Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/d00889-e5ca-4090-a6a4-2ac6ff75beb0/1/ydZkgwYcvYbM7mbYd53RAsEkq3U.roa
File: ydZkgwYcvYbM7mbYd53RAsEkq3U.roa (raw, json)
Hash identifier: qwmH6QR7NKSIBlvN+e3NJdnmXczvm/lNUAul9UFFgLI=
Subject key identifier: C9:D6:64:83:06:1C:BD:86:CC:EE:66:D8:77:9D:D1:02:C1:24:AB:75
Certificate issuer: /CN=a76dd9dad75877f7d28d14e08dc55b1330bd13b7
Certificate serial: 0194AC2EA8FC3822A59FAB233BA4E90184F2
Authority key identifier: A7:6D:D9:DA:D7:58:77:F7:D2:8D:14:E0:8D:C5:5B:13:30:BD:13:B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p23Z2tdYd_fSjRTgjcVbEzC9E7c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/d00889-e5ca-4090-a6a4-2ac6ff75beb0/1/ydZkgwYcvYbM7mbYd53RAsEkq3U.roa
Signing time: Tue 28 Jan 2025 09:12:06 +0000
ROA not before: Tue 28 Jan 2025 09:12:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212219
IP address blocks: 46.31.77.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ac:2e:a8:fc:38:22:a5:9f:ab:23:3b:a4:e9:01:84:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a76dd9dad75877f7d28d14e08dc55b1330bd13b7
Validity
Not Before: Jan 28 09:12:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c9d66483061cbd86ccee66d8779dd102c124ab75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:59:50:b3:3a:93:1b:ad:98:e1:ae:25:97:d7:
09:39:9d:71:ca:34:19:a0:92:e1:0e:c5:e8:cb:21:
cf:74:59:fb:ee:5e:99:b0:5f:a3:47:7e:35:37:85:
38:f2:b7:1b:9e:b9:b6:19:49:4f:af:32:d6:d5:35:
36:8b:96:74:34:14:83:a8:81:ae:4c:61:1a:f8:d4:
e7:f3:78:e8:97:f1:c0:1d:63:35:aa:25:a0:d5:2b:
fa:5a:18:c8:ce:7d:3b:5c:17:31:d2:13:89:a3:de:
c9:be:8f:ca:8b:72:e1:e0:5d:26:32:d2:6f:79:d7:
22:e8:92:d1:25:ff:1f:4d:e8:d2:0d:97:c8:0e:7f:
f8:52:3c:11:5e:22:45:e8:62:e4:3f:ef:b4:7b:b9:
69:7a:92:7c:29:35:4e:70:cc:07:fe:07:6f:07:a4:
e4:65:64:7d:d1:df:1a:4e:68:07:d9:ef:fc:87:bd:
4c:77:be:31:d2:a9:59:8d:58:0c:51:1d:5d:1d:6c:
a2:90:b7:fa:6a:1b:44:0d:7c:0a:ff:35:7d:92:8c:
72:1f:41:df:a2:a0:ee:ee:b4:71:3e:57:81:4e:be:
27:2b:bb:68:01:3e:40:d5:a7:30:87:62:f3:85:55:
48:12:3a:47:79:a0:7f:fb:ff:0e:04:03:3a:57:84:
0a:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:D6:64:83:06:1C:BD:86:CC:EE:66:D8:77:9D:D1:02:C1:24:AB:75
X509v3 Authority Key Identifier:
keyid:A7:6D:D9:DA:D7:58:77:F7:D2:8D:14:E0:8D:C5:5B:13:30:BD:13:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p23Z2tdYd_fSjRTgjcVbEzC9E7c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/d00889-e5ca-4090-a6a4-2ac6ff75beb0/1/ydZkgwYcvYbM7mbYd53RAsEkq3U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/d00889-e5ca-4090-a6a4-2ac6ff75beb0/1/p23Z2tdYd_fSjRTgjcVbEzC9E7c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.31.77.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:d5:cc:78:c9:c0:77:3b:11:f0:38:2d:7f:2d:05:11:8f:b6:
a3:96:6b:b0:3e:54:e4:44:6d:09:3c:77:b0:9d:46:7f:61:c8:
b5:3b:34:db:56:8b:e8:9f:86:0b:46:d8:cb:43:a3:60:7b:a5:
c2:4b:16:6d:b3:d2:92:ee:1f:8a:c3:8d:5e:4c:d5:96:cd:05:
ab:08:41:8d:2b:4e:ee:f0:d7:ca:36:6f:cb:f7:de:78:68:40:
e2:be:82:58:f4:d5:8e:2f:e5:df:28:5c:32:a6:b3:12:27:95:
bc:dd:38:1f:b3:ac:77:8c:d0:d2:f7:f4:49:f9:8d:2d:cd:f7:
9a:cb:1c:4a:99:8e:ac:b1:32:af:23:ec:4e:a1:1b:f8:19:44:
bb:4f:26:c7:30:34:13:1a:76:a4:93:56:3d:d9:92:73:b4:17:
96:23:82:9c:45:5f:77:c4:40:9a:e7:4c:a1:2c:67:a2:87:2a:
d7:a8:c0:ac:ad:0d:01:ce:24:67:3b:1a:c4:2e:c4:10:f1:90:
72:8f:c0:fa:9a:0b:e3:d5:29:73:a0:df:a6:8b:33:f7:e9:65:
7d:4d:b4:a2:ce:b4:46:32:42:8e:14:82:b3:aa:86:97:e9:95:
aa:ec:15:df:f6:35:07:d5:18:65:db:fd:02:ba:29:5f:25:e6:
11:45:11:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 05:38:33 2025 by rpki-client