Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/YALvBFXCZCuiPMm-BJVewPH_enA.roa
File: YALvBFXCZCuiPMm-BJVewPH_enA.roa (raw, json)
Hash identifier: 2ekpPdYOHyCXTusjLDkkuEWOZIzDO3FZXtRuEpEjlLg=
Subject key identifier: 60:02:EF:04:55:C2:64:2B:A2:3C:C9:BE:04:95:5E:C0:F1:FF:7A:70
Certificate issuer: /CN=8338ef41b2c0105a91ccbb9c89337faeb129ff84
Certificate serial: 019421B1D8CFD4B7B12FF10C9FA61F4E0773
Authority key identifier: 83:38:EF:41:B2:C0:10:5A:91:CC:BB:9C:89:33:7F:AE:B1:29:FF:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gzjvQbLAEFqRzLuciTN_rrEp_4Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/YALvBFXCZCuiPMm-BJVewPH_enA.roa
Signing time: Wed 01 Jan 2025 11:48:10 +0000
ROA not before: Wed 01 Jan 2025 11:48:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212414
IP address blocks: 93.179.64.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b1:d8:cf:d4:b7:b1:2f:f1:0c:9f:a6:1f:4e:07:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8338ef41b2c0105a91ccbb9c89337faeb129ff84
Validity
Not Before: Jan 1 11:48:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6002ef0455c2642ba23cc9be04955ec0f1ff7a70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:1b:78:e5:d0:db:4f:ff:51:ea:a6:f4:a6:38:
7a:46:1e:f1:c2:3e:1e:a1:00:95:ca:8e:1d:d5:5a:
11:3e:ea:e1:b1:4a:53:b4:66:4c:a3:0f:23:7d:af:
a2:f3:75:05:ff:94:3f:21:15:b0:e4:71:82:cb:ea:
92:bc:9a:f3:19:64:15:85:12:9c:dc:d1:c3:c2:e1:
b6:d8:9d:c1:e2:b7:bf:67:70:04:5c:76:9e:d2:e0:
87:ed:55:fe:5a:c4:fe:44:89:78:ff:37:3b:c2:73:
47:f4:46:6d:54:91:b7:2f:65:da:77:25:18:1f:38:
9c:85:21:79:f3:14:c9:46:62:27:8b:56:be:b0:9e:
ed:a7:58:05:d5:00:8a:a5:d4:a2:c0:fd:b2:38:5d:
22:21:e9:9a:f9:ff:ed:72:14:f0:57:41:ee:9e:5d:
ee:6e:11:47:8a:ba:73:e0:af:0a:2f:97:7f:a0:55:
a1:23:39:3d:fa:b5:99:fa:52:1f:9f:07:40:94:e6:
fc:63:7d:57:2f:ea:ad:20:f9:8d:94:83:f8:cd:e0:
77:03:cd:e5:4f:3d:ba:f7:36:ce:f8:24:da:5d:14:
5b:2c:fa:e2:cc:9c:d1:ba:31:02:7f:f9:a7:96:ee:
e8:93:f5:bb:62:cc:23:8d:68:5f:11:08:d0:4b:29:
ec:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:02:EF:04:55:C2:64:2B:A2:3C:C9:BE:04:95:5E:C0:F1:FF:7A:70
X509v3 Authority Key Identifier:
keyid:83:38:EF:41:B2:C0:10:5A:91:CC:BB:9C:89:33:7F:AE:B1:29:FF:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gzjvQbLAEFqRzLuciTN_rrEp_4Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/YALvBFXCZCuiPMm-BJVewPH_enA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/gzjvQbLAEFqRzLuciTN_rrEp_4Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.179.64.0/23
Signature Algorithm: sha256WithRSAEncryption
07:0d:7c:a3:21:f4:61:99:59:77:0a:1f:8c:5b:6c:e2:28:d7:
e5:93:5e:7b:f3:2e:ca:6b:01:d4:45:d3:86:cc:b2:13:22:8b:
67:1a:5b:f3:51:34:f4:38:e7:bc:53:4a:75:a3:8b:69:9e:69:
0e:a1:c6:09:37:e0:e5:4e:f9:5f:3d:7e:42:2d:11:48:22:57:
3d:a7:3f:6e:e3:a1:15:52:b3:c5:36:ac:23:4f:9c:15:64:05:
55:33:2e:d2:5a:50:2a:5b:96:7c:a8:de:93:35:dd:8e:35:3e:
fa:07:9c:46:3e:11:d2:48:25:01:8e:a6:1b:77:e1:c6:2c:4d:
2f:a8:dc:25:27:8f:64:2e:77:07:73:ab:54:4c:6b:dc:3b:da:
a9:ad:58:3e:55:3c:1a:76:ae:c3:d2:9a:e4:ae:0f:d3:aa:0e:
4f:96:a6:92:c8:c8:c4:5f:fd:02:69:26:ab:eb:94:ea:49:f1:
c2:62:6a:fe:98:41:8c:da:da:da:e9:0d:8b:2f:91:e7:21:d8:
3b:c4:9b:9f:7e:46:91:14:a2:5d:d6:e8:6a:bb:f2:2c:e7:1f:
91:1d:2f:6b:52:a6:e5:d9:67:ba:7f:54:8a:b3:ee:6f:11:45:
d5:4f:a8:aa:20:f5:45:26:b6:31:71:9c:9a:b9:1c:0f:be:37:
11:de:f3:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:27:11 2025 by rpki-client