Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/a573fe-6e0e-4bff-99fc-2621d5c99cab/1/yAAQnFaBft6OWSZrHgyImoFZ0XI.roa
File: yAAQnFaBft6OWSZrHgyImoFZ0XI.roa (raw, json)
Hash identifier: raiFBfKHKpQaInb1EwCk0+4eetwDY7ETZmZolX00UsI=
Subject key identifier: C8:00:10:9C:56:81:7E:DE:8E:59:26:6B:1E:0C:88:9A:81:59:D1:72
Certificate issuer: /CN=dbe8cc8f5af1e7362d454f3dd91a82952919db61
Certificate serial: 01899346062A2F9B32EDA38C525E768F8E8B
Authority key identifier: DB:E8:CC:8F:5A:F1:E7:36:2D:45:4F:3D:D9:1A:82:95:29:19:DB:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2-jMj1rx5zYtRU892RqClSkZ22E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/a573fe-6e0e-4bff-99fc-2621d5c99cab/1/yAAQnFaBft6OWSZrHgyImoFZ0XI.roa
Signing time: Wed 26 Jul 2023 17:36:27 +0000
ROA not before: Wed 26 Jul 2023 17:36:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 6079
IP address blocks: 89.46.248.0/22 maxlen: 24
91.245.216.0/23 maxlen: 24
62.122.40.0/21 maxlen: 24
192.64.44.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:93:46:06:2a:2f:9b:32:ed:a3:8c:52:5e:76:8f:8e:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbe8cc8f5af1e7362d454f3dd91a82952919db61
Validity
Not Before: Jul 26 17:36:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c800109c56817ede8e59266b1e0c889a8159d172
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:24:62:92:66:75:b3:b1:6f:98:03:a8:77:9b:
13:d5:33:a9:36:77:88:18:66:85:8a:94:6f:c5:fa:
b7:be:89:b7:27:a4:85:64:01:f9:59:f9:c2:ca:85:
e6:9f:7a:11:6a:c3:8f:0a:39:1c:2c:7b:37:51:9b:
53:8c:0f:55:be:4c:03:06:49:d5:bf:58:b1:19:12:
5d:ef:af:ac:ed:22:1b:11:16:7e:85:57:63:ce:ca:
c0:18:9b:71:01:ca:7d:c3:24:82:8d:1b:46:a0:c9:
c0:04:11:b1:1e:9d:73:b4:dc:29:29:22:c6:37:f7:
ba:85:35:15:78:85:f1:44:3c:e3:4b:23:9a:f1:5f:
99:43:0c:d5:ad:f2:84:05:82:44:65:c1:34:3e:c8:
ba:25:27:da:96:6f:1e:ba:db:eb:0e:42:50:38:13:
dd:83:c3:4e:12:be:b1:7d:e1:b9:7c:da:e9:e9:7e:
2b:2a:d5:40:f2:5e:e3:10:e9:5f:07:e8:7f:9b:3e:
b9:ec:c2:2a:47:6c:8f:4b:27:6d:96:a3:b5:bd:62:
6a:5d:b5:ef:57:6c:ca:ef:d2:2e:6d:f1:c5:ff:9a:
10:54:d2:ec:54:0e:5c:28:88:39:ca:a2:07:71:51:
e5:c3:ee:3e:19:e5:9a:f3:ca:33:b4:f9:00:8f:d9:
1a:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:00:10:9C:56:81:7E:DE:8E:59:26:6B:1E:0C:88:9A:81:59:D1:72
X509v3 Authority Key Identifier:
keyid:DB:E8:CC:8F:5A:F1:E7:36:2D:45:4F:3D:D9:1A:82:95:29:19:DB:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2-jMj1rx5zYtRU892RqClSkZ22E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/a573fe-6e0e-4bff-99fc-2621d5c99cab/1/yAAQnFaBft6OWSZrHgyImoFZ0XI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/a573fe-6e0e-4bff-99fc-2621d5c99cab/1/2-jMj1rx5zYtRU892RqClSkZ22E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.122.40.0/21
89.46.248.0/22
91.245.216.0/23
192.64.44.0/23
Signature Algorithm: sha256WithRSAEncryption
5f:53:01:35:06:02:ac:3a:9f:09:44:7f:16:ea:66:b9:1b:55:
db:14:bc:ad:7d:5c:00:86:04:11:77:1b:28:f9:2d:0d:a6:bb:
0d:ef:dd:e4:4c:00:d3:49:9c:76:bd:3b:25:82:7f:70:41:5b:
98:d2:22:b5:2a:91:ff:fb:63:9e:bf:4f:cb:2b:3a:67:5e:49:
26:2e:39:eb:91:df:0b:02:34:4f:d4:67:e2:10:98:c6:b7:53:
a6:b6:a4:d1:47:04:f6:85:87:43:91:c8:d6:eb:c0:9c:1a:b9:
3c:62:e6:c1:91:46:45:83:9f:2c:25:29:db:cc:2e:93:7c:c7:
1a:cc:c0:ab:3d:0b:5e:9a:70:22:92:6b:4b:48:8b:ba:5c:6c:
16:3e:a7:b6:02:a2:7d:f8:f9:72:e5:a0:91:c9:6b:ce:de:41:
a4:f6:67:2e:84:34:98:5e:ab:8f:fb:e4:72:20:d8:32:31:13:
c4:6f:90:ce:bc:a7:95:9d:ac:93:85:aa:3e:00:71:52:44:35:
08:31:90:9d:2c:50:8d:9e:88:e2:c3:51:61:f2:e6:48:c3:27:
2e:de:27:8f:f9:66:92:75:be:5c:2e:45:45:31:d3:7d:6c:2f:
0b:c4:cb:7e:7c:4c:29:19:dc:7e:91:ac:c7:06:36:55:aa:01:
42:99:7c:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 12 06:57:23 2025 by rpki-client