Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/996cee-0acb-4eb8-a77a-27f90b8d85e6/1/Y0n-ydU5YtM5FIbXPN4wCVJngdE.roa
File: Y0n-ydU5YtM5FIbXPN4wCVJngdE.roa (raw, json)
Hash identifier: ApF50P5ImmFTCYDqSebFhsxBAqXoF1l91y3xHeQhovw=
Subject key identifier: 63:49:FE:C9:D5:39:62:D3:39:14:86:D7:3C:DE:30:09:52:67:81:D1
Certificate issuer: /CN=1dae474d79597db75d1f4d49901b52558bbf6af4
Certificate serial: 0194252215B75AF242A7BA6E6C1537E83F13
Authority key identifier: 1D:AE:47:4D:79:59:7D:B7:5D:1F:4D:49:90:1B:52:55:8B:BF:6A:F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ha5HTXlZfbddH01JkBtSVYu_avQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/996cee-0acb-4eb8-a77a-27f90b8d85e6/1/Y0n-ydU5YtM5FIbXPN4wCVJngdE.roa
Signing time: Thu 02 Jan 2025 03:49:38 +0000
ROA not before: Thu 02 Jan 2025 03:49:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 25091
IP address blocks: 79.110.235.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:22:15:b7:5a:f2:42:a7:ba:6e:6c:15:37:e8:3f:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1dae474d79597db75d1f4d49901b52558bbf6af4
Validity
Not Before: Jan 2 03:49:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6349fec9d53962d3391486d73cde3009526781d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:55:58:a4:a8:09:cb:56:d7:ae:c4:8b:bd:2e:
b3:ad:c1:40:d1:84:64:5b:1d:f2:aa:4b:17:e9:86:
32:af:9a:95:de:de:44:83:24:54:6d:b5:8b:be:a7:
aa:59:24:0c:11:4c:a8:4f:27:b5:61:85:31:af:54:
a7:64:d6:bf:7b:e5:22:4f:34:39:fe:72:68:72:81:
84:72:8c:18:8f:27:0c:4f:de:13:7a:d6:1c:ef:0a:
13:70:21:ee:a2:93:42:d7:b3:f3:ac:ef:d7:4c:7d:
10:05:a3:e7:ba:38:97:a0:14:b5:5d:26:56:4e:35:
25:a7:1d:9d:36:31:46:00:dc:1d:73:54:3d:c9:af:
ca:e4:e8:fb:f2:cd:53:0b:04:ef:00:c1:a9:79:c6:
c4:35:fa:11:37:82:78:3c:9b:1b:48:72:7b:f5:e3:
c8:af:6d:f6:91:f8:55:03:2a:be:08:9f:81:06:cd:
7b:ca:e2:4a:bb:f8:a5:6c:61:7e:79:b0:57:b3:8d:
b1:ba:4a:e8:1d:29:19:22:73:80:92:d2:70:a7:42:
dd:91:1e:30:c8:61:ce:8a:d2:fa:7e:dd:26:d1:f9:
25:b2:8a:c9:44:0c:e7:53:6f:22:9f:44:50:3c:6d:
ea:da:20:8a:f3:61:db:81:9d:f0:24:d7:6f:70:66:
c4:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:49:FE:C9:D5:39:62:D3:39:14:86:D7:3C:DE:30:09:52:67:81:D1
X509v3 Authority Key Identifier:
keyid:1D:AE:47:4D:79:59:7D:B7:5D:1F:4D:49:90:1B:52:55:8B:BF:6A:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ha5HTXlZfbddH01JkBtSVYu_avQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/996cee-0acb-4eb8-a77a-27f90b8d85e6/1/Y0n-ydU5YtM5FIbXPN4wCVJngdE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/996cee-0acb-4eb8-a77a-27f90b8d85e6/1/Ha5HTXlZfbddH01JkBtSVYu_avQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.110.235.0/24
Signature Algorithm: sha256WithRSAEncryption
61:55:5b:a9:67:df:9c:22:1e:7c:f5:11:eb:73:9e:0b:ae:0c:
a8:98:f9:23:2a:62:69:0f:d5:5d:b2:9b:10:a6:99:35:a4:77:
e2:7a:ce:9c:52:b2:3f:b4:c5:85:32:aa:91:7d:e0:12:6a:3f:
d0:8e:dd:92:10:78:03:2b:71:47:db:74:38:d1:f9:4e:ce:05:
a7:ae:d9:eb:e3:76:0e:e7:19:ca:09:93:3f:ca:f7:f7:ce:b7:
48:f0:f7:30:e0:ed:3e:fa:7e:dc:da:55:2d:55:44:db:4e:fb:
d3:79:f6:a5:9c:9a:ca:e2:d4:f4:e2:2f:a5:4e:1c:77:15:32:
30:a7:7d:67:00:35:48:ae:11:12:34:ae:af:1e:e5:5a:24:03:
70:74:3f:80:66:c9:09:a9:33:45:a6:20:12:df:c6:39:31:0c:
ae:ed:76:48:68:b2:37:18:4c:9e:8f:31:b2:81:e8:06:c4:52:
1d:1f:45:4c:78:5e:00:4f:20:08:ec:16:36:f9:e5:04:27:e3:
d0:13:c7:31:f4:f1:fa:08:a5:0e:4b:18:c9:96:76:c3:14:52:
bf:44:0d:ba:ba:13:b4:79:bc:e5:67:bb:3f:8a:5d:bd:9c:25:
26:52:b4:b7:53:c3:31:fd:e6:dd:f3:3f:2c:39:56:4e:46:f5:
1e:d1:fa:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 03:37:59 2025 by rpki-client