Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/yKpGSjWV03Z-ZRwznVCSfrbqaLw.roa
File: yKpGSjWV03Z-ZRwznVCSfrbqaLw.roa (raw, json)
Hash identifier: U1xsuNYZkPAWSLIeTn9sgvXfnplPuXVUAv3HI4BDOPY=
Subject key identifier: C8:AA:46:4A:35:95:D3:76:7E:65:1C:33:9D:50:92:7E:B6:EA:68:BC
Certificate issuer: /CN=1773db17795d2bf1b4b5345c5b29390dbaf4523e
Certificate serial: 0194236A56B3A9E247CD3396A60F00D62A5B
Authority key identifier: 17:73:DB:17:79:5D:2B:F1:B4:B5:34:5C:5B:29:39:0D:BA:F4:52:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/yKpGSjWV03Z-ZRwznVCSfrbqaLw.roa
Signing time: Wed 01 Jan 2025 19:49:19 +0000
ROA not before: Wed 01 Jan 2025 19:49:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 1132
IP address blocks: 145.120.16.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:6a:56:b3:a9:e2:47:cd:33:96:a6:0f:00:d6:2a:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1773db17795d2bf1b4b5345c5b29390dbaf4523e
Validity
Not Before: Jan 1 19:49:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c8aa464a3595d3767e651c339d50927eb6ea68bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:3a:77:c6:ea:44:13:ee:2b:bc:43:34:0a:79:
cb:26:21:65:a4:ce:44:da:70:c2:f1:c7:b8:a0:e5:
aa:92:c5:06:65:bf:dc:7f:0e:04:90:64:4f:60:47:
3f:0c:76:02:8f:ea:21:74:4f:96:19:87:2c:d1:b7:
47:8e:22:f6:2d:cf:0c:fd:a7:ee:38:c3:fe:f9:ad:
d6:52:23:39:30:a1:28:91:f4:48:8d:ff:32:06:06:
02:dd:c1:96:bf:86:8d:d6:66:a1:c3:2c:5a:1b:de:
a9:a3:4a:7d:e7:67:2f:48:bc:b6:18:31:ea:ea:2d:
d6:7e:9f:7e:74:ce:08:d7:75:cd:63:1b:9f:61:b1:
f1:aa:96:b4:40:d6:0c:33:70:96:c2:16:71:11:b2:
4f:f0:98:8a:e8:96:60:1f:ac:02:28:a8:d7:56:cb:
82:b0:ab:f8:95:27:54:40:72:86:5d:58:7f:05:a0:
26:fc:9a:b5:53:c8:94:67:78:a5:c4:c4:ef:bc:a7:
29:fb:d3:24:a8:5c:dc:64:92:9f:09:e3:09:92:ce:
97:94:90:e8:d3:f9:54:45:e1:cf:d5:5e:b6:c7:db:
b4:70:e6:ef:ad:9f:9a:0b:17:a7:96:f1:26:2e:b5:
72:9b:1b:04:90:9d:31:27:dd:61:8c:e6:69:f3:3c:
c0:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:AA:46:4A:35:95:D3:76:7E:65:1C:33:9D:50:92:7E:B6:EA:68:BC
X509v3 Authority Key Identifier:
keyid:17:73:DB:17:79:5D:2B:F1:B4:B5:34:5C:5B:29:39:0D:BA:F4:52:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/yKpGSjWV03Z-ZRwznVCSfrbqaLw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.120.16.0/23
Signature Algorithm: sha256WithRSAEncryption
8f:36:94:c3:a5:c8:93:af:57:9c:42:43:1c:48:9d:1f:6d:ad:
2d:2c:c6:c5:76:5d:c9:66:f0:e4:5a:9e:a9:97:f3:26:a2:be:
be:57:fd:cd:58:83:08:c8:3e:c0:d5:a2:f0:f5:86:83:0c:4e:
07:b5:9e:5a:8b:b2:53:fe:9a:72:ca:5a:a7:9e:a7:5e:af:21:
a2:7d:a8:7f:25:5c:4b:92:69:c4:6e:36:57:7f:d6:1a:99:b1:
e6:01:3c:f6:e7:6a:03:29:16:49:af:bf:a1:04:fd:a2:3c:2f:
8f:19:e9:53:fd:be:3e:65:86:2a:7a:74:71:a9:3d:69:81:73:
ac:f1:1c:5f:53:eb:34:59:7d:89:2f:e7:50:94:5f:95:a4:84:
ad:5a:a0:40:e1:ba:b1:0d:0b:d7:47:4a:3d:14:50:c3:fc:08:
b4:91:63:58:ae:ec:da:b0:61:04:ef:d5:ce:35:7e:4d:65:07:
dd:23:64:a1:89:9c:ef:60:9e:71:8d:57:95:99:5a:f3:a9:c0:
92:33:f9:20:8b:7c:94:1e:60:a3:b9:2a:00:d1:02:a1:c6:26:
cf:65:b3:39:cb:fb:92:7f:3b:1e:6a:fc:51:01:fe:74:f3:72:
88:93:53:48:aa:01:b9:c7:cc:0f:d6:c3:03:b6:06:9a:75:14:
44:cc:3c:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 13:34:28 2025 by rpki-client