Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/689e70-e38d-4ff1-a972-4113d686dd66/1/ytlPgasGVjygeToAnL_7qGL6niY.roa
File: ytlPgasGVjygeToAnL_7qGL6niY.roa (raw, json)
Hash identifier: 4pWkNfB/a5sc8sNCH66lYgOc8aQwiUY9Cf8vuGjBpFo=
Subject key identifier: CA:D9:4F:81:AB:06:56:3C:A0:79:3A:00:9C:BF:FB:A8:62:FA:9E:26
Certificate issuer: /CN=a674015d509b5d4f396ea363369e9d74ffad7593
Certificate serial: 019423D7EA4B76E9D0ADB754AA9A7EDED089
Authority key identifier: A6:74:01:5D:50:9B:5D:4F:39:6E:A3:63:36:9E:9D:74:FF:AD:75:93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pnQBXVCbXU85bqNjNp6ddP-tdZM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/689e70-e38d-4ff1-a972-4113d686dd66/1/ytlPgasGVjygeToAnL_7qGL6niY.roa
Signing time: Wed 01 Jan 2025 21:49:00 +0000
ROA not before: Wed 01 Jan 2025 21:49:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200804
IP address blocks: 185.94.112.0/23 maxlen: 23
185.94.114.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:ea:4b:76:e9:d0:ad:b7:54:aa:9a:7e:de:d0:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a674015d509b5d4f396ea363369e9d74ffad7593
Validity
Not Before: Jan 1 21:49:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cad94f81ab06563ca0793a009cbffba862fa9e26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:e6:81:2a:b7:88:91:3d:d3:77:d7:bb:f0:cd:
81:ad:71:a6:7c:41:22:37:66:6e:69:12:49:00:7c:
38:bf:68:04:44:7a:6b:47:56:6f:13:3a:fe:7c:2f:
f5:81:66:d4:b9:59:50:4a:17:d6:05:e7:5e:f6:dd:
5c:74:37:5a:69:f2:da:e5:32:11:df:21:ad:c3:fb:
a2:e1:23:6f:ee:ac:0d:50:b2:83:aa:83:5f:08:75:
e7:06:06:5a:54:83:d9:55:52:83:f0:cd:52:74:3d:
fd:be:5c:c4:bf:7f:41:fb:8e:8a:ec:99:02:c7:78:
2c:80:e1:f6:28:67:98:81:41:54:53:f9:53:88:db:
a0:c6:5f:49:18:e4:40:9a:de:06:01:22:50:4d:aa:
a8:a3:50:58:43:94:b6:34:74:8f:fe:1a:83:c9:cb:
96:14:2d:1e:50:02:ca:f2:ff:f5:6a:c2:fc:99:a2:
40:e7:f0:82:89:7a:b5:2f:e3:a3:e4:86:01:e0:a0:
72:d7:4f:c3:36:4f:4b:e2:03:64:50:8c:5d:7e:ab:
a0:66:6e:f0:0e:4a:33:0d:10:48:40:d6:40:05:4b:
33:55:34:5a:00:bd:25:9d:c4:9b:fa:1a:56:41:9b:
3c:0d:06:01:7e:39:d0:23:41:9d:2b:ea:d6:09:a2:
c7:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:D9:4F:81:AB:06:56:3C:A0:79:3A:00:9C:BF:FB:A8:62:FA:9E:26
X509v3 Authority Key Identifier:
keyid:A6:74:01:5D:50:9B:5D:4F:39:6E:A3:63:36:9E:9D:74:FF:AD:75:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pnQBXVCbXU85bqNjNp6ddP-tdZM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/689e70-e38d-4ff1-a972-4113d686dd66/1/ytlPgasGVjygeToAnL_7qGL6niY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/689e70-e38d-4ff1-a972-4113d686dd66/1/pnQBXVCbXU85bqNjNp6ddP-tdZM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.94.112.0/22
Signature Algorithm: sha256WithRSAEncryption
44:0a:80:78:f2:a0:53:ac:14:f0:7f:ee:e7:8d:74:08:7a:d3:
85:c3:c3:70:b5:55:23:17:14:81:cd:52:71:48:5e:76:ff:8c:
56:8a:5e:08:a5:a8:09:82:f6:1f:52:c5:93:e5:4e:1a:a1:3c:
04:26:80:35:2c:09:2f:fd:1a:83:53:3d:8d:16:ed:c8:72:89:
08:3d:04:90:e4:77:bf:0f:82:45:9b:7f:82:ce:75:5a:75:84:
dc:1f:64:06:c3:3f:f8:53:4c:35:29:5f:2f:a2:f4:d4:b0:bd:
d1:32:ff:1b:45:24:f0:f9:5f:e5:56:56:d3:e5:13:c4:15:c3:
03:dd:e8:71:b6:68:de:37:30:47:e0:b3:fa:fb:47:f3:f4:fd:
62:a9:d8:4d:73:15:6d:67:35:8d:4f:9e:b4:bc:c3:bf:c6:27:
69:90:cd:b5:ba:71:9d:6e:6a:ba:5d:48:9e:6b:93:40:f9:5d:
89:62:fc:fb:65:2b:3e:86:e8:13:c5:ca:8c:14:b6:22:94:f6:
05:a0:bd:de:c8:ee:49:9d:00:72:b5:ac:2c:d2:81:4d:bb:59:
34:9f:f1:b2:4e:19:ff:03:b3:65:d5:66:23:67:66:bd:0d:cd:
9b:92:6c:b3:89:bf:ad:5e:e9:23:b4:1b:56:07:a3:89:2a:22:
9f:5f:52:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:57:20 2025 by rpki-client