Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/YkSDoKYOtMCdRX_GWKoH7bN9Qog.roa
File: YkSDoKYOtMCdRX_GWKoH7bN9Qog.roa (raw, json)
Hash identifier: i72ku+f2KHytCtL8AK60yC0CuhLhud/m7lirtjbMIIQ=
Subject key identifier: 62:44:83:A0:A6:0E:B4:C0:9D:45:7F:C6:58:AA:07:ED:B3:7D:42:88
Certificate issuer: /CN=86cce06e70df970d90abfe3cbe7fa882f467b1e4
Certificate serial: 0194282411F965BF6189F7CF6745F5503E2B
Authority key identifier: 86:CC:E0:6E:70:DF:97:0D:90:AB:FE:3C:BE:7F:A8:82:F4:67:B1:E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hszgbnDflw2Qq_48vn-ogvRnseQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/YkSDoKYOtMCdRX_GWKoH7bN9Qog.roa
Signing time: Thu 02 Jan 2025 17:50:40 +0000
ROA not before: Thu 02 Jan 2025 17:50:40 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 39521
IP address blocks: 82.163.64.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:24:11:f9:65:bf:61:89:f7:cf:67:45:f5:50:3e:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86cce06e70df970d90abfe3cbe7fa882f467b1e4
Validity
Not Before: Jan 2 17:50:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=624483a0a60eb4c09d457fc658aa07edb37d4288
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:bb:bd:56:9c:08:03:e9:7f:5e:02:3c:4d:8d:
f4:91:36:77:26:4a:45:aa:21:f4:ed:f0:26:6d:a5:
48:58:d8:cd:34:12:63:8e:4b:1c:59:06:63:a3:f2:
ed:b5:54:af:9d:55:2d:c3:e8:e3:5e:07:e5:38:37:
d7:1f:00:e5:ab:a6:9b:79:5c:b6:1f:06:09:f2:62:
47:9b:f0:4d:ec:2c:4e:5c:b3:b3:b0:f2:23:a5:b1:
94:b6:5b:13:f5:10:70:c6:59:b6:76:b9:af:65:ad:
10:4d:2c:0e:d4:11:03:bb:fd:1d:ae:97:2e:dc:af:
38:b4:10:80:b8:55:dc:22:0e:3d:68:a5:9f:69:cd:
f2:22:76:8e:95:6b:83:3e:cc:f7:ff:ce:18:3f:b2:
92:2c:4f:e7:8d:2b:d3:74:ae:c3:dc:ee:bb:a8:bf:
3b:d9:3d:3b:dc:a6:48:26:8d:b9:c9:68:d1:f7:73:
86:27:32:b9:b0:26:cb:6a:35:e0:bd:e3:5c:f9:c6:
7d:88:83:23:c9:86:03:fb:cf:03:c2:b7:ff:1f:34:
17:a7:83:0e:a7:dd:b2:79:00:f6:9d:00:5c:2d:32:
3e:2b:db:71:54:fd:25:d5:6d:6d:6a:b7:d6:1c:6f:
b3:13:f6:30:35:9e:0a:47:b2:67:fd:b2:58:4a:63:
5f:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:44:83:A0:A6:0E:B4:C0:9D:45:7F:C6:58:AA:07:ED:B3:7D:42:88
X509v3 Authority Key Identifier:
keyid:86:CC:E0:6E:70:DF:97:0D:90:AB:FE:3C:BE:7F:A8:82:F4:67:B1:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hszgbnDflw2Qq_48vn-ogvRnseQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/YkSDoKYOtMCdRX_GWKoH7bN9Qog.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/hszgbnDflw2Qq_48vn-ogvRnseQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.163.64.0/22
Signature Algorithm: sha256WithRSAEncryption
6c:1b:5e:dd:5d:44:54:ba:fa:9d:4f:05:a0:2b:0b:10:f5:7c:
ad:2d:ef:dc:18:47:dd:af:b0:97:8b:f1:8b:1f:31:03:65:f3:
b9:fe:41:33:a7:e7:9e:20:92:70:c7:68:24:da:12:3d:de:26:
fb:1a:93:a8:25:d8:61:cd:c7:b0:8b:ad:44:2c:32:54:c0:3c:
06:b4:62:d2:9f:b1:4f:4d:aa:5b:f2:92:6a:db:d3:57:8f:ac:
75:3d:03:86:20:d7:f9:5a:fe:67:ae:fd:96:fd:cc:74:db:60:
cf:ed:ca:f8:d9:66:5a:9b:7a:48:d6:b3:be:7a:15:91:1e:04:
fa:8b:53:43:be:58:ee:a0:e2:2c:28:ad:ab:32:75:67:8c:25:
97:27:ad:65:02:9b:05:bb:d6:84:c4:03:9c:db:d0:e3:59:35:
42:7a:01:70:ff:b8:18:c2:57:6f:6e:41:70:6a:e3:ee:96:3a:
a1:dd:32:b9:ff:e7:94:81:2f:5a:c7:c0:d1:b3:ff:16:12:8f:
7f:08:30:1b:94:bb:06:6d:1b:b1:05:8f:e8:d9:59:d5:c8:9e:
1e:eb:e4:1c:cd:9c:6c:50:af:42:92:f3:a0:89:2a:85:2a:ca:
dc:5e:92:c8:0e:e7:40:9b:6e:cf:e0:13:07:4d:10:3d:45:b9:
86:79:ad:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:37:18 2025 by rpki-client