Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/yH-qgMAP1a-ONlIbLyS-3YiA-v8.roa
File: yH-qgMAP1a-ONlIbLyS-3YiA-v8.roa (raw, json)
Hash identifier: 5ALF18aBSR3V/0UBc56QwyH3CpaKIq6eI34/1+3sXLg=
Subject key identifier: C8:7F:AA:80:C0:0F:D5:AF:8E:36:52:1B:2F:24:BE:DD:88:80:FA:FF
Certificate issuer: /CN=67499595a65aab0b53768def08091e31061e9e65
Certificate serial: 019427B54A3FF1C6DB56FA1173859609CD44
Authority key identifier: 67:49:95:95:A6:5A:AB:0B:53:76:8D:EF:08:09:1E:31:06:1E:9E:65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z0mVlaZaqwtTdo3vCAkeMQYenmU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/yH-qgMAP1a-ONlIbLyS-3YiA-v8.roa
Signing time: Thu 02 Jan 2025 15:49:39 +0000
ROA not before: Thu 02 Jan 2025 15:49:39 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 199239
IP address blocks: 46.20.104.0/24 maxlen: 24
185.100.171.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:4a:3f:f1:c6:db:56:fa:11:73:85:96:09:cd:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67499595a65aab0b53768def08091e31061e9e65
Validity
Not Before: Jan 2 15:49:39 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c87faa80c00fd5af8e36521b2f24bedd8880faff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:0b:da:f5:09:ce:04:a5:46:ed:b5:84:7f:4e:
4d:a5:77:8a:7b:9a:10:4e:6f:f6:7f:fc:6d:77:2c:
c4:6f:34:4b:bb:d7:18:cb:71:9b:b0:57:1b:7a:d3:
14:15:00:01:0f:a3:99:4c:1a:ee:0d:e2:cc:33:35:
3d:bc:60:38:07:1e:27:f6:d4:1a:06:98:07:d0:1e:
2d:b2:73:39:87:ce:4b:e9:8e:15:92:ea:c2:8e:e3:
8a:ca:0e:16:3a:4d:27:35:e9:c4:90:fb:94:74:d7:
09:28:bf:ba:82:ab:24:20:08:19:5c:06:60:39:46:
4c:32:1f:30:73:bc:33:96:07:49:65:46:60:22:af:
b1:86:5b:02:c4:99:4f:55:b3:d8:87:88:08:36:f2:
7a:35:3e:05:23:55:dd:1c:46:3f:2b:0a:8a:45:6b:
09:85:76:12:74:42:fc:08:a0:61:f6:36:7a:71:40:
2f:eb:09:ea:cc:98:36:2d:43:68:5c:ee:ca:04:83:
9f:9c:6d:f7:2d:f6:a1:6f:03:05:44:41:d3:ba:a6:
4c:b3:4c:64:fc:24:ee:be:c5:e5:e6:ae:51:75:b3:
5c:7d:ed:8b:f6:bc:38:22:1c:d8:43:1b:9f:71:ef:
77:24:2e:64:17:12:7c:2d:54:dd:4d:b6:6f:ca:1a:
22:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:7F:AA:80:C0:0F:D5:AF:8E:36:52:1B:2F:24:BE:DD:88:80:FA:FF
X509v3 Authority Key Identifier:
keyid:67:49:95:95:A6:5A:AB:0B:53:76:8D:EF:08:09:1E:31:06:1E:9E:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z0mVlaZaqwtTdo3vCAkeMQYenmU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/yH-qgMAP1a-ONlIbLyS-3YiA-v8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/Z0mVlaZaqwtTdo3vCAkeMQYenmU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.20.104.0/24
185.100.171.0/24
Signature Algorithm: sha256WithRSAEncryption
68:f0:91:d5:85:3e:bc:ad:20:a0:39:ad:97:5b:f8:c1:82:32:
18:f8:b1:13:c6:b3:a3:dc:d5:98:ac:ec:93:bc:00:0a:5a:14:
f1:2a:f5:bb:00:24:33:01:96:ae:c9:fd:32:b5:d9:3b:d4:8d:
e5:8e:d3:54:30:9b:35:c8:3e:30:f2:d5:a2:6a:f0:4c:5b:8a:
ed:cb:f5:ec:85:82:20:c7:fa:33:8a:cb:6c:db:ea:a9:73:76:
75:6c:e2:ea:74:0a:4b:e4:0a:f7:6f:b0:3c:9f:e6:9d:1f:34:
c7:36:de:5f:53:f8:92:24:01:9f:50:c6:40:64:a1:45:74:a0:
89:7b:fe:ee:7f:bb:bd:f0:14:80:1c:af:1d:ae:4f:b6:87:9e:
29:cd:90:b7:6d:fb:f6:f9:33:b2:b0:c5:3d:10:49:cc:24:ef:
d4:92:c4:69:40:ba:a0:68:71:5d:a6:f1:23:39:61:1f:46:c4:
41:fa:e9:ef:c2:e2:05:01:79:46:fe:cc:ea:d3:03:26:56:c3:
cc:f9:da:6b:e0:0c:9a:ba:ec:2c:47:0e:fc:25:c0:d0:3d:b6:
f1:22:64:8d:2a:2f:9e:db:30:44:cf:10:9d:bf:ef:c8:a8:2a:
ac:b2:ea:ca:36:10:71:c6:f1:44:7c:7f:77:c1:61:47:d9:68:
40:30:47:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:09:00 2025 by rpki-client