Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/411c4b-156a-4cc0-a34e-ec19cd38f245/1/YwAGbtTQZXfe8blVDxMDsYm8UNY.roa
File: YwAGbtTQZXfe8blVDxMDsYm8UNY.roa (raw, json)
Hash identifier: A+07MBH15e8To3URRuyPmW0pFMg83UuaLyIprSu/vsM=
Subject key identifier: 63:00:06:6E:D4:D0:65:77:DE:F1:B9:55:0F:13:03:B1:89:BC:50:D6
Certificate issuer: /CN=890c4983ee18bc5e025faafde31c64134a4620ac
Certificate serial: 019423D7D25D958C929BD6D6A810975036D6
Authority key identifier: 89:0C:49:83:EE:18:BC:5E:02:5F:AA:FD:E3:1C:64:13:4A:46:20:AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iQxJg-4YvF4CX6r94xxkE0pGIKw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/411c4b-156a-4cc0-a34e-ec19cd38f245/1/YwAGbtTQZXfe8blVDxMDsYm8UNY.roa
Signing time: Wed 01 Jan 2025 21:48:54 +0000
ROA not before: Wed 01 Jan 2025 21:48:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 56634
IP address blocks: 192.162.212.0/22 maxlen: 22
192.162.212.0/24 maxlen: 24
192.162.213.0/24 maxlen: 24
192.162.214.0/24 maxlen: 24
192.162.215.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:d2:5d:95:8c:92:9b:d6:d6:a8:10:97:50:36:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=890c4983ee18bc5e025faafde31c64134a4620ac
Validity
Not Before: Jan 1 21:48:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6300066ed4d06577def1b9550f1303b189bc50d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:05:f2:ce:36:28:9f:0e:41:25:7a:a9:2a:e6:
ed:5d:74:88:87:5a:ae:27:ef:fa:fb:25:4d:c7:c3:
fe:da:39:84:0d:74:5c:ea:d6:97:81:f8:27:a2:6e:
2a:69:f8:4c:e9:bf:d1:ec:63:0e:5c:c4:bf:05:5f:
bb:d6:0b:82:30:8d:eb:25:da:4c:81:d5:cc:35:41:
be:b4:6b:b6:18:75:de:e1:c5:47:d4:7f:51:1e:e0:
e8:59:f4:25:07:1a:06:8a:49:09:54:6b:a8:bb:a3:
f8:b1:0b:08:b9:ea:21:ab:7e:46:34:e6:eb:c7:58:
b5:eb:9e:fc:34:a4:5a:6f:0c:d8:c8:0c:21:30:d5:
03:60:81:53:7e:e8:ac:cd:26:e4:a8:e6:d4:da:be:
c3:3d:60:12:3a:6e:84:e0:a6:3f:bd:9a:79:72:d1:
e2:83:ac:a8:a8:6a:e0:59:31:c9:87:7b:42:6e:f9:
63:2a:aa:31:e0:42:c3:8b:2c:ac:d2:b6:f0:d2:28:
6a:6e:b1:78:b7:bc:a1:a4:05:62:54:12:aa:59:4d:
a4:2f:5d:2e:e4:91:79:12:91:c0:c2:9e:6f:7b:57:
b2:97:5b:47:ce:a8:ec:15:9b:7c:70:ce:a2:14:de:
ae:cd:b3:17:2b:f0:30:34:8f:5b:0e:ea:1e:58:dd:
fd:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:00:06:6E:D4:D0:65:77:DE:F1:B9:55:0F:13:03:B1:89:BC:50:D6
X509v3 Authority Key Identifier:
keyid:89:0C:49:83:EE:18:BC:5E:02:5F:AA:FD:E3:1C:64:13:4A:46:20:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iQxJg-4YvF4CX6r94xxkE0pGIKw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/411c4b-156a-4cc0-a34e-ec19cd38f245/1/YwAGbtTQZXfe8blVDxMDsYm8UNY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/411c4b-156a-4cc0-a34e-ec19cd38f245/1/iQxJg-4YvF4CX6r94xxkE0pGIKw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.162.212.0/22
Signature Algorithm: sha256WithRSAEncryption
46:8e:c9:58:c1:6b:6d:96:67:12:d1:b5:44:e6:20:5d:7a:0f:
d2:a7:c6:fc:d9:4d:88:3e:fe:fd:67:ad:1e:b1:62:de:94:81:
a6:6f:b4:28:e3:f7:8e:dc:bb:2e:f2:da:5c:c8:ed:b4:31:6d:
91:c8:df:63:cd:2b:d2:10:d3:d9:47:98:48:05:6e:4c:b9:31:
91:1e:8b:b1:7d:04:f4:26:0a:ab:76:b6:96:d2:3a:a1:52:88:
ad:48:db:b4:00:0d:2c:83:fa:a0:d2:5c:13:b4:32:ed:f6:18:
9b:32:63:03:a3:e8:fa:cb:22:d7:c7:55:55:47:b8:da:95:d3:
c7:a0:b4:05:9e:27:f6:31:20:32:74:0d:f3:e3:2d:47:a9:cd:
03:4b:1e:17:05:87:43:6e:3e:0e:00:2d:58:41:f6:96:f9:16:
c4:04:1c:eb:5a:e8:5e:89:c8:c1:f8:48:bb:be:2e:2e:16:35:
2a:a7:68:c5:52:8d:cf:66:b8:6f:81:2e:99:c6:fb:ad:21:e3:
b8:5c:80:67:90:07:84:49:84:d3:c0:ae:3a:d0:51:7c:72:b4:
6e:93:af:5e:25:73:80:cd:d1:95:81:86:80:77:1d:2e:0a:c1:
4b:0c:9c:e9:a0:12:a8:7b:25:f4:78:e2:35:95:53:55:ed:60:
11:97:86:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 06:12:38 2025 by rpki-client