Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/8dad1a-f2ce-4939-8b0f-2fc16d2c0016/1/yJJQVGNjQhmrsnJJE0kyWxcJ5BQ.roa
File: yJJQVGNjQhmrsnJJE0kyWxcJ5BQ.roa (raw, json)
Hash identifier: CX3qQ5t9dhBSwuFe9dR68/qAqasgLIYBBJFzVhxytCY=
Subject key identifier: C8:92:50:54:63:63:42:19:AB:B2:72:49:13:49:32:5B:17:09:E4:14
Certificate issuer: /CN=a3afe48bfdad69e35c83d3130d35897ccfc5efcf
Certificate serial: 019423D757CF3440F400BFC0AF8E46F6557D
Authority key identifier: A3:AF:E4:8B:FD:AD:69:E3:5C:83:D3:13:0D:35:89:7C:CF:C5:EF:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o6_ki_2taeNcg9MTDTWJfM_F788.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/8dad1a-f2ce-4939-8b0f-2fc16d2c0016/1/yJJQVGNjQhmrsnJJE0kyWxcJ5BQ.roa
Signing time: Wed 01 Jan 2025 21:48:22 +0000
ROA not before: Wed 01 Jan 2025 21:48:22 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51088
IP address blocks: 185.63.244.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:57:cf:34:40:f4:00:bf:c0:af:8e:46:f6:55:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3afe48bfdad69e35c83d3130d35897ccfc5efcf
Validity
Not Before: Jan 1 21:48:22 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c892505463634219abb272491349325b1709e414
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:44:e6:a0:06:d4:e4:87:7c:72:3d:fb:87:08:
e2:99:dd:1c:50:06:96:cb:69:2f:29:90:e3:b4:77:
c0:7d:7d:31:92:d7:68:ed:c9:45:de:c8:9a:c4:b6:
c1:ff:86:b5:da:7f:ad:db:44:ce:20:39:7c:3c:da:
64:bd:ac:4d:70:d8:78:23:94:3a:77:9e:2a:9a:ce:
e8:3d:e8:06:31:88:f4:fc:25:3f:6d:d5:ef:d5:eb:
4f:fb:06:73:34:b5:19:80:6d:72:c8:e3:56:35:5d:
8f:26:b9:9c:45:03:c2:86:fc:5e:09:4e:9a:09:ed:
38:e0:65:f8:16:2d:2e:67:a7:1e:77:19:75:df:89:
0b:b6:f0:de:10:2d:10:68:51:49:ff:0a:f7:c6:77:
35:32:16:8b:36:38:ac:c0:ba:cb:12:f6:b6:72:9b:
d6:4f:7b:e7:0a:93:13:d2:46:37:e0:01:66:99:a4:
a7:66:c7:9b:f3:d5:33:84:83:46:a9:74:33:e0:7a:
a8:4c:75:32:f7:94:00:57:5f:5c:4d:58:f5:aa:07:
cf:e7:0c:c5:1d:d1:ef:f1:2a:5a:6e:3d:b4:b5:b8:
c2:f9:3a:7b:de:35:51:b3:cc:00:ef:0c:6e:12:24:
1e:5d:01:30:82:61:88:63:ff:83:35:b6:66:42:48:
8b:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:92:50:54:63:63:42:19:AB:B2:72:49:13:49:32:5B:17:09:E4:14
X509v3 Authority Key Identifier:
keyid:A3:AF:E4:8B:FD:AD:69:E3:5C:83:D3:13:0D:35:89:7C:CF:C5:EF:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o6_ki_2taeNcg9MTDTWJfM_F788.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/8dad1a-f2ce-4939-8b0f-2fc16d2c0016/1/yJJQVGNjQhmrsnJJE0kyWxcJ5BQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/8dad1a-f2ce-4939-8b0f-2fc16d2c0016/1/o6_ki_2taeNcg9MTDTWJfM_F788.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.63.244.0/22
Signature Algorithm: sha256WithRSAEncryption
11:1e:8d:99:fb:66:0d:4f:98:4a:a5:42:7e:31:9d:c8:cd:b2:
cd:76:db:73:1d:07:99:b8:0e:95:66:56:be:c4:af:42:35:17:
9e:7c:76:29:3c:3a:ff:1b:f6:a0:75:52:ec:34:c7:d8:a1:8b:
fe:6b:4d:8d:03:e6:63:37:c2:e3:43:78:63:ad:bf:e6:1f:0f:
e8:22:ad:f5:15:5c:f9:dc:62:bf:4f:23:e3:30:29:0e:dd:7b:
1a:76:11:79:91:c4:b2:2e:1b:33:2d:7a:7f:36:04:29:5d:aa:
70:b0:67:53:ea:93:4b:c6:c1:77:72:c2:65:a1:38:3e:ce:65:
fc:c7:e3:ed:37:db:8d:c7:ac:8f:7b:73:5b:bb:a1:d2:ae:03:
8b:bb:01:a1:20:ae:b9:82:24:64:c2:c9:d1:27:79:55:ef:b1:
e3:df:18:ba:ba:1f:3d:46:85:e9:f9:0e:e6:9b:45:62:08:81:
03:18:5a:40:3d:cc:67:9d:e5:b1:a2:40:b4:6f:db:80:3a:46:
2e:43:9e:d6:9d:05:c8:09:5d:0b:86:83:fb:6f:53:49:4d:7b:
8e:8a:a3:8b:41:66:3b:74:20:15:e7:61:5f:37:80:41:72:a0:
63:19:86:e1:f3:77:41:c1:e1:4e:bd:68:fa:13:be:1b:76:d4:
97:e0:b7:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 16:20:49 2025 by rpki-client