Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/tYycKJV4c2mjAHwe7xu-VLSGapE.roa
File: tYycKJV4c2mjAHwe7xu-VLSGapE.roa (raw, json)
Hash identifier: gcZWkMcW3x9DSg4rwnQG93ypjTC4dl6r8UeSibdztBI=
Subject key identifier: B5:8C:9C:28:95:78:73:69:A3:00:7C:1E:EF:1B:BE:54:B4:86:6A:91
Certificate issuer: /CN=b9954499977278a75570b3403f4d3aa00b1b36e8
Certificate serial: 0194266BE32411BA70DA542C5BF342A67DFC
Authority key identifier: B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/tYycKJV4c2mjAHwe7xu-VLSGapE.roa
Signing time: Thu 02 Jan 2025 09:49:52 +0000
ROA not before: Thu 02 Jan 2025 09:49:52 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 198881
IP address blocks: 178.16.117.0/24 maxlen: 24
188.114.80.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:e3:24:11:ba:70:da:54:2c:5b:f3:42:a6:7d:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9954499977278a75570b3403f4d3aa00b1b36e8
Validity
Not Before: Jan 2 09:49:52 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b58c9c2895787369a3007c1eef1bbe54b4866a91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:45:b2:1d:a2:a4:c2:ac:19:b0:b7:a1:b2:38:
41:9d:d1:fc:89:46:4c:01:7c:85:ba:a4:d7:28:f7:
88:34:bb:bc:2e:04:5a:c1:40:8b:80:70:76:ee:83:
9a:14:ee:06:45:11:17:70:5d:0f:9d:55:bb:f7:62:
18:72:e1:f2:77:bf:f8:eb:47:b3:c4:f5:6b:0f:63:
93:c7:a4:e1:36:cc:15:7f:5c:f3:08:3a:27:73:17:
89:d8:e3:74:47:62:45:76:07:9a:1d:f5:11:43:25:
88:2b:15:e1:a3:a9:95:32:37:92:e7:a1:ae:7b:f0:
bb:68:a4:ce:8e:71:58:45:0a:d1:6c:78:04:05:36:
65:7f:54:50:92:8f:70:fe:c5:82:1b:99:d6:a7:0f:
29:51:38:75:07:e9:90:d0:de:24:53:d1:3f:2a:c9:
2f:ed:d0:17:a0:d4:25:a1:6f:b7:48:46:4d:b3:9c:
27:d2:b3:44:41:06:6d:29:d8:09:3b:af:bf:f9:56:
b1:ba:47:b8:9a:80:d9:05:51:4b:af:aa:ce:eb:42:
47:d1:2c:84:8b:73:45:fd:3b:ef:68:86:8e:08:01:
bd:c9:dc:e4:b5:53:41:aa:d6:d3:4a:52:98:a3:0b:
a3:ff:a4:06:bc:51:19:d0:d5:41:b7:6a:55:6a:c8:
c9:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:8C:9C:28:95:78:73:69:A3:00:7C:1E:EF:1B:BE:54:B4:86:6A:91
X509v3 Authority Key Identifier:
keyid:B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/tYycKJV4c2mjAHwe7xu-VLSGapE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.16.117.0/24
188.114.80.0/22
Signature Algorithm: sha256WithRSAEncryption
77:d9:be:50:aa:08:8d:e3:79:90:eb:cf:fd:de:44:a6:a4:6f:
dc:2f:b9:50:54:5c:fe:c5:04:30:c4:56:01:c9:51:c2:8f:4a:
65:92:19:8a:49:99:3f:69:dc:5d:7e:6a:81:3a:14:cc:31:c6:
09:95:8c:f2:2d:0a:f5:98:aa:2e:6e:a7:25:a8:ac:40:48:da:
bb:34:64:5a:d7:a2:f0:56:b6:40:92:90:93:75:f8:cc:e4:14:
e7:6a:ce:dc:17:b4:01:f7:2e:ab:ef:cf:da:a8:ae:7d:f4:a6:
99:6b:f6:09:75:2c:d4:92:9f:89:f3:39:4d:a8:be:93:29:76:
47:b4:a2:28:e9:12:d4:4b:b4:21:d4:d1:28:d0:fb:80:c7:d7:
3f:f1:eb:42:e5:9d:ae:95:a6:17:0f:13:69:99:7a:5b:14:8c:
de:56:4d:6a:3f:18:2d:c0:60:68:6a:54:c1:98:0b:43:2c:5e:
d5:0a:ac:64:c6:33:5a:16:f9:61:32:37:1a:9f:71:88:84:20:
33:46:ec:28:1b:ea:9e:8d:dc:a7:76:36:83:b2:69:88:b8:56:
04:4e:4c:70:8f:00:c5:8f:4b:08:bc:eb:c5:2c:b5:d8:68:c0:
2f:a0:b9:fd:b6:f2:1a:ed:cd:63:fb:2b:63:f6:7a:ef:fe:4a:
f2:25:e8:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 06:04:37 2025 by rpki-client