Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/yNbbJn707tS_a8Gi9J0Tcx69Bis.roa
File: yNbbJn707tS_a8Gi9J0Tcx69Bis.roa (raw, json)
Hash identifier: /P8YL51lx4GgfeOWwtR+Oj2TBAmtiisgHyAoHeKBLU8=
Subject key identifier: C8:D6:DB:26:7E:F4:EE:D4:BF:6B:C1:A2:F4:9D:13:73:1E:BD:06:2B
Certificate issuer: /CN=daaf17b0015dbb7cd992f26cdff01c4e2620b73e
Certificate serial: 0194266B9DA017C6400A840E0103EEF34014
Authority key identifier: DA:AF:17:B0:01:5D:BB:7C:D9:92:F2:6C:DF:F0:1C:4E:26:20:B7:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/yNbbJn707tS_a8Gi9J0Tcx69Bis.roa
Signing time: Thu 02 Jan 2025 09:49:34 +0000
ROA not before: Thu 02 Jan 2025 09:49:34 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206124
IP address blocks: 5.154.102.0/24 maxlen: 24
5.154.103.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:9d:a0:17:c6:40:0a:84:0e:01:03:ee:f3:40:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=daaf17b0015dbb7cd992f26cdff01c4e2620b73e
Validity
Not Before: Jan 2 09:49:34 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c8d6db267ef4eed4bf6bc1a2f49d13731ebd062b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:1b:d7:82:46:26:d7:a4:a3:fd:93:eb:3f:96:
23:92:70:bd:2c:73:ab:27:8e:25:89:b9:97:33:53:
25:d8:2c:42:21:ab:52:d7:3f:d0:26:82:84:52:dc:
1c:f5:82:8d:f5:32:71:8b:48:66:2c:5b:33:d4:a1:
3f:d1:b1:c2:12:25:51:3e:4c:e0:f7:1f:d3:e4:a4:
ce:85:63:24:ab:06:89:cb:82:b2:a4:79:4c:be:d8:
1a:b8:d4:67:bc:86:6e:4b:43:55:1e:ae:eb:42:51:
37:3a:9d:2c:ef:ec:a1:72:a7:22:f0:27:f0:90:c7:
3d:d1:fd:8d:bf:33:0f:ef:88:83:24:77:c8:55:55:
29:71:bd:ac:bc:5f:80:f8:42:01:ec:6e:d7:bf:50:
15:82:a1:02:78:26:4f:c9:91:b7:fa:cc:1e:78:d9:
2b:66:bc:b4:a2:f1:c0:7d:5f:f3:e9:bc:cc:ae:c9:
3e:87:ce:71:dc:74:66:13:23:97:c4:66:46:f9:0b:
75:7d:7b:b2:38:27:94:d1:40:b7:12:6f:7b:6e:20:
7a:fc:2f:60:70:8c:74:80:2d:65:0c:26:6b:c4:88:
d5:52:4d:0f:d4:90:8e:1d:fc:a7:3b:83:ab:e2:62:
2b:78:5a:9c:d3:df:c1:0a:e0:c6:f5:61:8e:fb:b9:
67:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:D6:DB:26:7E:F4:EE:D4:BF:6B:C1:A2:F4:9D:13:73:1E:BD:06:2B
X509v3 Authority Key Identifier:
keyid:DA:AF:17:B0:01:5D:BB:7C:D9:92:F2:6C:DF:F0:1C:4E:26:20:B7:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/yNbbJn707tS_a8Gi9J0Tcx69Bis.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/2q8XsAFdu3zZkvJs3_AcTiYgtz4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.154.102.0/23
Signature Algorithm: sha256WithRSAEncryption
a4:8d:c0:11:7b:95:42:7e:50:6f:9c:71:2c:dd:7c:5d:f3:e3:
3e:54:8d:bc:24:64:9d:d6:3b:c2:ff:ed:1c:09:4b:9e:58:fd:
dd:58:eb:29:94:9e:e2:fb:90:aa:1b:4b:c0:1e:1e:73:04:b0:
80:89:17:0e:93:92:d2:77:4b:58:a1:1d:8f:37:32:25:0e:43:
94:1e:22:a0:31:53:9d:ed:f7:2a:be:57:5d:66:a4:42:55:f1:
61:39:76:3f:2b:b9:3e:4a:6e:4a:ee:90:44:73:15:48:02:66:
41:f2:19:ab:18:af:be:36:e9:34:c4:3c:6a:62:75:36:42:49:
cf:30:53:2d:1d:43:15:13:0a:b1:e3:6e:5a:dd:48:71:af:5f:
8a:c7:04:99:00:4f:58:c9:50:18:cc:2c:ef:16:89:12:c1:80:
b7:0e:3a:c7:73:e1:01:e2:08:fa:fc:e0:4e:70:ab:e1:f6:95:
a3:a3:e3:4a:01:cc:3b:d7:b6:ed:fe:65:93:67:a5:4a:8e:5a:
71:33:cf:73:fb:2d:f4:89:74:9a:eb:51:33:f9:60:a0:c3:34:
46:9e:ec:08:6d:80:23:73:f5:da:15:7d:37:ff:d4:57:d1:1c:
66:6f:1a:63:79:78:58:f5:8e:3c:22:fd:84:f9:f5:1d:f5:39:
7f:37:79:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 04:56:09 2025 by rpki-client