm: sha256WithRSAEncryption
59:c9:34:ce:c3:a0:7e:4a:11:79:48:e4:03:a7:45:12:c1:aa:
44:a9:31:2a:46:4f:13:df:20:11:57:1e:fb:6a:65:23:5a:9d:
e6:d3:0c:f3:41:9a:95:43:bf:b4:eb:a2:34:93:bd:0b:95:ca:
37:75:2d:7d:b2:ff:13:9b:f8:26:cc:a5:3b:63:45:10:d0:e6:
cb:b4:40:46:20:fc:90:cf:59:45:14:d0:1b:99:06:97:10:fb:
cb:c8:0a:48:bc:27:0a:2f:dd:b7:36:8e:13:61:7e:a5:3a:12:
dc:06:0a:fd:23:da:6a:6c:e1:08:c6:ea:e9:01:93:5a:34:ce:
53:f0:ae:8e:9e:f8:3f:09:14:c1:be:7f:b5:f0:b5:13:98:ca:
53:e0:46:5f:4e:fd:77:03:0a:98:d0:0d:df:9c:82:4a:84:f0:
6c:c9:d9:df:45:04:c2:28:1c:2e:08:2e:4a:90:d3:ae:47:69:
c8:71:e4:b6:b9:f3:d8:55:39:d3:d0:5c:31:02:14:d5:34:5f:
3e:c2:d8:1b:c6:68:92:dd:70:65:55:5b:b0:50:bb:76:15:c5:
97:6f:8c:7f:94:1e:48:12:ac:c4:ab:83:a4:0e:de:35:e1:9a:
3f:07:d4:da:06:13:40:c9:4d:5b:e4:ae:1a:82:bf:7a:dc:53:
5f:9b:a8:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:26:33 2025 by rpki-client