Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/d76bf8-541f-4efc-98c5-c4dcc7f6b7df/1/yQOUiV_ouMfjFYLIfQKl87lFtw8.roa
File: yQOUiV_ouMfjFYLIfQKl87lFtw8.roa (raw, json)
Hash identifier: 7srmAwSkyCXgtko/kNwVJkZrJey5R4xX5MLBJsHDcMs=
Subject key identifier: C9:03:94:89:5F:E8:B8:C7:E3:15:82:C8:7D:02:A5:F3:B9:45:B7:0F
Certificate issuer: /CN=bfe3971a32c0692c4e342e911790662470cf31b2
Certificate serial: 0194266AC4D971519535C734C4D74E59D7AD
Authority key identifier: BF:E3:97:1A:32:C0:69:2C:4E:34:2E:91:17:90:66:24:70:CF:31:B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v-OXGjLAaSxONC6RF5BmJHDPMbI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/d76bf8-541f-4efc-98c5-c4dcc7f6b7df/1/yQOUiV_ouMfjFYLIfQKl87lFtw8.roa
Signing time: Thu 02 Jan 2025 09:48:38 +0000
ROA not before: Thu 02 Jan 2025 09:48:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213794
IP address blocks: 5.181.189.0/24 maxlen: 24
193.34.215.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6a:c4:d9:71:51:95:35:c7:34:c4:d7:4e:59:d7:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bfe3971a32c0692c4e342e911790662470cf31b2
Validity
Not Before: Jan 2 09:48:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c90394895fe8b8c7e31582c87d02a5f3b945b70f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:aa:6e:97:25:61:4f:7f:b1:1e:d6:2b:b7:70:
8c:59:8e:da:25:34:d4:ab:ef:f7:3c:44:bb:9c:53:
6b:00:01:20:de:d6:22:79:4e:0a:82:c1:cb:ec:e0:
80:dc:64:29:92:ec:e3:c3:de:71:52:c5:b9:ed:6d:
a8:bd:40:90:a2:c4:34:09:df:fc:7b:8c:b5:19:68:
6e:a9:ae:e4:75:b3:8c:97:46:64:83:23:9f:c9:94:
41:4b:bc:e6:93:90:0e:08:d2:d3:8c:9c:56:3e:a1:
a2:5c:7f:6a:65:84:f6:f6:bb:2f:0f:ef:e1:c1:58:
21:f2:14:91:c2:81:ae:33:b3:69:22:6d:22:53:49:
09:41:b3:4b:f1:7f:40:cc:1f:72:a9:63:4f:7d:0d:
ce:06:90:94:fd:ff:e7:e7:0a:08:d9:8d:8e:21:e9:
0c:bc:6b:b3:ae:fe:78:46:dd:b5:e3:02:32:52:d0:
8f:78:c7:83:43:4f:66:82:a3:44:93:a6:ab:f1:db:
4d:1b:cc:58:c4:03:22:30:7f:dc:26:d7:f0:bc:54:
f3:1e:3a:0f:11:48:92:c8:9c:62:2f:25:cb:b0:27:
3c:4d:ca:12:06:8d:24:48:97:08:01:2b:cd:d1:68:
71:68:cb:76:f6:92:ee:92:ee:03:c5:7f:10:f3:94:
32:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:03:94:89:5F:E8:B8:C7:E3:15:82:C8:7D:02:A5:F3:B9:45:B7:0F
X509v3 Authority Key Identifier:
keyid:BF:E3:97:1A:32:C0:69:2C:4E:34:2E:91:17:90:66:24:70:CF:31:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v-OXGjLAaSxONC6RF5BmJHDPMbI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/d76bf8-541f-4efc-98c5-c4dcc7f6b7df/1/yQOUiV_ouMfjFYLIfQKl87lFtw8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/d76bf8-541f-4efc-98c5-c4dcc7f6b7df/1/v-OXGjLAaSxONC6RF5BmJHDPMbI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.181.189.0/24
193.34.215.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:cc:d0:b8:e8:e5:f0:0a:f5:67:78:22:72:c0:b2:29:f3:90:
2f:19:5d:29:f9:da:01:4a:20:ba:ed:14:b9:62:40:df:f0:b0:
01:3b:98:bf:eb:7b:fb:e3:02:3b:b3:7b:cc:dd:8c:27:a3:ea:
75:39:04:31:56:df:61:36:79:1b:50:73:22:b7:a9:b7:33:09:
7d:5c:06:4c:0d:6e:14:10:8d:f2:fb:39:16:88:39:2a:a7:b9:
70:78:a8:df:a3:24:22:d2:d2:8f:33:5a:0c:73:0f:da:14:7e:
df:49:57:66:e9:39:9e:80:d9:e9:b3:4d:58:7c:1b:96:db:b0:
5c:de:b4:26:c0:91:9e:14:79:53:27:2b:7e:07:fa:f5:8b:24:
22:ec:65:2d:3f:d0:e5:1a:9d:2a:85:13:44:45:17:8a:77:20:
e7:25:51:a9:ae:c5:07:1e:5f:cc:55:5a:b8:2f:05:0c:b5:90:
29:97:9a:ee:8f:36:7e:28:e8:22:35:07:18:38:66:1f:f0:29:
47:00:c1:fa:62:de:f3:33:da:62:cf:1d:ee:a7:ce:31:f5:93:
cd:7d:71:84:d0:35:47:98:c8:c2:6f:2f:7e:e8:3e:f7:9e:c0:
37:ce:ed:cb:8b:f3:5c:19:a4:81:4e:05:5f:bc:6f:e6:98:17:
df:ff:76:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 19:00:15 2025 by rpki-client