Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/yysHC6g2mvvoZbVhjTe18JGZfjs.roa
File: yysHC6g2mvvoZbVhjTe18JGZfjs.roa (raw, json)
Hash identifier: 8Gd5CG1fNVv3lPsMuyZpEUhLFbuN8heMGJVI9OkTLd0=
Subject key identifier: CB:2B:07:0B:A8:36:9A:FB:E8:65:B5:61:8D:37:B5:F0:91:99:7E:3B
Certificate issuer: /CN=60581e673d80f7474936b21337eafcc1bdc385e9
Certificate serial: 019425FD29888C2B1FD450D8981B9D7EC47F
Authority key identifier: 60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/yysHC6g2mvvoZbVhjTe18JGZfjs.roa
Signing time: Thu 02 Jan 2025 07:48:55 +0000
ROA not before: Thu 02 Jan 2025 07:48:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210619
IP address blocks: 104.233.63.0/24 maxlen: 24
104.239.49.0/24 maxlen: 24
104.239.50.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:29:88:8c:2b:1f:d4:50:d8:98:1b:9d:7e:c4:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60581e673d80f7474936b21337eafcc1bdc385e9
Validity
Not Before: Jan 2 07:48:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cb2b070ba8369afbe865b5618d37b5f091997e3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:50:54:75:d7:83:cc:12:8d:1c:c1:84:62:49:
89:aa:23:13:61:99:7c:5a:88:0e:66:e5:73:3c:f0:
70:b5:31:88:30:b6:7c:45:99:21:86:04:fb:95:b1:
63:23:c3:35:93:b5:6b:3c:97:cf:04:3d:05:67:74:
d1:42:72:83:05:c5:07:0a:32:c1:49:95:13:90:f7:
7c:b0:c8:ba:89:b7:0c:71:26:59:44:ca:de:d2:4a:
f4:76:c5:3a:62:cb:5b:f4:25:a2:f7:85:be:97:96:
6e:35:55:8b:57:07:3e:23:93:e5:2b:cf:7a:1d:22:
0d:90:09:cb:c0:13:ce:21:f8:d3:c1:f4:3f:1e:ac:
05:c1:b7:40:ea:be:37:6c:85:af:43:c7:e3:03:06:
e0:be:14:3c:78:99:92:04:df:01:ad:99:09:86:a3:
1f:da:ae:b9:cf:6e:44:8e:e9:03:07:a9:de:4d:91:
59:80:48:98:02:a8:5b:c4:df:f9:a5:15:f0:e9:f2:
56:aa:2d:b8:21:db:a9:d5:f7:dd:84:8f:fa:12:93:
68:5f:dd:f2:67:b8:94:0b:67:04:e0:1c:5f:f4:9f:
74:80:10:5a:9b:62:05:4b:a6:21:93:92:66:b6:87:
5b:86:e1:f9:53:60:c1:11:da:0d:b7:b0:54:3b:42:
3f:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:2B:07:0B:A8:36:9A:FB:E8:65:B5:61:8D:37:B5:F0:91:99:7E:3B
X509v3 Authority Key Identifier:
keyid:60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/yysHC6g2mvvoZbVhjTe18JGZfjs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
104.233.63.0/24
104.239.49.0-104.239.50.255
Signature Algorithm: sha256WithRSAEncryption
7b:88:9f:e3:a6:49:76:ee:9a:e9:c1:37:ff:7a:2c:7e:d5:32:
5e:7d:e6:7d:1f:95:69:8c:96:0c:71:77:8b:52:c4:b4:67:9a:
9f:61:5c:51:68:a9:d9:c7:c7:6a:f3:cd:3c:cb:7d:ea:74:9a:
07:b1:22:93:a7:56:65:50:71:08:21:b0:4c:ac:b7:33:10:2a:
0b:6b:45:87:18:02:50:0b:6e:ea:a2:87:ce:dd:23:c0:e9:ce:
a5:f9:66:9c:8d:6b:8d:c9:d3:7f:9b:1e:0d:f6:ca:25:bd:2b:
47:f3:96:f1:2b:11:08:c5:16:42:0c:79:34:c1:bf:97:b4:1d:
af:d2:38:d2:d9:db:16:4f:0e:99:82:66:f9:e1:ca:d2:08:33:
ef:c9:82:a2:45:65:98:9f:e4:87:fd:b0:0b:ce:f5:72:69:f9:
51:af:1a:65:0a:fc:3b:43:76:25:25:47:ce:43:35:19:bd:d5:
54:16:2a:0d:db:ed:ac:58:5b:78:3b:a1:0a:ad:ea:21:c5:39:
d1:a5:74:60:53:7b:fa:2c:fe:ba:f3:84:31:0e:85:d7:a5:45:
d9:e3:6a:68:9d:97:88:a8:b3:57:e6:de:09:2b:9e:1a:6d:b0:
3c:fd:65:d2:54:9d:05:15:d7:09:86:3f:d8:6f:62:00:02:a7:
b9:71:88:2c
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Tue Apr 8 18:21:58 2025 by rpki-client