Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/d50905-007a-4074-9a05-a6c8bd8742a4/1/YSH0QfgktL4T3PqTj2iClyuBZuc.roa
File: YSH0QfgktL4T3PqTj2iClyuBZuc.roa (raw, json)
Hash identifier: otGtnOmBuu+IdPmE0dcRqAI5P+FLdodcVi6Fo/18JQk=
Subject key identifier: 61:21:F4:41:F8:24:B4:BE:13:DC:FA:93:8F:68:82:97:2B:81:66:E7
Certificate issuer: /CN=ec9269185f63dc3356037f713ce8a0909ff07225
Certificate serial: 01941FFAAEA39EF1FE8511CE3FE1D3BF0F4B
Authority key identifier: EC:92:69:18:5F:63:DC:33:56:03:7F:71:3C:E8:A0:90:9F:F0:72:25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7JJpGF9j3DNWA39xPOigkJ_wciU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/d50905-007a-4074-9a05-a6c8bd8742a4/1/YSH0QfgktL4T3PqTj2iClyuBZuc.roa
Signing time: Wed 01 Jan 2025 03:48:29 +0000
ROA not before: Wed 01 Jan 2025 03:48:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 12301
IP address blocks: 195.144.20.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:ae:a3:9e:f1:fe:85:11:ce:3f:e1:d3:bf:0f:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec9269185f63dc3356037f713ce8a0909ff07225
Validity
Not Before: Jan 1 03:48:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6121f441f824b4be13dcfa938f6882972b8166e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:43:3f:ac:6c:91:3a:75:98:bc:58:97:81:6c:
d4:29:9e:77:86:5e:cf:b2:ea:57:9b:34:ce:db:6c:
02:5f:6b:3b:28:72:0e:02:a3:b7:2a:9d:28:4e:e0:
81:e8:17:76:78:01:22:76:e4:f5:db:32:2f:39:0c:
11:25:75:e4:b7:76:01:e7:01:60:2a:96:34:ff:93:
76:a6:ef:8b:75:d1:40:2f:17:48:87:5b:8e:8f:62:
8b:57:99:33:92:35:6c:13:62:68:de:6b:73:16:7d:
93:7f:a3:e3:8e:9e:ad:99:4b:0f:43:86:7a:b9:7f:
67:42:ec:ef:76:a9:69:84:ff:a6:6a:41:16:04:25:
31:00:8f:7b:2c:76:91:0a:d5:f6:12:00:1c:57:05:
88:bc:66:39:92:c9:58:a4:8e:9f:8a:4a:16:2d:6d:
60:50:32:cf:f2:6c:ac:5e:5e:5f:9e:ac:62:87:d2:
fc:60:92:97:04:4d:8e:24:cc:70:b6:7f:ff:c7:6d:
a5:61:78:f0:ff:67:20:4d:9a:54:ee:89:ec:26:9b:
70:39:2f:e4:b2:42:5d:db:95:ec:4d:b9:08:3e:95:
5e:3f:ce:1b:49:21:56:1d:54:2f:9d:ed:6d:e9:f4:
6e:38:3a:b8:29:86:3c:65:68:1b:ef:67:01:31:57:
67:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:21:F4:41:F8:24:B4:BE:13:DC:FA:93:8F:68:82:97:2B:81:66:E7
X509v3 Authority Key Identifier:
keyid:EC:92:69:18:5F:63:DC:33:56:03:7F:71:3C:E8:A0:90:9F:F0:72:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7JJpGF9j3DNWA39xPOigkJ_wciU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/d50905-007a-4074-9a05-a6c8bd8742a4/1/YSH0QfgktL4T3PqTj2iClyuBZuc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/d50905-007a-4074-9a05-a6c8bd8742a4/1/7JJpGF9j3DNWA39xPOigkJ_wciU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.144.20.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:14:46:96:8a:f1:2f:c0:49:62:ec:46:9f:a7:36:9a:8a:bf:
23:fe:d4:28:74:41:22:ec:1b:a8:e6:f8:dc:70:db:72:6e:12:
8d:f9:96:9c:98:36:00:23:ff:05:f4:98:3e:b6:ea:a1:74:02:
48:82:9a:d3:e5:e9:f5:a7:7d:b3:c7:11:72:ec:07:d4:09:b1:
cb:ac:7e:51:4a:15:e2:63:4a:bd:73:4b:e4:9f:7d:ab:7f:16:
38:29:36:9b:ba:df:b4:7b:e7:57:5f:84:31:db:6e:5b:63:38:
f2:8d:58:1b:8a:2c:dc:b8:8a:22:00:b4:4a:7e:87:64:e3:94:
69:bd:fc:4b:25:a4:61:9d:7b:82:96:e8:a2:55:78:b2:49:f7:
7e:02:45:1c:f1:17:64:8c:66:79:fe:71:8c:7f:1c:05:08:7a:
27:bd:e1:93:1e:15:18:5b:b8:f4:5e:e9:e9:cc:5c:09:f0:4b:
a5:46:69:85:55:23:b9:71:d4:d0:a6:91:02:17:1f:fd:98:a3:
d0:3a:05:fb:5f:ff:13:30:54:cf:63:d2:00:bf:d5:74:1f:9c:
1c:32:60:b8:c7:23:f8:06:53:ac:4f:bd:45:e0:11:84:39:e7:
c3:ed:b6:c2:26:65:46:4f:cd:95:e9:a4:6e:ad:4c:79:a1:d8:
5a:2d:0f:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 03:42:50 2025 by rpki-client