Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/4e28c8-04f6-4f4a-b060-3f791fb3c392/1/sYUKRYpdBWCOTWtDpNP9mu5_0x4.roa
File: sYUKRYpdBWCOTWtDpNP9mu5_0x4.roa (raw, json)
Hash identifier: lsT3+k6IpnHg62iGneVr50IRXtUvYYGq9as7E9EQQK8=
Subject key identifier: B1:85:0A:45:8A:5D:05:60:8E:4D:6B:43:A4:D3:FD:9A:EE:7F:D3:1E
Certificate issuer: /CN=c95b21442b99b8a6f113612fc0fb32da5f6c8813
Certificate serial: 018CCA29E28551F2876F75349CFAD09F68D5
Authority key identifier: C9:5B:21:44:2B:99:B8:A6:F1:13:61:2F:C0:FB:32:DA:5F:6C:88:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yVshRCuZuKbxE2EvwPsy2l9siBM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/4e28c8-04f6-4f4a-b060-3f791fb3c392/1/sYUKRYpdBWCOTWtDpNP9mu5_0x4.roa
Signing time: Tue 02 Jan 2024 12:33:11 +0000
ROA not before: Tue 02 Jan 2024 12:33:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2200
IP address blocks: 137.121.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:29:e2:85:51:f2:87:6f:75:34:9c:fa:d0:9f:68:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c95b21442b99b8a6f113612fc0fb32da5f6c8813
Validity
Not Before: Jan 2 12:33:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b1850a458a5d05608e4d6b43a4d3fd9aee7fd31e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:85:07:33:53:07:80:5b:ef:b0:91:72:b7:e1:
c0:e9:8e:19:91:42:a3:c9:d4:dd:5e:93:62:17:72:
ca:93:8a:2f:a8:10:34:74:f5:f6:3a:a7:14:85:51:
c0:05:81:bf:92:42:14:71:52:b7:ff:59:94:e9:e4:
ac:ee:42:97:8c:cf:09:de:33:c9:54:8a:c9:bc:b1:
fc:b0:6d:ec:45:d5:20:f3:8c:c1:3d:c1:67:2c:a6:
2e:37:5f:4e:c8:eb:32:30:6d:34:9e:9a:6e:ee:5f:
d4:03:40:f8:47:a3:c4:e6:f0:fb:00:6e:3b:a2:72:
a6:95:68:fe:72:36:f4:13:94:f5:7b:88:b3:1e:e4:
c3:fc:4a:9d:43:4f:b5:a4:5f:0d:c1:b0:4a:e4:19:
72:92:73:94:b7:f1:0d:fa:d5:b8:5b:01:1e:d8:dd:
fc:5e:16:35:cb:89:0c:20:65:8d:f0:9c:34:44:ef:
95:54:8e:66:b0:d1:52:85:e2:a2:9b:d7:f7:70:20:
8d:97:cd:92:d6:1f:69:13:8a:39:0d:99:10:cd:2c:
a1:47:f9:bf:70:08:73:b9:7d:d3:83:bf:10:26:20:
ca:ec:a1:e4:07:92:53:05:2a:b7:8e:72:4c:c7:70:
42:e0:66:18:b8:9b:ea:b9:35:f1:8b:07:f1:b9:93:
78:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:85:0A:45:8A:5D:05:60:8E:4D:6B:43:A4:D3:FD:9A:EE:7F:D3:1E
X509v3 Authority Key Identifier:
keyid:C9:5B:21:44:2B:99:B8:A6:F1:13:61:2F:C0:FB:32:DA:5F:6C:88:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yVshRCuZuKbxE2EvwPsy2l9siBM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/4e28c8-04f6-4f4a-b060-3f791fb3c392/1/sYUKRYpdBWCOTWtDpNP9mu5_0x4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/4e28c8-04f6-4f4a-b060-3f791fb3c392/1/yVshRCuZuKbxE2EvwPsy2l9siBM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
137.121.0.0/16
Signature Algorithm: sha256WithRSAEncryption
62:3d:26:bc:d9:e2:1f:14:be:ab:c8:d1:c5:eb:2a:8e:fe:b9:
07:dc:11:4e:75:48:d6:f5:b1:a1:66:cd:85:88:56:c5:9f:64:
14:40:93:f8:c4:5e:21:25:89:d6:09:5a:ed:3a:fa:8e:c3:a4:
ac:d2:f5:cb:97:26:a1:fe:f1:33:f3:7b:3f:65:34:11:47:f4:
3b:65:c7:d3:83:ab:96:f0:3b:ac:65:d6:2a:d7:f9:45:59:7c:
d4:16:87:5e:e4:3f:eb:4a:28:81:05:23:0c:3d:70:4c:e9:01:
d1:7b:dd:5b:e3:0d:6f:31:02:40:22:84:bd:03:2f:39:78:34:
e4:20:b0:f5:f2:19:cd:b8:06:f2:d2:b0:05:a4:c2:37:6a:45:
a3:fe:45:e9:f0:e1:12:a6:a3:6c:64:68:08:37:1f:00:c9:02:
43:08:4b:e9:14:b9:d9:d8:89:30:78:3f:ea:eb:da:04:dc:5f:
f9:d2:c6:26:2b:6b:6c:f8:3c:e9:ef:76:e6:e0:90:24:45:55:
35:42:1a:89:9f:bd:6e:d7:d0:91:62:93:d7:68:f3:0f:1f:5f:
84:4e:5a:27:6f:c0:ad:76:4e:a0:ad:17:83:4f:2f:58:22:a7:
5c:45:f2:c0:67:f0:b3:fb:3c:9c:91:06:d8:1d:b0:69:c8:b6:
e9:b5:83:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 02:13:39 2025 by rpki-client