Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/26a34e-2094-4e76-a1ea-1dedbe7b5baf/1/Yo5_g761AqMc8XisZHS4ii2CpXc.roa
File: Yo5_g761AqMc8XisZHS4ii2CpXc.roa (raw, json)
Hash identifier: DngwG1NeWjuMPwa/tNISYUWnyWIOXlq83VTSIAWWa1I=
Subject key identifier: 62:8E:7F:83:BE:B5:02:A3:1C:F1:78:AC:64:74:B8:8A:2D:82:A5:77
Certificate issuer: /CN=77bdd75f2efc244f86a321b150e62936a14029db
Certificate serial: 018572FA62616F01D9DEBA9C007285C5FC01
Authority key identifier: 77:BD:D7:5F:2E:FC:24:4F:86:A3:21:B1:50:E6:29:36:A1:40:29:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d73XXy78JE-GoyGxUOYpNqFAKds.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/26a34e-2094-4e76-a1ea-1dedbe7b5baf/1/Yo5_g761AqMc8XisZHS4ii2CpXc.roa
Signing time: Mon 02 Jan 2023 14:54:49 +0000
ROA not before: Mon 02 Jan 2023 14:54:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 16509
IP address blocks: 195.234.155.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:fa:62:61:6f:01:d9:de:ba:9c:00:72:85:c5:fc:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77bdd75f2efc244f86a321b150e62936a14029db
Validity
Not Before: Jan 2 14:54:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=628e7f83beb502a31cf178ac6474b88a2d82a577
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:02:2c:dc:2b:13:da:96:bd:7b:d1:3c:84:e6:
91:33:07:0b:9c:60:b8:d7:62:be:6e:4c:1a:23:1c:
73:74:ce:9a:d7:12:04:d9:4a:4d:fc:05:e8:a0:d0:
5b:1e:f1:98:bb:64:c8:5e:a4:77:d1:bc:54:c0:2f:
7a:56:ba:fd:66:ec:c9:fc:53:11:c3:79:b3:61:2d:
56:f8:70:a1:a1:94:a2:cf:78:b7:b0:cf:bc:0e:8a:
51:43:45:70:03:87:56:1c:53:4c:24:f2:91:00:92:
6e:e1:a9:9e:04:1c:f4:59:7d:bd:5c:51:b0:77:d4:
d5:9e:7e:4e:91:5b:a9:e8:d8:31:81:28:1b:6c:44:
62:6a:94:14:c3:2d:6a:17:b8:25:92:ef:c6:a4:52:
93:32:10:13:56:4e:47:0b:9a:d9:92:d3:68:a2:05:
15:8a:d7:49:73:62:50:13:12:40:00:78:ea:18:75:
09:7d:6a:9c:f3:20:7b:ca:31:fc:fa:16:6e:18:7b:
d2:0f:e4:47:fe:ca:9f:66:b3:e9:f0:d5:04:e5:e0:
bb:9a:39:df:41:65:8e:db:f9:8f:80:eb:d2:e1:48:
b5:7e:ef:d4:bc:c5:7f:54:a0:05:3a:5a:f4:cc:2e:
40:64:ab:d8:2a:3f:4f:a1:aa:36:35:e4:da:2a:8a:
33:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:8E:7F:83:BE:B5:02:A3:1C:F1:78:AC:64:74:B8:8A:2D:82:A5:77
X509v3 Authority Key Identifier:
keyid:77:BD:D7:5F:2E:FC:24:4F:86:A3:21:B1:50:E6:29:36:A1:40:29:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d73XXy78JE-GoyGxUOYpNqFAKds.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/26a34e-2094-4e76-a1ea-1dedbe7b5baf/1/Yo5_g761AqMc8XisZHS4ii2CpXc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/26a34e-2094-4e76-a1ea-1dedbe7b5baf/1/d73XXy78JE-GoyGxUOYpNqFAKds.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.234.155.0/24
Signature Algorithm: sha256WithRSAEncryption
57:da:b8:43:87:bb:ab:06:2c:fd:80:14:ca:b1:5b:90:19:ca:
cf:7c:22:db:38:f9:a3:6c:43:fc:45:67:67:5e:91:9b:9d:27:
23:21:ec:32:b0:4b:ee:ee:65:1a:18:63:d4:3b:50:07:d4:ee:
54:b2:cb:52:2a:a9:d2:e8:23:73:1e:8c:94:e7:67:59:c8:84:
70:4c:36:57:24:78:09:66:89:71:34:6a:26:c6:70:8e:8a:1f:
77:07:ac:72:b0:de:6c:2e:d5:98:26:3b:fa:36:78:1b:e0:c0:
70:4b:0d:92:3d:89:37:83:b1:77:0b:ba:43:3c:fe:0b:bd:ac:
a8:de:07:80:c0:54:3e:8d:a0:f5:b1:dc:7a:94:00:14:77:18:
51:09:80:39:b9:f0:de:78:d8:c0:e3:55:8a:80:a3:10:ae:a6:
1f:a7:83:6c:0b:97:ce:03:cd:ba:35:c8:5e:e3:96:9c:15:ec:
d1:7d:07:15:a4:1f:bc:5a:b7:59:5d:8c:49:8f:44:06:57:f3:
f9:9a:6d:7c:1d:82:0a:27:09:84:1b:6e:fe:3e:f5:c0:17:94:
f3:21:cd:72:51:51:26:a7:77:ad:45:bd:6e:eb:87:4e:ca:f8:
d7:c6:4a:44:6d:28:9d:87:93:8e:7e:b4:00:38:13:3d:36:c7:
c8:5e:b3:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:26:38 2025 by rpki-client