Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/yKBUP2UFCWkPYW4GF_BVvuU81TA.roa
File: yKBUP2UFCWkPYW4GF_BVvuU81TA.roa (raw, json)
Hash identifier: WhhnbvDku8JkgKwkuZRu8/9sK69kkhsQTHzCtFlTwZc=
Subject key identifier: C8:A0:54:3F:65:05:09:69:0F:61:6E:06:17:F0:55:BE:E5:3C:D5:30
Certificate issuer: /CN=6f75e4e94b5cb74517b7b01568015da9e6eecdb6
Certificate serial: 018CCA2A35111DA1C5C3B1C0BE6080E55AF7
Authority key identifier: 6F:75:E4:E9:4B:5C:B7:45:17:B7:B0:15:68:01:5D:A9:E6:EE:CD:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/yKBUP2UFCWkPYW4GF_BVvuU81TA.roa
Signing time: Tue 02 Jan 2024 12:33:32 +0000
ROA not before: Tue 02 Jan 2024 12:33:32 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 53587
IP address blocks: 37.128.254.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2a:35:11:1d:a1:c5:c3:b1:c0:be:60:80:e5:5a:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f75e4e94b5cb74517b7b01568015da9e6eecdb6
Validity
Not Before: Jan 2 12:33:32 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c8a0543f650509690f616e0617f055bee53cd530
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:42:fe:31:17:85:b8:6e:37:31:d2:2e:7f:64:
53:68:51:34:92:e6:31:f8:e1:99:3c:d5:b8:6b:f6:
08:8a:56:dc:42:fa:7e:85:09:07:24:fc:6e:a0:20:
9b:1e:0a:f4:f2:f8:ca:8c:34:e2:26:a5:43:7b:97:
02:f4:59:5b:60:78:90:a5:a4:0c:d7:81:8f:a5:55:
9d:1a:55:e6:2e:c2:96:e5:3d:be:df:5c:06:e9:ed:
5b:b8:e6:09:d6:35:cc:79:8f:f3:5f:47:bc:95:2e:
b7:2d:94:cf:86:64:15:ae:b6:9d:32:9a:8d:b9:e3:
d9:ec:d1:40:0c:98:68:51:46:c1:47:f2:1c:df:1b:
20:03:bd:bc:6e:c9:63:5f:84:38:08:f4:9b:9f:69:
b5:6a:8a:94:72:5c:6e:09:da:df:b6:aa:7c:41:11:
c8:0c:e2:ce:50:25:d0:6c:73:78:b4:96:1a:20:d0:
de:c5:51:0f:92:04:87:7b:e6:b9:56:a1:51:72:14:
2d:62:a3:8b:c4:f7:51:4c:3d:7b:1d:42:72:57:89:
85:f5:cf:34:61:04:57:11:90:8e:6c:4a:eb:2b:53:
a6:c1:fc:0c:80:f6:e7:f9:db:2f:c7:b6:be:99:2a:
49:fb:50:ca:cd:5e:3e:1d:b9:fc:26:c5:d8:63:e2:
fa:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:A0:54:3F:65:05:09:69:0F:61:6E:06:17:F0:55:BE:E5:3C:D5:30
X509v3 Authority Key Identifier:
keyid:6F:75:E4:E9:4B:5C:B7:45:17:B7:B0:15:68:01:5D:A9:E6:EE:CD:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/yKBUP2UFCWkPYW4GF_BVvuU81TA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/b3Xk6Utct0UXt7AVaAFdqebuzbY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.128.254.0/23
Signature Algorithm: sha256WithRSAEncryption
1a:f4:6f:27:0e:3c:5a:f9:8a:f5:eb:ba:44:41:0c:a3:6b:75:
05:95:70:20:22:fc:a9:c7:67:17:64:fa:07:f0:50:7c:c7:bf:
ca:0d:da:76:4a:a4:86:be:c3:60:2c:d0:ce:f9:1a:5d:db:18:
83:23:49:28:4b:65:f4:b4:af:e1:01:75:77:bb:ef:de:c4:91:
3c:18:26:df:2c:f7:5e:e4:9d:6d:dd:cd:05:04:c2:3e:79:c5:
a2:72:15:a3:68:80:ba:cc:dd:3f:3b:c2:18:06:c5:27:b9:01:
f3:cd:52:8a:d8:cc:6d:91:2c:99:e2:db:fc:9e:45:29:ef:61:
59:c5:65:ae:22:1f:b1:b7:c8:1e:35:c5:56:6e:a4:d7:7a:e9:
04:9a:96:2a:19:3b:d9:04:be:40:0b:fb:a2:38:a8:7f:ab:49:
b0:6d:24:10:af:17:55:eb:69:2c:ad:93:72:71:86:13:d0:c6:
ab:da:35:c1:93:88:45:71:1e:b2:a7:c0:b8:f6:69:10:51:de:
dc:0b:ff:44:c8:04:db:85:08:9f:37:4b:4d:fa:49:cb:de:e8:
4e:22:93:5c:a5:7c:2e:c2:11:a0:51:27:3e:fb:47:9f:1c:9a:
c3:ee:ad:cb:b5:87:46:99:a1:0a:33:09:22:05:52:10:a9:7b:
1d:a8:b1:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:23:51 2025 by rpki-client