Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/f2196a-389e-4cce-8171-90ad0cadff79/1/y7ZtJRa8RDYNRTKwhM2DCy3Hq9A.roa
File: y7ZtJRa8RDYNRTKwhM2DCy3Hq9A.roa (raw, json)
Hash identifier: EJ3sjLC5iVavJI1Ic5B4ozrCt9NF5TOm6KzUNwUCcpI=
Subject key identifier: CB:B6:6D:25:16:BC:44:36:0D:45:32:B0:84:CD:83:0B:2D:C7:AB:D0
Certificate issuer: /CN=c5f9f50ca1c34a3be610048d138af3c0753af92b
Certificate serial: 0195C83101CCC02D4AD50FE051DA7B43D0CC
Authority key identifier: C5:F9:F5:0C:A1:C3:4A:3B:E6:10:04:8D:13:8A:F3:C0:75:3A:F9:2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xfn1DKHDSjvmEASNE4rzwHU6-Ss.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/f2196a-389e-4cce-8171-90ad0cadff79/1/y7ZtJRa8RDYNRTKwhM2DCy3Hq9A.roa
Signing time: Mon 24 Mar 2025 12:46:49 +0000
ROA not before: Mon 24 Mar 2025 12:46:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 26737
IP address blocks: 194.26.3.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:c8:31:01:cc:c0:2d:4a:d5:0f:e0:51:da:7b:43:d0:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5f9f50ca1c34a3be610048d138af3c0753af92b
Validity
Not Before: Mar 24 12:46:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cbb66d2516bc44360d4532b084cd830b2dc7abd0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:f3:6e:35:a5:64:ea:69:b2:ec:af:34:e1:3b:
a0:0b:b7:ba:e7:df:0b:e0:e5:51:93:c5:92:d7:cf:
00:db:d1:64:7e:19:da:56:80:11:66:1d:59:f6:29:
74:14:9b:50:02:13:96:37:3c:95:80:db:17:8e:56:
73:d5:d3:e3:03:ea:07:f4:cb:c7:f1:21:c2:b7:dd:
1e:8c:57:95:48:29:aa:21:72:ca:9e:52:0d:20:6c:
a3:bd:82:b5:81:6e:e3:f8:41:ec:4a:94:af:27:38:
81:57:42:58:77:dd:11:8e:d4:fa:a7:07:f5:e1:4f:
0e:bf:f9:65:2f:33:b8:d1:7b:8a:71:00:85:e4:30:
c3:17:2d:a3:25:33:4d:8b:5a:d0:4e:da:c8:5a:16:
36:35:74:5d:3e:74:f9:af:f7:08:04:25:70:16:f0:
0c:ac:83:86:0f:95:e0:00:05:ea:99:f0:f2:3f:3a:
90:f7:a4:0a:3c:55:a8:e5:1c:42:4e:6f:13:b6:29:
d4:32:2b:50:a7:11:12:9a:db:a1:0c:c3:89:89:46:
31:13:da:01:c7:b1:d3:c5:86:bd:51:a9:b4:cb:bd:
b6:0b:b0:79:75:a3:d0:4c:ec:1d:e9:82:ba:a9:4c:
8d:a3:63:85:fe:d9:ae:ac:06:89:99:23:18:33:59:
94:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:B6:6D:25:16:BC:44:36:0D:45:32:B0:84:CD:83:0B:2D:C7:AB:D0
X509v3 Authority Key Identifier:
keyid:C5:F9:F5:0C:A1:C3:4A:3B:E6:10:04:8D:13:8A:F3:C0:75:3A:F9:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xfn1DKHDSjvmEASNE4rzwHU6-Ss.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/f2196a-389e-4cce-8171-90ad0cadff79/1/y7ZtJRa8RDYNRTKwhM2DCy3Hq9A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/f2196a-389e-4cce-8171-90ad0cadff79/1/xfn1DKHDSjvmEASNE4rzwHU6-Ss.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.26.3.0/24
Signature Algorithm: sha256WithRSAEncryption
b3:9d:75:08:a1:eb:e4:6a:5b:c2:8d:78:bd:d8:01:16:4f:c3:
4f:02:a4:40:5d:00:f9:ac:4f:8c:bb:21:c4:fd:9c:17:d2:50:
cd:77:ed:3c:9d:48:bb:11:ed:b7:44:6e:8e:de:c4:00:92:82:
d2:5b:cb:57:16:37:be:19:63:98:60:d4:bc:96:62:b9:4c:4f:
a0:ae:93:cd:3f:76:50:6e:16:87:4f:37:7c:d5:83:e6:1b:3b:
76:7b:52:09:2d:ac:1a:25:ea:70:80:1c:86:8c:48:d1:17:f4:
78:c6:25:3e:24:5f:bb:d1:31:af:c4:e7:50:c4:cd:f4:58:b4:
12:8d:6a:82:aa:18:02:11:c4:86:69:88:ac:9d:17:92:7b:76:
18:00:25:62:27:35:7a:93:fe:07:de:71:08:e4:71:40:de:38:
bc:b0:14:ca:12:8a:71:40:b0:3e:59:3e:bf:af:15:97:0e:5d:
f4:62:bd:32:1e:3b:b7:c2:3b:70:c4:b2:3c:76:c8:23:2d:1a:
cf:dd:45:0d:bc:59:07:9a:27:19:90:e1:2b:f9:3f:dc:24:93:
c5:8a:3c:e6:b8:cf:67:85:5c:b9:bd:2d:96:17:ff:1e:2c:77:
08:ea:fe:09:53:9e:0f:6c:38:29:22:4f:41:22:ff:7c:0f:f8:
a6:09:4a:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 07:17:01 2025 by rpki-client