Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/ca1797-616f-4973-b740-c8b5dfc5a13f/1/5YyqSxLIcXFPIwOdvY9Rh4uGVOc.roa
File: 5YyqSxLIcXFPIwOdvY9Rh4uGVOc.roa (raw, json)
Hash identifier: uGepzmi4cPy4AsJc18Ia0pOn0QIzzcEx4qW4Atgsedw=
Subject key identifier: E5:8C:AA:4B:12:C8:71:71:4F:23:03:9D:BD:8F:51:87:8B:86:54:E7
Certificate issuer: /CN=b230c8fd0205ecf0ef6b56e037d5629b17b275ee
Certificate serial: 0194228DF15B99328E747F40DD55E0D01FDA
Authority key identifier: B2:30:C8:FD:02:05:EC:F0:EF:6B:56:E0:37:D5:62:9B:17:B2:75:EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sjDI_QIF7PDva1bgN9Vimxeyde4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/ca1797-616f-4973-b740-c8b5dfc5a13f/1/5YyqSxLIcXFPIwOdvY9Rh4uGVOc.roa
Signing time: Wed 01 Jan 2025 15:48:35 +0000
ROA not before: Wed 01 Jan 2025 15:48:35 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 29099
IP address blocks: 185.99.34.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:f1:5b:99:32:8e:74:7f:40:dd:55:e0:d0:1f:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b230c8fd0205ecf0ef6b56e037d5629b17b275ee
Validity
Not Before: Jan 1 15:48:35 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e58caa4b12c871714f23039dbd8f51878b8654e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:8f:a0:09:62:b3:9e:18:c8:e8:0e:c2:05:da:
80:d2:36:fa:4e:11:df:ae:ec:2e:57:68:42:f2:3c:
68:35:8f:33:db:7d:f5:99:b2:f4:22:42:fc:fd:df:
17:ca:9d:fe:f8:a4:dc:87:bd:d9:6b:1a:a3:45:04:
28:29:b2:2c:1f:59:2e:da:d4:3e:90:84:14:9a:c8:
dc:78:6f:f7:d4:6c:1c:6a:88:43:d5:9a:9e:c4:38:
df:0c:46:ab:69:f5:47:53:ca:56:e2:4b:a8:f0:a5:
61:37:e0:40:b8:50:62:63:bf:9b:50:ff:45:4e:72:
1e:a6:35:9a:ad:79:04:95:4d:a7:0b:b8:56:2f:0f:
57:c5:57:61:c0:4b:60:da:c7:04:88:b7:dd:14:ef:
a4:b8:fc:f5:52:17:59:f9:e8:17:af:b3:de:19:12:
98:ad:c2:93:ef:f8:2f:a9:97:c7:da:63:fb:28:76:
21:80:c5:9d:1b:2b:53:7a:93:a6:89:87:08:15:04:
78:1a:28:7e:6d:9a:ea:3f:20:b6:d3:f6:ea:0e:e5:
16:33:a1:91:ea:77:03:7a:23:81:45:7a:f8:f2:47:
99:c7:d1:3d:9d:13:fe:08:39:69:51:8b:0e:c1:56:
2b:e7:3a:d7:2e:ef:02:c8:ef:12:63:20:95:28:6c:
2e:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:8C:AA:4B:12:C8:71:71:4F:23:03:9D:BD:8F:51:87:8B:86:54:E7
X509v3 Authority Key Identifier:
keyid:B2:30:C8:FD:02:05:EC:F0:EF:6B:56:E0:37:D5:62:9B:17:B2:75:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sjDI_QIF7PDva1bgN9Vimxeyde4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/ca1797-616f-4973-b740-c8b5dfc5a13f/1/5YyqSxLIcXFPIwOdvY9Rh4uGVOc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/ca1797-616f-4973-b740-c8b5dfc5a13f/1/sjDI_QIF7PDva1bgN9Vimxeyde4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.99.34.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:9d:bd:ea:44:94:5c:fb:76:10:91:f2:5c:d2:b1:8b:41:9c:
4d:e4:6a:66:70:9e:37:4c:90:3a:6f:7a:02:b7:de:38:5c:a9:
27:de:9e:bf:a6:46:03:fe:1c:74:5e:1c:e7:7e:04:96:3d:04:
51:8a:33:b6:f0:41:6f:b3:59:04:0a:a7:53:2f:b6:36:d8:fd:
05:2d:64:0f:12:33:8c:42:50:15:9c:e5:db:35:e2:47:00:fa:
95:b9:fd:c7:c2:37:d3:4a:44:f5:46:01:b5:e2:96:db:e5:41:
c9:dd:cd:1a:7a:89:1c:7c:84:54:66:32:8c:e7:49:2e:8e:f7:
47:bf:24:30:f3:ac:6b:ab:46:2d:5e:7e:37:71:87:94:1a:68:
05:42:ba:4c:c4:82:d3:af:c4:6f:4f:4e:9b:d4:a8:3d:d9:8f:
42:d9:77:b6:ed:ed:4c:40:2e:a8:44:72:2d:c0:7e:61:98:89:
94:2b:04:18:95:9f:a6:c5:29:cd:ca:61:39:e8:27:fa:a3:c5:
91:d8:81:77:e0:68:c8:24:f9:fd:85:90:be:bb:64:bf:9f:46:
f2:6b:ed:13:43:24:a5:35:3e:51:e5:f7:56:9e:29:9b:86:2f:
dc:9b:57:e5:be:ca:2e:31:4f:a0:61:19:c3:37:3f:3e:f4:55:
96:41:36:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 01:05:04 2025 by rpki-client