Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/14f305-013b-453e-ac53-081cb2b17ab5/1/Y4GVnljDwyWTOfTGee3OzDonhig.roa
File: Y4GVnljDwyWTOfTGee3OzDonhig.roa (raw, json)
Hash identifier: ySFB8PlG1u+FbnjOQ2dXurRiUOKMmJGUoxmhKEyRUKg=
Subject key identifier: 63:81:95:9E:58:C3:C3:25:93:39:F4:C6:79:ED:CE:CC:3A:27:86:28
Certificate issuer: /CN=f4b9ea4d9d83a728dd41029e86af8a130d389ed4
Certificate serial: 01941F8C7DC2EA369A633BA917CFB05F3435
Authority key identifier: F4:B9:EA:4D:9D:83:A7:28:DD:41:02:9E:86:AF:8A:13:0D:38:9E:D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9LnqTZ2DpyjdQQKehq-KEw04ntQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/14f305-013b-453e-ac53-081cb2b17ab5/1/Y4GVnljDwyWTOfTGee3OzDonhig.roa
Signing time: Wed 01 Jan 2025 01:48:08 +0000
ROA not before: Wed 01 Jan 2025 01:48:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 196957
IP address blocks: 91.234.40.0/22 maxlen: 22
193.107.172.0/22 maxlen: 22
2001:67c:13b8::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:7d:c2:ea:36:9a:63:3b:a9:17:cf:b0:5f:34:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4b9ea4d9d83a728dd41029e86af8a130d389ed4
Validity
Not Before: Jan 1 01:48:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6381959e58c3c3259339f4c679edcecc3a278628
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:05:de:14:0c:4a:8e:44:37:8b:81:e4:6e:d2:
5a:ef:83:d9:5a:be:8d:62:93:4c:96:1d:60:10:da:
e3:f9:c3:8e:cb:c0:90:43:cf:10:a6:e7:91:dc:70:
89:cd:f0:73:54:2c:1c:ac:1f:c0:6a:e9:3b:e6:80:
aa:cc:33:43:fc:1c:5d:2e:3a:bc:9c:73:a7:83:c3:
a6:93:75:a8:c6:5b:f3:d5:21:4c:c9:e5:06:dd:76:
51:a9:31:54:3c:d7:26:c2:93:0f:df:78:67:12:3a:
1b:fb:85:5f:cd:48:d2:90:70:f3:ac:4d:3e:74:15:
99:b3:54:07:40:87:cd:06:50:30:b3:c2:87:37:fc:
82:e3:f0:ac:b3:be:35:fa:cd:9f:b1:19:70:5e:6e:
04:8d:00:df:1b:12:e8:29:d3:88:24:71:3a:f5:4c:
6d:af:b9:92:6b:28:0e:59:45:7b:31:40:2f:6f:6f:
2d:46:16:75:47:b0:73:57:e7:be:84:2d:ff:fe:25:
a1:13:af:14:11:e5:32:a9:ac:03:19:78:0d:ee:8c:
a9:27:a6:d3:75:63:ac:84:45:55:5c:ce:cc:c2:7f:
35:32:56:76:3e:d3:62:25:f8:15:c8:1c:4d:f2:6c:
90:b2:2e:2a:d1:08:98:c6:e1:f3:c2:c9:55:76:9f:
d1:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:81:95:9E:58:C3:C3:25:93:39:F4:C6:79:ED:CE:CC:3A:27:86:28
X509v3 Authority Key Identifier:
keyid:F4:B9:EA:4D:9D:83:A7:28:DD:41:02:9E:86:AF:8A:13:0D:38:9E:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9LnqTZ2DpyjdQQKehq-KEw04ntQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/14f305-013b-453e-ac53-081cb2b17ab5/1/Y4GVnljDwyWTOfTGee3OzDonhig.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/14f305-013b-453e-ac53-081cb2b17ab5/1/9LnqTZ2DpyjdQQKehq-KEw04ntQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.234.40.0/22
193.107.172.0/22
IPv6:
2001:67c:13b8::/48
Signature Algorithm: sha256WithRSAEncryption
27:62:92:89:45:7e:40:15:c5:0a:fc:53:b4:b3:0f:97:9e:36:
4b:63:e4:b8:37:7b:9f:46:72:7f:c3:a0:16:dc:02:db:af:20:
76:a1:d8:7a:a6:ab:07:47:03:a8:75:41:f3:7b:1c:65:8d:56:
d7:1b:e3:43:d1:42:55:ba:b1:53:ee:3d:65:00:0a:08:a0:dc:
43:f6:5b:ec:e7:ec:ff:27:47:8a:e5:c7:7a:d9:ab:3b:91:7e:
c7:16:9f:a9:c7:db:8a:86:0c:0b:23:4b:4e:9d:c6:18:7b:a3:
33:a1:26:21:06:31:24:7c:a7:11:26:98:a0:9a:57:b4:cd:a0:
02:56:b5:c0:84:dc:1c:36:11:06:25:3b:f5:84:22:da:d8:54:
1d:da:b4:ea:2c:0a:19:b8:0f:62:81:90:31:3e:af:a0:28:93:
45:df:16:f4:b3:2f:70:5d:13:e1:37:3a:83:ce:e8:b3:7c:ce:
78:42:ee:ac:98:fc:d5:d0:61:9e:6c:0f:fd:8e:31:d1:a2:43:
22:6f:1d:d0:f2:5b:71:93:20:e0:51:3a:8b:34:b0:8c:68:2e:
09:64:4d:af:f7:43:c6:55:17:89:fa:11:fb:75:1a:09:ff:fe:
07:fe:ab:cb:2b:5e:a1:bd:9f:cf:ab:b7:15:00:b5:86:d8:2d:
d4:3b:af:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 12:25:11 2025 by rpki-client