Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/yAZag9oMcpotNbW95r4i0DWUNlw.roa
File: yAZag9oMcpotNbW95r4i0DWUNlw.roa (raw, json)
Hash identifier: odIiM0uaNRWGdTfVD8PHA01ilNibg2j6v2oJ6cN3BEw=
Subject key identifier: C8:06:5A:83:DA:0C:72:9A:2D:35:B5:BD:E6:BE:22:D0:35:94:36:5C
Certificate issuer: /CN=56b98f83ccbda7c19f004151c98b57c59d268f54
Certificate serial: 01942445A1897A56999D3191013D38C58DB3
Authority key identifier: 56:B9:8F:83:CC:BD:A7:C1:9F:00:41:51:C9:8B:57:C5:9D:26:8F:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/yAZag9oMcpotNbW95r4i0DWUNlw.roa
Signing time: Wed 01 Jan 2025 23:48:50 +0000
ROA not before: Wed 01 Jan 2025 23:48:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9009
IP address blocks: 62.68.80.0/24 maxlen: 24
178.211.159.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:45:a1:89:7a:56:99:9d:31:91:01:3d:38:c5:8d:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=56b98f83ccbda7c19f004151c98b57c59d268f54
Validity
Not Before: Jan 1 23:48:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c8065a83da0c729a2d35b5bde6be22d03594365c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:f1:52:a4:25:71:95:c4:a3:c8:b0:d6:10:ec:
6e:ea:3f:5f:49:28:2b:2f:4c:13:b5:fb:cb:87:13:
d3:a4:f4:d7:33:4e:00:06:de:f7:33:ca:6a:ad:b0:
74:4d:97:b7:0b:2d:91:5a:30:a3:44:95:12:e8:0f:
e0:e7:4e:ee:11:fb:c6:6f:45:72:67:f7:99:82:f3:
a3:ab:41:76:a7:8f:85:a5:16:ea:8f:ea:fc:c2:09:
87:d2:6f:f8:bf:04:05:b9:5f:87:eb:a3:de:bc:1c:
47:d3:20:88:76:df:5c:ec:04:d3:9b:95:29:51:f9:
26:47:a0:fa:a5:c3:e3:54:ff:81:85:68:67:6d:27:
8d:23:09:4b:5e:13:06:8b:37:fd:69:a1:83:b0:9c:
2a:10:72:e2:4b:9e:a8:f9:06:31:60:87:f5:cd:fd:
27:0e:33:48:10:9f:50:6f:52:2d:0c:81:0e:79:b5:
1a:84:90:c0:6e:e2:e4:97:e3:da:19:1c:3b:b2:87:
21:b5:a7:45:47:47:bd:51:f6:8d:1a:fb:93:77:11:
e5:7f:0e:8b:3d:cc:e5:f1:15:72:a2:b4:2d:53:f0:
a6:d8:91:d9:02:95:45:0a:a9:d6:b7:5e:71:bc:5a:
29:89:b7:89:f3:27:98:4b:36:ce:b5:aa:93:1c:0b:
7d:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:06:5A:83:DA:0C:72:9A:2D:35:B5:BD:E6:BE:22:D0:35:94:36:5C
X509v3 Authority Key Identifier:
keyid:56:B9:8F:83:CC:BD:A7:C1:9F:00:41:51:C9:8B:57:C5:9D:26:8F:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/yAZag9oMcpotNbW95r4i0DWUNlw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.68.80.0/24
178.211.159.0/24
Signature Algorithm: sha256WithRSAEncryption
75:4e:a7:a8:30:37:4f:3f:6a:4d:98:f6:39:da:56:0c:e6:47:
79:50:2b:c4:83:e1:ae:8b:7c:91:57:9c:be:ec:91:72:70:6b:
a4:ba:b1:0a:72:01:1b:a6:4a:e2:e5:88:03:a2:6f:8b:e8:1a:
78:05:4b:9a:a3:9c:8e:d5:01:8f:a0:85:bf:3c:e8:e6:2e:ab:
ab:d3:a4:88:b4:08:03:13:dd:08:af:d4:35:f8:26:2b:09:ee:
41:39:10:90:e9:5b:2a:fe:7c:01:9f:7f:e7:66:c2:74:35:99:
a7:43:6d:a2:1a:9c:48:0e:dc:d2:e2:fb:5e:1b:d7:ca:fc:68:
da:66:f1:38:00:d0:34:34:33:38:68:1a:0a:2f:15:5d:12:72:
32:3b:58:b5:1c:fa:0c:fe:ac:41:41:dd:40:63:af:51:58:7b:
cc:89:7e:98:01:d9:ed:a8:61:96:f1:83:18:62:37:9c:a6:82:
5b:1c:de:e6:a2:b5:35:44:d6:0e:b5:5c:59:94:11:a9:c9:45:
6a:b9:f8:09:52:d6:9d:b3:c9:ef:5c:ca:ae:27:80:21:44:74:
46:3a:f1:aa:78:70:76:34:83:d1:37:92:6d:15:ed:52:4e:a8:
e9:7c:02:88:47:eb:dd:a0:bb:05:80:f4:30:24:26:dd:a6:f5:
07:53:8b:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 13:33:30 2025 by rpki-client