Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/YhHljyTwaooM35h4xBgRh3LuspQ.roa
File: YhHljyTwaooM35h4xBgRh3LuspQ.roa (raw, json)
Hash identifier: +I6TnIG3gndsCjxu9EwKVxEKXeRfZ/lzsW9GEA77iuA=
Subject key identifier: 62:11:E5:8F:24:F0:6A:8A:0C:DF:98:78:C4:18:11:87:72:EE:B2:94
Certificate issuer: /CN=f0dd81a833d9b043c7ffd635a5987f536971180d
Certificate serial: 0190C07E80BA83F5004201B9011A3E8A2BFA
Authority key identifier: F0:DD:81:A8:33:D9:B0:43:C7:FF:D6:35:A5:98:7F:53:69:71:18:0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/YhHljyTwaooM35h4xBgRh3LuspQ.roa
Signing time: Wed 17 Jul 2024 11:40:34 +0000
ROA not before: Wed 17 Jul 2024 11:40:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212238
IP address blocks: 217.9.250.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:c0:7e:80:ba:83:f5:00:42:01:b9:01:1a:3e:8a:2b:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0dd81a833d9b043c7ffd635a5987f536971180d
Validity
Not Before: Jul 17 11:40:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6211e58f24f06a8a0cdf9878c418118772eeb294
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:3b:df:d1:0d:95:b1:b9:93:91:4d:5c:42:a1:
6e:08:f8:17:1c:16:09:75:14:a2:a1:84:79:64:81:
34:01:0b:c3:74:34:a9:7b:48:49:15:11:fa:74:52:
85:ad:b1:52:56:ac:26:ff:7b:43:08:b7:89:93:22:
9d:c8:c9:44:58:e9:12:1d:a7:57:b8:47:3b:a7:1c:
84:07:74:fb:59:8d:4f:98:72:e3:27:fc:e5:2e:cf:
ac:be:a3:4c:63:69:29:4e:a7:13:b1:4b:d6:b0:b6:
ef:28:79:17:2c:7a:b2:d8:b2:62:f0:68:d1:b2:08:
11:dc:62:97:74:0e:63:6a:e7:6b:05:60:d3:08:93:
b3:f3:2d:40:3b:18:ef:d8:22:16:12:34:38:9d:98:
08:91:c2:f8:52:dc:10:73:95:f1:1a:c5:39:4c:d8:
55:46:86:ac:40:f4:65:12:15:93:57:e7:6c:11:b0:
6f:41:73:35:af:57:12:aa:46:ec:4b:1e:52:10:e0:
24:aa:08:20:a6:d3:0d:97:8c:df:62:e4:e9:cf:a9:
86:b8:17:a2:99:55:a1:2c:f1:f4:04:ef:76:e1:e0:
58:f2:a9:7e:ce:e5:2f:bc:72:cc:3f:93:ba:26:d1:
59:53:ff:1a:e4:1b:68:7b:26:f8:b7:7c:de:22:9b:
71:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:11:E5:8F:24:F0:6A:8A:0C:DF:98:78:C4:18:11:87:72:EE:B2:94
X509v3 Authority Key Identifier:
keyid:F0:DD:81:A8:33:D9:B0:43:C7:FF:D6:35:A5:98:7F:53:69:71:18:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/YhHljyTwaooM35h4xBgRh3LuspQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.9.250.0/24
Signature Algorithm: sha256WithRSAEncryption
00:74:e0:b3:5a:be:1d:92:2e:c2:9c:cc:8e:d0:d5:42:9b:63:
0a:4b:dd:53:06:6b:6b:01:4d:b9:19:c7:9a:d0:ea:9d:19:f4:
33:2d:58:a8:96:c7:cf:a1:63:e5:a9:f5:cc:7a:5c:9f:de:9e:
f5:76:f1:0e:e6:c1:d3:d0:30:fe:7f:9d:a7:88:7d:a7:4a:24:
d4:b4:c2:d3:56:f0:d1:31:35:3d:8f:c9:13:40:67:cd:19:c5:
2b:db:08:36:21:1a:12:25:f2:d4:ba:85:4e:3a:ae:36:b5:94:
c5:66:dc:b9:b0:79:e0:02:9c:c7:a2:ba:3e:8c:6f:d1:31:8b:
fe:b1:0f:bc:e3:da:8b:77:fb:c0:4c:85:28:dc:3a:b5:e6:b2:
78:ed:86:d2:50:b8:cd:28:ad:fd:f2:8f:f5:91:5c:ea:32:13:
39:1f:98:71:00:a6:87:e0:9f:d0:50:dc:b7:3a:b9:44:21:98:
f5:92:f8:43:44:e3:a8:75:8c:7e:91:43:96:50:3e:03:a2:7f:
5a:37:bd:37:cd:4e:76:3e:70:55:11:83:16:84:a6:61:26:b7:
34:c6:90:7c:07:63:f2:13:a9:d2:0c:6a:bf:83:44:20:e6:cd:
36:8d:a7:01:47:94:cd:4c:aa:bc:f7:88:ca:45:f6:99:22:c9:
0b:cb:78:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 21:56:07 2025 by rpki-client