Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/5629b7-851d-457b-bd1b-88558f4db9a5/1/Ylt26nkycsGH9m3B5nidrEy7yic.roa
File: Ylt26nkycsGH9m3B5nidrEy7yic.roa (raw, json)
Hash identifier: Oylh2MYHcccRc+LH4IlUxWTTjlc30l8llWGrpjY5JXQ=
Subject key identifier: 62:5B:76:EA:79:32:72:C1:87:F6:6D:C1:E6:78:9D:AC:4C:BB:CA:27
Certificate issuer: /CN=f1657e90ca72bf3e9d9bd98fd0719984cb078ab8
Certificate serial: 126236AB
Authority key identifier: F1:65:7E:90:CA:72:BF:3E:9D:9B:D9:8F:D0:71:99:84:CB:07:8A:B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8WV-kMpyvz6dm9mP0HGZhMsHirg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/5629b7-851d-457b-bd1b-88558f4db9a5/1/Ylt26nkycsGH9m3B5nidrEy7yic.roa
Signing time: Sat 01 Jan 2022 13:05:19 +0000
ROA not before: Sat 01 Jan 2022 13:05:19 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 5432
IP address blocks: 194.119.224.0/19 maxlen: 19
212.239.128.0/17 maxlen: 17
195.0.0.0/17 maxlen: 17
62.235.0.0/16 maxlen: 16
83.134.0.0/16 maxlen: 16
213.49.0.0/16 maxlen: 16
195.74.192.0/19 maxlen: 19
213.177.128.0/19 maxlen: 19
195.95.0.0/17 maxlen: 17
80.236.128.0/17 maxlen: 17
195.207.0.0/16 maxlen: 16
193.74.0.0/16 maxlen: 16
193.91.96.0/19 maxlen: 19
88.197.128.0/17 maxlen: 17
81.11.128.0/17 maxlen: 17
193.75.128.0/17 maxlen: 17
212.233.0.0/19 maxlen: 19
193.121.0.0/16 maxlen: 16
2a04:6c40::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 308426411 (0x126236ab)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1657e90ca72bf3e9d9bd98fd0719984cb078ab8
Validity
Not Before: Jan 1 13:05:19 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=625b76ea793272c187f66dc1e6789dac4cbbca27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:65:e0:0b:f7:26:b0:37:98:14:81:58:a9:8b:
5f:bb:d9:38:a3:45:ea:91:c3:95:86:f1:55:6c:37:
0b:85:ab:c9:95:de:c2:90:44:c1:2d:a6:79:24:c9:
f0:34:fb:db:c8:3c:e3:33:2e:b4:3e:a5:8d:39:7d:
2a:47:fa:6d:d0:3a:cd:2e:b8:3b:d4:4b:16:a8:ec:
95:14:5d:58:a0:b2:6a:90:a8:6e:df:52:9b:7d:b4:
4c:dd:ca:11:37:50:85:3d:90:f7:c9:0b:a5:e0:e5:
96:a4:51:97:6b:b3:e6:24:6b:54:bb:b2:04:50:bc:
40:0b:a2:bb:0d:6f:16:b3:ef:d5:aa:08:25:03:70:
e4:88:a9:a8:a4:d5:9a:b4:05:fc:e1:1a:ab:80:89:
2d:b4:31:06:f6:93:d4:88:99:b8:cb:3a:fd:64:6a:
63:c1:cf:03:44:d0:74:9e:a2:c7:c7:78:28:ed:df:
b8:ef:06:c3:8f:8b:89:e8:8c:c9:bc:73:47:2b:c0:
09:b0:d4:f5:04:45:b8:ed:57:2f:56:86:ab:7b:17:
f0:7d:ed:e2:1a:85:f3:ca:6c:f3:e1:33:5e:20:93:
29:94:a8:01:43:23:78:76:82:11:b3:2b:9b:b6:b3:
77:e1:ed:1e:43:03:00:cb:5a:c9:c8:c5:09:c4:3e:
02:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:5B:76:EA:79:32:72:C1:87:F6:6D:C1:E6:78:9D:AC:4C:BB:CA:27
X509v3 Authority Key Identifier:
keyid:F1:65:7E:90:CA:72:BF:3E:9D:9B:D9:8F:D0:71:99:84:CB:07:8A:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8WV-kMpyvz6dm9mP0HGZhMsHirg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/5629b7-851d-457b-bd1b-88558f4db9a5/1/Ylt26nkycsGH9m3B5nidrEy7yic.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/5629b7-851d-457b-bd1b-88558f4db9a5/1/8WV-kMpyvz6dm9mP0HGZhMsHirg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.235.0.0/16
80.236.128.0/17
81.11.128.0/17
83.134.0.0/16
88.197.128.0/17
193.74.0.0/16
193.75.128.0/17
193.91.96.0/19
193.121.0.0/16
194.119.224.0/19
195.0.0.0/17
195.74.192.0/19
195.95.0.0/17
195.207.0.0/16
212.233.0.0/19
212.239.128.0/17
213.49.0.0/16
213.177.128.0/19
IPv6:
2a04:6c40::/29
Signature Algorithm: sha256WithRSAEncryption
41:a8:f4:a6:72:85:f7:e8:41:1e:48:29:49:90:5b:78:9e:44:
49:0b:f0:2b:1b:79:90:83:2f:18:63:78:90:d3:be:f9:57:97:
23:52:66:1e:1a:c5:83:ee:e0:ae:94:2d:82:ef:1a:fd:2d:07:
09:9c:13:27:70:2d:78:db:c3:85:9e:c2:e0:96:d3:3f:e3:f5:
4a:77:29:56:6d:52:57:a1:ea:5f:5a:38:1b:4f:04:df:79:54:
d2:2d:44:f8:2c:ec:85:00:cf:97:aa:cf:20:7f:0d:5e:10:5e:
8d:e9:26:c6:09:c2:10:41:3e:28:b1:08:4e:b0:0c:ed:98:9a:
5f:97:ad:9b:2d:1f:81:ea:e3:6d:e5:a2:e6:63:80:c7:e3:4d:
ec:7f:b7:bb:3a:6a:1b:b1:09:0c:65:10:24:1c:f7:8a:38:73:
28:c3:e8:7b:ce:94:33:e6:1a:28:9f:59:fd:a1:73:9b:68:0f:
2f:09:21:98:a9:ac:23:c4:9b:e6:06:b6:28:14:47:d6:6c:5e:
fd:3a:58:e8:82:ff:03:5a:ca:e9:14:cc:f5:2e:68:21:d3:1c:
3f:eb:6d:a9:71:ac:99:0c:db:fd:10:9d:ec:e6:a0:30:28:a2:
01:16:32:af:25:3d:3a:61:ab:f1:48:dc:77:01:61:52:a1:ba:
ee:c6:68:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:15:50 2025 by rpki-client