Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/c60ece-561b-4d19-8abf-c1ffa7e5b04a/1/_Yyw9YT61lMkZ0K2P5qxDS5GT_Y.roa
File: _Yyw9YT61lMkZ0K2P5qxDS5GT_Y.roa (raw, json)
Hash identifier: wFP/O+jHh+fwC+LnlOZsA5kZ5gijLEp2P9aLmCfosX4=
Subject key identifier: FD:8C:B0:F5:84:FA:D6:53:24:67:42:B6:3F:9A:B1:0D:2E:46:4F:F6
Certificate issuer: /CN=e9cb1687488cf43a7334f9efa4d9cdf635724e9c
Certificate serial: 0187AEFF05B527CEA7751DE511B5245ADF6F
Authority key identifier: E9:CB:16:87:48:8C:F4:3A:73:34:F9:EF:A4:D9:CD:F6:35:72:4E:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6csWh0iM9DpzNPnvpNnN9jVyTpw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/c60ece-561b-4d19-8abf-c1ffa7e5b04a/1/_Yyw9YT61lMkZ0K2P5qxDS5GT_Y.roa
Signing time: Sun 23 Apr 2023 16:42:41 +0000
ROA not before: Sun 23 Apr 2023 16:42:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 35913
IP address blocks: 194.126.215.0/24 maxlen: 24
194.126.219.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:ae:ff:05:b5:27:ce:a7:75:1d:e5:11:b5:24:5a:df:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e9cb1687488cf43a7334f9efa4d9cdf635724e9c
Validity
Not Before: Apr 23 16:42:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fd8cb0f584fad653246742b63f9ab10d2e464ff6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:26:6a:af:c4:ce:c4:89:1a:2f:18:d4:e1:78:
68:7a:7f:01:ed:4f:03:64:87:0c:cf:7a:ae:fa:1f:
c9:44:52:12:2a:3a:34:c9:b4:b2:e8:7b:4a:c3:be:
08:b0:43:4b:b6:a5:a2:fa:13:7d:a7:35:99:1d:3d:
41:7e:17:b7:b0:ac:f9:7e:4b:8c:d7:11:cd:51:0f:
8e:e2:53:22:e4:ff:39:9f:c3:b4:88:9e:1f:df:83:
13:21:d5:2e:30:48:5b:95:73:27:1d:74:86:59:6f:
16:75:2b:04:e6:1b:72:24:f4:67:56:b6:e7:7e:0f:
82:5d:0d:bd:1d:53:80:4a:ab:7a:82:d0:46:50:d8:
69:b4:0a:cc:1c:79:87:63:91:c1:35:04:c1:97:3f:
32:64:f2:bf:3e:60:85:e1:37:2b:39:a4:ae:0b:aa:
a6:19:0f:fd:06:d0:97:72:db:20:c9:5a:75:b1:1b:
e7:2f:2d:1f:11:88:19:95:9b:89:17:e4:0c:fd:b7:
a8:36:35:9c:ac:c8:08:fc:37:d2:ed:d5:f3:1f:1b:
56:d5:a7:39:fe:19:7c:ba:bb:a5:02:f1:54:85:93:
48:32:06:8f:71:9c:aa:82:a8:4e:cf:ff:81:96:37:
66:9f:5a:5f:aa:fd:2a:99:12:74:aa:ca:57:d9:cf:
72:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:8C:B0:F5:84:FA:D6:53:24:67:42:B6:3F:9A:B1:0D:2E:46:4F:F6
X509v3 Authority Key Identifier:
keyid:E9:CB:16:87:48:8C:F4:3A:73:34:F9:EF:A4:D9:CD:F6:35:72:4E:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6csWh0iM9DpzNPnvpNnN9jVyTpw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/c60ece-561b-4d19-8abf-c1ffa7e5b04a/1/_Yyw9YT61lMkZ0K2P5qxDS5GT_Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/c60ece-561b-4d19-8abf-c1ffa7e5b04a/1/6csWh0iM9DpzNPnvpNnN9jVyTpw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.126.215.0/24
194.126.219.0/24
Signature Algorithm: sha256WithRSAEncryption
28:c3:ae:ac:a0:64:66:04:c7:96:91:b2:a6:b8:cb:ce:4a:fd:
8d:23:d4:23:8b:3a:f2:fd:6f:f1:75:0a:02:1d:2c:13:af:0f:
0b:4c:4a:1b:09:3c:ee:d6:5b:1d:4c:89:1d:e4:09:8f:70:dd:
6d:7c:f5:15:a4:97:e2:08:25:ff:9c:7a:4c:d1:8b:60:c4:d6:
27:a2:ec:84:73:f5:2e:10:b3:3a:4b:6c:b0:7d:1a:cc:67:04:
3f:3e:8e:bd:c3:5b:4d:ee:ee:43:70:f7:93:e7:6f:57:2b:c4:
92:bc:b4:31:97:ed:b1:de:84:c9:3a:c0:72:c1:25:83:44:72:
93:f0:23:59:8c:a3:8e:a7:77:08:2f:00:cb:ca:2e:66:3b:da:
b6:28:db:b9:bf:20:44:ab:eb:19:ae:4c:0a:2b:74:07:80:39:
71:05:57:3b:53:b6:00:cb:2c:b9:ce:49:f0:7d:0e:6c:90:fe:
43:e1:a8:8a:96:87:56:e4:7e:33:e1:69:33:a1:b4:ce:ed:20:
cc:3a:c3:8a:48:74:80:cb:19:30:27:68:c6:b5:6a:40:2a:cf:
c7:f7:84:db:70:9a:18:59:a2:17:93:ff:0c:af:3f:2d:00:17:
e3:3b:12:b3:42:dc:f7:e6:0e:56:74:88:3e:b6:58:24:e7:7a:
18:34:1a:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 12 12:52:16 2025 by rpki-client