Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/89ff3b-1263-4cdd-9cad-23df8dddf978/1/yOx4nY5h71UsEVGCdqce7EnVtbw.roa
File: yOx4nY5h71UsEVGCdqce7EnVtbw.roa (raw, json)
Hash identifier: pblfkKrPcMJNUK4hgNwzxNA61gyD6ePezh9yKZ6o3M4=
Subject key identifier: C8:EC:78:9D:8E:61:EF:55:2C:11:51:82:76:A7:1E:EC:49:D5:B5:BC
Certificate issuer: /CN=4f152900b0d323d36d94510ab0b01c93f4517c89
Certificate serial: 0194228E26DD7F98CAF3EE4DC6BE6013A6DB
Authority key identifier: 4F:15:29:00:B0:D3:23:D3:6D:94:51:0A:B0:B0:1C:93:F4:51:7C:89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxUpALDTI9NtlFEKsLAck_RRfIk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/89ff3b-1263-4cdd-9cad-23df8dddf978/1/yOx4nY5h71UsEVGCdqce7EnVtbw.roa
Signing time: Wed 01 Jan 2025 15:48:48 +0000
ROA not before: Wed 01 Jan 2025 15:48:48 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 2119
IP address blocks: 185.102.32.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8e:26:dd:7f:98:ca:f3:ee:4d:c6:be:60:13:a6:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f152900b0d323d36d94510ab0b01c93f4517c89
Validity
Not Before: Jan 1 15:48:48 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c8ec789d8e61ef552c11518276a71eec49d5b5bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:92:b3:b9:8a:f7:9c:4f:fd:b6:21:05:7a:19:
30:3c:71:e4:3d:80:1a:36:f7:3b:fd:d6:c8:37:e7:
cc:10:64:f2:9e:14:f5:f0:72:db:c3:a6:0f:a9:02:
41:67:76:2d:3b:57:8e:77:ad:57:80:4d:d7:c3:4e:
bb:89:7b:1f:1a:ac:81:14:13:2f:1d:41:ff:f4:af:
36:c3:5d:f8:bf:5e:ca:4a:a2:3f:6a:ad:52:2b:6f:
dc:93:fd:23:0c:63:04:e9:63:8c:08:67:4f:51:94:
1f:37:0d:5d:79:5c:85:9c:b1:58:4b:66:47:46:d8:
21:af:7e:e5:1a:45:7f:3e:5c:f9:2e:1b:7e:bb:23:
ef:9f:5e:5e:22:27:de:82:64:ba:70:44:43:55:fb:
1b:b4:0b:fd:1d:d6:48:bb:19:00:8d:04:22:8f:c3:
9e:de:ab:21:b9:eb:c7:3d:e2:07:6e:a3:56:bd:0c:
dc:fd:f5:8e:dd:65:81:5f:6a:97:7c:94:31:99:fb:
97:0e:7b:13:51:29:c5:c5:e0:3e:f5:d4:14:cc:44:
51:38:09:69:32:2e:f4:90:96:2c:bc:19:a9:8b:99:
11:ab:58:62:76:32:7d:4d:1d:c6:08:cd:07:73:61:
77:84:dc:a4:ab:76:c8:42:d6:39:79:46:58:b3:00:
45:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:EC:78:9D:8E:61:EF:55:2C:11:51:82:76:A7:1E:EC:49:D5:B5:BC
X509v3 Authority Key Identifier:
keyid:4F:15:29:00:B0:D3:23:D3:6D:94:51:0A:B0:B0:1C:93:F4:51:7C:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxUpALDTI9NtlFEKsLAck_RRfIk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/89ff3b-1263-4cdd-9cad-23df8dddf978/1/yOx4nY5h71UsEVGCdqce7EnVtbw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/89ff3b-1263-4cdd-9cad-23df8dddf978/1/TxUpALDTI9NtlFEKsLAck_RRfIk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.102.32.0/22
Signature Algorithm: sha256WithRSAEncryption
62:93:81:f6:ec:af:23:3f:84:e3:1d:f8:0f:93:7f:ff:85:fa:
b6:c5:db:9d:85:67:bb:93:5a:ba:b2:c3:7e:28:7a:fc:eb:34:
cb:12:cb:2d:f7:bc:1f:bf:7d:6a:4f:8d:a7:d6:5c:50:ae:84:
de:6a:8a:31:54:f6:e2:94:fa:a6:f7:16:b4:5a:de:71:77:f6:
70:b8:74:2c:4c:2f:ea:d7:ec:1e:40:bd:b4:68:22:97:fe:a7:
47:83:22:5d:69:31:d3:20:6f:92:a1:4f:d3:0e:de:0d:65:a1:
d8:cd:15:af:78:ba:6e:6d:0e:ad:4b:3a:0e:bd:1b:36:8f:9b:
d2:2d:9b:37:6e:62:9a:fc:1c:a6:c9:3c:47:a7:70:f8:fc:37:
66:66:17:61:39:dc:b5:1f:70:9c:c0:75:9e:89:af:62:22:a3:
87:d1:99:d3:99:5d:2e:ea:be:22:45:59:e1:b7:c4:d3:29:9a:
98:5d:b6:e7:67:f1:9a:59:27:3a:9f:ed:26:13:cb:24:1a:e6:
30:d2:08:8c:dd:6c:f8:0a:08:3a:f3:e8:ac:34:6a:52:f1:f8:
38:f7:ab:ef:ed:aa:29:1e:70:3a:2e:8d:c8:89:c1:7f:df:fe:
b3:17:42:5d:dc:e9:5c:dd:fe:3b:1c:61:75:43:ef:72:7c:8b:
c1:34:e9:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 10:13:49 2025 by rpki-client