Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/7e47d7-6137-4300-936b-46925c5249e6/1/yT0QV5Ngi5HD60A3c2kQ4p38KRg.roa
File: yT0QV5Ngi5HD60A3c2kQ4p38KRg.roa (raw, json)
Hash identifier: 8raf59fZpsQk29I2msKlUU3U4aiSgd5bXc/q3fhuFvI=
Subject key identifier: C9:3D:10:57:93:60:8B:91:C3:EB:40:37:73:69:10:E2:9D:FC:29:18
Certificate issuer: /CN=0b083808763c262541020d2e81da34aaa38283b7
Certificate serial: 01941F8C6F3D1160AD15A8378937AF493992
Authority key identifier: 0B:08:38:08:76:3C:26:25:41:02:0D:2E:81:DA:34:AA:A3:82:83:B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cwg4CHY8JiVBAg0ugdo0qqOCg7c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/7e47d7-6137-4300-936b-46925c5249e6/1/yT0QV5Ngi5HD60A3c2kQ4p38KRg.roa
Signing time: Wed 01 Jan 2025 01:48:04 +0000
ROA not before: Wed 01 Jan 2025 01:48:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 24749
IP address blocks: 86.106.188.0/22 maxlen: 22
185.70.148.0/22 maxlen: 22
2a03:35a0::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:6f:3d:11:60:ad:15:a8:37:89:37:af:49:39:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b083808763c262541020d2e81da34aaa38283b7
Validity
Not Before: Jan 1 01:48:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c93d105793608b91c3eb4037736910e29dfc2918
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:11:13:0a:05:14:87:23:67:8c:5a:c1:2d:ea:
a4:08:fc:41:19:18:a5:59:40:08:25:c4:a2:fc:e7:
dd:2d:73:92:1a:f8:37:af:1e:82:8a:fa:01:6a:2e:
98:69:06:08:9c:97:34:14:8d:cd:7d:47:59:2a:71:
d1:fe:dd:82:bc:ee:7d:4a:59:9f:b3:8e:17:18:bd:
a3:50:8d:96:bd:1b:b7:f7:b8:c9:a5:95:83:69:f6:
1e:43:8d:46:bb:c7:6c:cd:8e:c9:e5:a0:81:b9:cc:
d6:60:70:28:a7:d9:d0:7d:60:e9:a2:7f:df:39:43:
76:50:ac:41:fa:91:1a:27:e7:7d:0e:0a:e8:24:fb:
91:54:44:b5:24:c0:f1:e8:2a:a2:79:04:1e:5b:0f:
fb:bc:7a:a5:79:60:a5:32:ce:42:da:0a:a5:1a:64:
0a:87:90:b6:1d:b1:bd:fa:ca:4e:5c:ea:ae:8c:5a:
2a:ff:21:db:97:f2:9f:54:f7:7b:f1:87:97:72:5a:
aa:32:6a:1b:56:a8:79:69:62:47:7b:8a:56:17:eb:
a7:f4:04:3a:dc:92:1d:e7:e2:fb:64:d8:9d:85:a3:
36:5d:b7:77:c0:84:20:05:11:45:59:d5:09:70:fb:
67:46:79:db:e8:47:9e:b1:bb:ae:5f:1a:27:cb:c2:
65:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:3D:10:57:93:60:8B:91:C3:EB:40:37:73:69:10:E2:9D:FC:29:18
X509v3 Authority Key Identifier:
keyid:0B:08:38:08:76:3C:26:25:41:02:0D:2E:81:DA:34:AA:A3:82:83:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cwg4CHY8JiVBAg0ugdo0qqOCg7c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/7e47d7-6137-4300-936b-46925c5249e6/1/yT0QV5Ngi5HD60A3c2kQ4p38KRg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/7e47d7-6137-4300-936b-46925c5249e6/1/Cwg4CHY8JiVBAg0ugdo0qqOCg7c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.106.188.0/22
185.70.148.0/22
IPv6:
2a03:35a0::/29
Signature Algorithm: sha256WithRSAEncryption
af:53:72:1f:37:ef:5a:12:f1:95:ac:82:a9:6c:14:97:73:f2:
cc:a9:80:ce:cf:15:bd:d7:2d:73:90:63:f3:ce:32:1a:a1:c8:
78:38:e0:a6:f0:b7:31:b1:b3:fa:ea:6f:4c:5a:dc:73:94:dd:
c9:55:ff:4a:00:66:dc:b9:26:45:cc:ae:74:19:b2:83:42:fc:
b5:3b:e3:63:11:c2:1f:87:c7:dc:04:34:5f:da:a0:87:98:9d:
d2:ed:71:f1:2a:50:64:1f:46:20:63:7b:4c:da:43:b5:0d:18:
c1:76:1b:70:9b:64:06:bf:60:e0:ed:4d:11:61:b9:ab:54:c7:
01:dc:cd:c2:22:4d:23:ac:9b:58:0f:b4:cd:93:f1:cc:28:fe:
e1:16:d2:b9:08:6b:29:c8:58:4c:b6:53:7c:8b:13:6b:2f:64:
91:5c:64:b5:24:64:50:a1:52:b5:0b:24:16:d4:38:5a:b0:69:
7f:62:20:cb:b2:7f:e9:e2:08:19:59:2d:41:7f:47:eb:6c:3d:
9b:b7:f4:0d:60:53:cc:df:4e:bc:9a:f6:27:6e:71:a8:0f:9d:
d4:4d:7e:8b:91:8f:60:cb:cb:84:16:3e:89:f8:b4:bd:1f:4c:
8f:e6:99:fa:06:cb:2c:ba:36:d7:ea:9d:0b:f0:ff:b0:ae:db:
65:8c:a0:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:56:44 2025 by rpki-client