Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/5d3f1c-cff5-4b2b-9e46-67847c76cb76/1/yAxzfi9JXUul0TO1jK5Ldw1Rthk.roa
File: yAxzfi9JXUul0TO1jK5Ldw1Rthk.roa (raw, json)
Hash identifier: lWeFfnhZvBmgn+p8KY5mqn1eMKw9nzLuCchH9PtGLK4=
Subject key identifier: C8:0C:73:7E:2F:49:5D:4B:A5:D1:33:B5:8C:AE:4B:77:0D:51:B6:19
Certificate issuer: /CN=eb41956d12dcb982bed47a9fac4a7e48e7787c79
Certificate serial: 0194266BC12AAC81F4AB879F594A25A70FE4
Authority key identifier: EB:41:95:6D:12:DC:B9:82:BE:D4:7A:9F:AC:4A:7E:48:E7:78:7C:79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/60GVbRLcuYK-1HqfrEp-SOd4fHk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/5d3f1c-cff5-4b2b-9e46-67847c76cb76/1/yAxzfi9JXUul0TO1jK5Ldw1Rthk.roa
Signing time: Thu 02 Jan 2025 09:49:43 +0000
ROA not before: Thu 02 Jan 2025 09:49:43 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 198423
IP address blocks: 192.41.216.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:c1:2a:ac:81:f4:ab:87:9f:59:4a:25:a7:0f:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eb41956d12dcb982bed47a9fac4a7e48e7787c79
Validity
Not Before: Jan 2 09:49:43 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c80c737e2f495d4ba5d133b58cae4b770d51b619
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:7d:24:9b:eb:8a:e4:24:ec:a8:75:ed:77:c7:
69:42:da:5a:d0:d5:59:4c:ce:3b:78:5e:5c:7d:8a:
57:04:57:6f:f5:11:70:dd:8c:e3:8e:56:04:92:a4:
48:8b:a3:8b:8b:51:4a:78:3d:c6:5f:32:89:59:4a:
4b:cb:e5:ea:27:81:ab:15:b1:ab:e0:df:ad:15:13:
b2:8c:cc:71:3f:d0:9c:47:ab:3f:a8:90:37:df:f7:
85:ac:4a:a7:a8:ad:ed:87:64:19:b9:0b:92:38:3a:
da:99:8e:4c:a7:30:30:35:88:45:43:c9:84:41:a6:
d2:cf:4c:d9:be:b0:52:da:f3:6b:f9:84:25:d7:df:
a1:29:59:1e:01:5c:42:05:8a:ea:ba:a1:77:ac:0d:
e2:ce:a1:7a:d9:19:5d:c7:4c:2a:aa:27:2e:49:bc:
3f:17:be:6c:df:a0:26:27:46:b8:c7:98:d4:09:95:
b5:a2:f8:48:cf:1e:44:fa:13:3d:a7:24:a4:67:54:
5c:d2:b5:63:5c:ee:00:67:06:00:49:6a:88:fc:f2:
58:b8:03:a6:b2:fa:2a:71:22:71:33:fd:76:b2:36:
cf:bc:6f:30:1b:72:ac:17:cd:1b:0e:56:93:33:18:
5a:f3:99:c1:d2:52:98:19:cc:ce:56:10:1f:72:2f:
c9:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:0C:73:7E:2F:49:5D:4B:A5:D1:33:B5:8C:AE:4B:77:0D:51:B6:19
X509v3 Authority Key Identifier:
keyid:EB:41:95:6D:12:DC:B9:82:BE:D4:7A:9F:AC:4A:7E:48:E7:78:7C:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/60GVbRLcuYK-1HqfrEp-SOd4fHk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/5d3f1c-cff5-4b2b-9e46-67847c76cb76/1/yAxzfi9JXUul0TO1jK5Ldw1Rthk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/5d3f1c-cff5-4b2b-9e46-67847c76cb76/1/60GVbRLcuYK-1HqfrEp-SOd4fHk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.41.216.0/24
Signature Algorithm: sha256WithRSAEncryption
00:93:47:91:7d:93:cc:6a:b1:42:b4:99:5a:e5:ef:f5:ee:77:
10:8a:9a:1a:88:bb:f4:36:6b:91:1f:95:b7:ce:9a:17:86:22:
9d:b7:6b:7e:0c:b8:25:42:ef:bb:df:ed:2a:55:2f:f3:02:3d:
8e:de:77:bb:62:6a:b9:21:16:8a:24:17:df:09:2a:31:a2:86:
b7:8a:bf:05:4e:20:6a:e1:33:c7:77:76:04:fd:63:49:65:08:
7d:23:9c:c3:e7:df:a0:d0:90:ab:99:0d:d4:3d:77:c5:06:7a:
d6:2d:02:e0:7b:20:b5:cf:e9:7a:38:27:f0:69:6f:81:a9:e4:
a3:1e:ff:42:5b:ee:97:24:3d:9b:eb:98:dd:64:79:34:6c:b5:
e4:3d:a5:1d:f5:3e:09:cf:45:11:83:58:fa:c1:e5:c0:26:13:
70:72:88:22:ad:1c:8e:81:f2:6c:a7:97:ae:3e:93:2b:e6:fb:
1f:80:c8:aa:fe:7f:ff:97:8b:41:cb:b1:13:9d:70:25:3a:85:
c9:83:ec:47:12:02:e2:66:93:d5:a3:4c:21:8a:5c:d1:36:3d:
1c:60:76:db:07:df:c8:ce:75:18:ad:83:23:10:f2:e0:57:d0:
2e:e6:dd:fd:4e:94:20:1c:b3:2d:e6:c2:95:c8:67:06:52:08:
b7:eb:af:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:45:28 2025 by rpki-client