Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/YJCi9AWh99xuK45xoYGOeQ7CnmE.roa
File: YJCi9AWh99xuK45xoYGOeQ7CnmE.roa (raw, json)
Hash identifier: Ti9BtXIsKFet++HwcTL4uva9A9w4W22YtG5seAitsY8=
Subject key identifier: 60:90:A2:F4:05:A1:F7:DC:6E:2B:8E:71:A1:81:8E:79:0E:C2:9E:61
Certificate issuer: /CN=f0dd81a833d9b043c7ffd635a5987f536971180d
Certificate serial: 019427B422ACF1479EAB63F0CA062B755B72
Authority key identifier: F0:DD:81:A8:33:D9:B0:43:C7:FF:D6:35:A5:98:7F:53:69:71:18:0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/YJCi9AWh99xuK45xoYGOeQ7CnmE.roa
Signing time: Thu 02 Jan 2025 15:48:24 +0000
ROA not before: Thu 02 Jan 2025 15:48:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 5650
IP address blocks: 86.38.191.0/24 maxlen: 24
89.117.212.0/24 maxlen: 24
89.117.214.0/24 maxlen: 24
89.117.251.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b4:22:ac:f1:47:9e:ab:63:f0:ca:06:2b:75:5b:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0dd81a833d9b043c7ffd635a5987f536971180d
Validity
Not Before: Jan 2 15:48:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6090a2f405a1f7dc6e2b8e71a1818e790ec29e61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:cd:8e:80:e0:d4:98:c6:8f:dc:9e:35:95:04:
f5:be:27:4d:2b:8f:8c:c0:05:0c:a1:5d:ac:65:6b:
f0:58:f0:9c:61:ef:ce:3d:8b:33:7d:8c:9b:27:36:
66:29:53:6b:5e:d8:01:2a:6b:99:b1:eb:34:a5:48:
8d:7c:ce:36:5b:91:4c:e2:f5:bf:93:0f:4e:74:ae:
01:6c:23:88:2f:52:b6:f4:48:26:11:cd:40:f9:fd:
79:2a:63:b3:30:8d:56:86:f5:aa:26:fb:e2:87:70:
fc:33:c6:21:92:73:d3:e8:82:d4:7f:5d:d3:e8:d0:
d1:1d:59:d2:fc:9f:58:1a:b2:e8:4c:17:f9:9a:79:
b7:ab:42:eb:f7:d9:65:81:03:b7:fe:65:4f:f0:ee:
46:d7:41:60:0e:90:4e:4e:a0:41:50:c2:2d:b4:08:
8d:43:75:63:29:02:fe:32:db:b8:e7:fc:4d:14:34:
c2:23:15:5f:d3:7f:94:6f:e4:aa:f3:fa:ba:c3:74:
96:00:89:06:12:2c:16:7a:1d:eb:e9:76:61:4d:d9:
a8:74:23:bc:13:04:e3:f1:40:32:af:0a:48:da:0e:
70:f4:44:1b:50:39:af:79:8f:88:78:1c:31:9c:4a:
1e:28:96:e4:99:e2:9d:50:10:80:ed:2d:4c:1c:ea:
76:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:90:A2:F4:05:A1:F7:DC:6E:2B:8E:71:A1:81:8E:79:0E:C2:9E:61
X509v3 Authority Key Identifier:
keyid:F0:DD:81:A8:33:D9:B0:43:C7:FF:D6:35:A5:98:7F:53:69:71:18:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/YJCi9AWh99xuK45xoYGOeQ7CnmE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.38.191.0/24
89.117.212.0/24
89.117.214.0/24
89.117.251.0/24
Signature Algorithm: sha256WithRSAEncryption
16:ed:da:c2:f5:e6:60:7e:cd:98:21:ba:8c:d5:e3:7c:b6:0f:
65:f4:a9:83:a0:ea:7a:2d:0e:27:d7:8a:0b:ba:c2:eb:9a:62:
d9:8c:f8:53:a1:32:59:87:e9:37:0a:bd:0a:0c:ea:e9:47:1c:
e6:d5:16:27:4c:8f:4a:8e:8d:80:58:28:f4:21:3b:f5:7e:df:
0e:8e:52:ef:46:96:5d:0c:da:bd:61:e6:04:02:e4:a0:d6:85:
a4:20:b3:08:13:13:13:cb:5d:23:db:36:b5:ab:56:0d:cb:b6:
ac:b3:c2:fb:e2:d2:ef:51:14:38:ac:58:61:8d:d3:27:13:34:
c4:48:01:5d:21:fe:08:d7:62:f0:64:f9:5a:f2:5e:bc:19:49:
0f:64:65:b7:65:14:82:ad:d9:5c:67:d5:30:12:a7:85:15:c0:
f3:c7:b7:b7:a1:c3:74:94:6c:36:4e:46:e9:21:0c:39:3c:14:
e4:37:34:dd:6c:ae:6d:f1:28:4e:89:87:67:e0:1e:df:d6:3b:
8d:cb:8e:b9:06:98:b1:17:7e:9e:93:02:a1:b8:13:cd:9c:be:
d0:c7:90:20:19:19:bb:93:d4:7f:89:59:4b:70:77:69:f3:1c:
a7:9a:a2:e4:16:d7:f1:38:ab:e8:fd:28:9c:f0:6b:e1:a3:77:
6e:ee:e3:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:01:54 2025 by rpki-client