Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/3a40c0-2475-4814-8559-700e3027f623/1/yxseiDrTDKkfKumKkJUQ-S699SM.roa
File: yxseiDrTDKkfKumKkJUQ-S699SM.roa (raw, json)
Hash identifier: jMn0qSGQuB1rlWwE3sPg8LRuW4ybf3WJJD6jW2FPlxo=
Subject key identifier: CB:1B:1E:88:3A:D3:0C:A9:1F:2A:E9:8A:90:95:10:F9:2E:BD:F5:23
Certificate issuer: /CN=3c4cf88177442a54f321b8fa80b6cf5df404cff6
Certificate serial: 0194236A17B936DB662CCC49463DF5951412
Authority key identifier: 3C:4C:F8:81:77:44:2A:54:F3:21:B8:FA:80:B6:CF:5D:F4:04:CF:F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PEz4gXdEKlTzIbj6gLbPXfQEz_Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/3a40c0-2475-4814-8559-700e3027f623/1/yxseiDrTDKkfKumKkJUQ-S699SM.roa
Signing time: Wed 01 Jan 2025 19:49:02 +0000
ROA not before: Wed 01 Jan 2025 19:49:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 34599
IP address blocks: 193.104.76.0/24 maxlen: 24
193.104.80.0/24 maxlen: 24
193.104.93.0/24 maxlen: 24
193.104.94.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:6a:17:b9:36:db:66:2c:cc:49:46:3d:f5:95:14:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4cf88177442a54f321b8fa80b6cf5df404cff6
Validity
Not Before: Jan 1 19:49:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cb1b1e883ad30ca91f2ae98a909510f92ebdf523
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:3d:a5:f6:1a:26:fa:5c:d3:fe:b6:4b:f7:8e:
cd:ae:c6:b9:4b:a1:3b:da:56:8a:0d:6c:58:0f:29:
ea:34:18:07:ea:c2:06:76:5a:a3:40:6c:41:7e:cc:
3d:5f:a0:cc:10:66:8d:cd:62:1f:06:8c:e8:df:ff:
47:99:b2:3f:de:0c:de:8d:b2:6f:b9:a4:b3:d6:de:
7e:11:bb:a0:fd:f8:aa:a8:b3:06:3d:70:72:ba:8c:
07:6e:fb:fa:2d:7a:41:2b:52:f1:f9:af:2d:d5:e0:
8e:30:c9:78:a6:7c:9b:62:53:c2:a9:f0:6f:74:01:
31:50:58:19:8a:48:c3:0b:7a:40:0b:71:66:01:f0:
dd:c4:2f:d4:77:7d:5f:9e:d7:73:32:8b:9f:d9:8a:
d3:e6:2e:3e:e2:06:35:19:8c:d5:b5:94:e0:55:34:
16:98:99:56:27:64:70:8f:0d:51:14:3d:5d:de:15:
8b:28:67:5f:d4:6b:1a:3b:b3:b5:e0:65:85:54:98:
78:cd:82:c3:54:69:e2:54:2a:1c:f5:71:a4:49:e0:
69:10:40:71:4c:6a:6f:65:df:3b:94:7c:93:2a:7f:
37:35:75:ed:41:89:d0:b6:44:97:54:ba:ae:3e:73:
3a:9e:e7:a1:2f:46:8d:d4:b5:53:17:1e:fc:d4:a1:
ed:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:1B:1E:88:3A:D3:0C:A9:1F:2A:E9:8A:90:95:10:F9:2E:BD:F5:23
X509v3 Authority Key Identifier:
keyid:3C:4C:F8:81:77:44:2A:54:F3:21:B8:FA:80:B6:CF:5D:F4:04:CF:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PEz4gXdEKlTzIbj6gLbPXfQEz_Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/3a40c0-2475-4814-8559-700e3027f623/1/yxseiDrTDKkfKumKkJUQ-S699SM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/3a40c0-2475-4814-8559-700e3027f623/1/PEz4gXdEKlTzIbj6gLbPXfQEz_Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.104.76.0/24
193.104.80.0/24
193.104.93.0-193.104.94.255
Signature Algorithm: sha256WithRSAEncryption
a9:37:8f:b5:78:6b:d0:5a:b8:e4:cd:39:21:5f:f5:1e:2e:af:
c5:25:eb:07:dc:d8:b4:ec:1e:ca:0a:60:e1:e6:39:7e:70:d9:
19:0b:05:01:ea:f6:0a:17:85:fc:b0:8c:20:1a:17:d6:02:00:
f5:f6:70:42:24:b2:f6:75:85:99:04:57:38:e8:eb:ea:22:84:
58:42:98:0d:0e:7c:41:f2:cb:44:79:4d:33:d6:2b:79:65:e8:
90:ef:cf:3e:00:4f:05:10:6e:7e:28:52:80:d6:66:d2:64:b3:
76:2d:14:df:8d:89:b7:f7:fc:07:6f:b9:05:f7:bf:bc:39:c5:
7f:a2:0f:0a:00:eb:fc:62:15:c6:c9:01:2e:b8:8d:b3:05:08:
83:75:9c:f7:c7:a7:24:d8:86:b3:5e:47:ab:f8:93:e3:42:0d:
d7:76:14:7c:da:e8:90:09:d2:22:a2:a0:d5:10:aa:78:28:df:
e7:84:72:11:c6:85:37:b3:c3:ab:d2:8d:f1:74:ec:21:07:f0:
44:05:4a:9d:d5:2a:20:93:94:42:0c:ed:3a:43:55:bf:35:1e:
e6:47:ed:a6:e6:d7:ec:88:45:c9:a1:f5:3a:a5:5d:3f:23:2e:
4e:f1:66:1a:1d:dc:7d:5e:22:84:55:ba:6a:db:8c:37:eb:9b:
0a:b8:0b:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 12:47:55 2025 by rpki-client