Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/a39138-f4f1-4259-a4b9-acd87c546048/1/YCaC2D8L5OtL6F6domigXArqF2c.roa
File: YCaC2D8L5OtL6F6domigXArqF2c.roa (raw, json)
Hash identifier: 3VcxChRnU4HThrx+KUbxRb/2EVyI8+silVMvgGd2Xn0=
Subject key identifier: 60:26:82:D8:3F:0B:E4:EB:4B:E8:5E:9D:A2:68:A0:5C:0A:EA:17:67
Certificate issuer: /CN=a9480cf18fd7859df9ad997940013a99b8dee374
Certificate serial: 01942521BF466857D6E5C6E668D9237BF211
Authority key identifier: A9:48:0C:F1:8F:D7:85:9D:F9:AD:99:79:40:01:3A:99:B8:DE:E3:74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qUgM8Y_XhZ35rZl5QAE6mbje43Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/a39138-f4f1-4259-a4b9-acd87c546048/1/YCaC2D8L5OtL6F6domigXArqF2c.roa
Signing time: Thu 02 Jan 2025 03:49:16 +0000
ROA not before: Thu 02 Jan 2025 03:49:16 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50304
IP address blocks: 185.91.64.0/22 maxlen: 24
2a05:e880::/29 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:bf:46:68:57:d6:e5:c6:e6:68:d9:23:7b:f2:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9480cf18fd7859df9ad997940013a99b8dee374
Validity
Not Before: Jan 2 03:49:16 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=602682d83f0be4eb4be85e9da268a05c0aea1767
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:e1:39:c8:bb:4b:7e:b4:7a:3f:af:dd:07:00:
06:aa:85:7c:45:e6:fa:e7:33:70:b3:71:74:aa:6c:
5f:aa:11:ad:61:6c:77:84:89:5a:29:a9:d0:5e:d1:
ea:22:0b:bc:78:47:82:fa:9e:c7:93:70:37:6b:76:
36:a5:24:b2:c1:c3:fd:3b:b5:80:73:47:75:3e:8e:
7d:89:31:44:46:00:40:4a:4d:5a:79:99:38:03:e6:
62:6f:11:f6:fe:f5:af:56:be:f9:d7:c4:41:d0:eb:
a6:0b:02:68:1e:0d:6a:ce:7e:55:50:70:aa:cc:8a:
d8:85:b4:43:26:08:b3:4c:ed:40:c7:a5:e4:94:da:
54:78:a2:f2:13:44:f7:c8:3d:b6:70:5b:69:9f:03:
0a:bb:b0:d4:08:5b:45:05:75:ad:93:ae:cb:11:b8:
41:ef:ca:a8:30:5a:18:5d:8d:3d:c3:e4:42:70:c7:
82:51:88:17:8a:e7:ba:20:09:aa:ed:2b:8c:5c:6a:
41:91:64:e7:c5:1c:2c:17:cb:fa:0f:20:02:57:25:
8c:31:9a:c3:56:37:ee:a9:0b:bb:64:ee:04:08:c0:
e2:66:8e:34:a3:60:5a:ab:7f:00:4f:a0:02:62:59:
bc:e9:1f:19:ef:da:62:6f:ae:3f:0f:f2:c3:a1:fd:
7e:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:26:82:D8:3F:0B:E4:EB:4B:E8:5E:9D:A2:68:A0:5C:0A:EA:17:67
X509v3 Authority Key Identifier:
keyid:A9:48:0C:F1:8F:D7:85:9D:F9:AD:99:79:40:01:3A:99:B8:DE:E3:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qUgM8Y_XhZ35rZl5QAE6mbje43Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/a39138-f4f1-4259-a4b9-acd87c546048/1/YCaC2D8L5OtL6F6domigXArqF2c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/a39138-f4f1-4259-a4b9-acd87c546048/1/qUgM8Y_XhZ35rZl5QAE6mbje43Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.91.64.0/22
IPv6:
2a05:e880::/29
Signature Algorithm: sha256WithRSAEncryption
26:ba:86:38:1e:4d:cb:e9:a4:01:3c:84:85:2a:34:fd:b8:9a:
bc:46:44:56:aa:16:87:74:ba:89:f9:ff:b6:a0:15:ae:dd:b1:
cf:c1:b3:8c:7e:06:60:ed:06:0c:0e:e8:c5:f9:1d:86:39:02:
4e:8d:36:3c:5c:1d:d2:cd:40:15:37:ef:17:ab:9d:d1:8e:a8:
7c:ae:a3:5d:75:b4:e0:94:e8:49:70:52:a6:e6:4c:33:27:f1:
94:98:33:0f:03:45:b9:41:d1:9e:ec:a3:9b:29:c8:7f:93:40:
10:ef:ad:b4:2f:6c:15:33:cc:75:ea:6c:01:ce:91:81:05:f1:
42:d2:3c:1a:41:92:48:91:b6:a8:d3:f4:1f:73:df:2a:ea:78:
7d:19:7a:82:6e:16:ff:21:1f:73:04:a2:95:43:6e:1c:2e:30:
d3:86:67:30:ae:67:3e:5d:61:da:6d:65:a8:8c:95:89:0a:9c:
b6:1b:17:98:de:26:76:9d:52:b0:68:ba:c9:47:8f:4b:17:59:
46:56:83:90:c5:4f:8f:56:6d:ed:0e:86:50:57:93:d0:cc:1c:
f6:57:a5:3e:f4:0d:b8:44:a5:40:af:5c:df:c7:86:84:98:22:
14:da:b6:d5:76:51:85:78:35:12:8c:5e:ff:d1:67:5f:42:e4:
ee:bf:bb:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 20:44:28 2025 by rpki-client