Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/e13b1c-7553-42cf-b8c5-ca10a488c715/1/ys17eRZKf5P4ptEUO7CgY8DVnRY.roa
File: ys17eRZKf5P4ptEUO7CgY8DVnRY.roa (raw, json)
Hash identifier: CelwNs3p1o5270NUJj8ZM/1/+n0plK08szDLjDEXAmU=
Subject key identifier: CA:CD:7B:79:16:4A:7F:93:F8:A6:D1:14:3B:B0:A0:63:C0:D5:9D:16
Certificate issuer: /CN=8f9be82475d25808e214e9a5ca2791347c11dab6
Certificate serial: 019420D5B638DF29468181D76D4003FFB7B8
Authority key identifier: 8F:9B:E8:24:75:D2:58:08:E2:14:E9:A5:CA:27:91:34:7C:11:DA:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j5voJHXSWAjiFOmlyieRNHwR2rY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/e13b1c-7553-42cf-b8c5-ca10a488c715/1/ys17eRZKf5P4ptEUO7CgY8DVnRY.roa
Signing time: Wed 01 Jan 2025 07:47:44 +0000
ROA not before: Wed 01 Jan 2025 07:47:44 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 198794
IP address blocks: 91.239.100.0/24 maxlen: 24
2001:67c:28a4::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d5:b6:38:df:29:46:81:81:d7:6d:40:03:ff:b7:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f9be82475d25808e214e9a5ca2791347c11dab6
Validity
Not Before: Jan 1 07:47:44 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cacd7b79164a7f93f8a6d1143bb0a063c0d59d16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:68:ab:66:4e:24:dc:3b:3e:ac:ab:a5:ed:a6:
8b:05:d8:d8:39:fd:a4:0b:dc:c1:65:c6:ad:65:9d:
7f:ba:bc:58:fd:ba:08:53:dc:cd:85:17:65:04:da:
03:bb:85:98:9c:32:71:14:d2:02:86:c3:2d:2b:62:
ee:31:45:56:82:65:d3:c7:0f:94:4c:2a:e7:40:a5:
f3:98:76:f9:4e:2f:de:ef:0b:ac:e8:d7:40:ae:a0:
02:47:c5:c8:62:a0:22:b5:a3:e6:57:0d:ca:08:75:
54:d6:20:71:8b:cb:0e:ba:92:86:2f:bf:85:3c:d8:
bf:4f:90:a0:21:e2:6e:28:ca:17:b8:9b:26:37:f1:
a1:3a:ca:d3:b6:15:40:78:9b:c9:55:f6:f3:a6:1e:
3b:fe:4c:c5:fc:d1:33:94:35:cd:bc:b6:33:5e:fc:
5e:45:c6:3f:02:fd:0c:91:c0:c4:aa:02:03:75:16:
0f:72:4a:bb:fa:5e:ff:de:0a:59:96:4c:02:3f:09:
a4:0b:2b:80:26:66:c5:1a:c2:26:0b:15:b7:5b:87:
40:2e:b9:74:49:18:8a:9a:5a:7a:25:1f:0d:8d:30:
50:b2:bb:f1:63:0c:4b:64:08:49:30:ac:0f:68:04:
64:60:5f:f7:91:b1:68:49:ed:91:4d:12:0f:bf:14:
49:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:CD:7B:79:16:4A:7F:93:F8:A6:D1:14:3B:B0:A0:63:C0:D5:9D:16
X509v3 Authority Key Identifier:
keyid:8F:9B:E8:24:75:D2:58:08:E2:14:E9:A5:CA:27:91:34:7C:11:DA:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j5voJHXSWAjiFOmlyieRNHwR2rY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/e13b1c-7553-42cf-b8c5-ca10a488c715/1/ys17eRZKf5P4ptEUO7CgY8DVnRY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/e13b1c-7553-42cf-b8c5-ca10a488c715/1/j5voJHXSWAjiFOmlyieRNHwR2rY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.239.100.0/24
IPv6:
2001:67c:28a4::/48
Signature Algorithm: sha256WithRSAEncryption
2d:87:3b:04:a8:4d:85:ec:48:31:db:ce:ca:d8:9e:9f:a2:03:
57:c2:c6:52:a5:40:e9:2e:7a:bb:6f:a2:56:fc:fa:9d:73:6d:
58:76:6d:e5:48:77:17:53:10:f6:c7:be:2d:6b:2e:8e:a0:b7:
54:b4:43:83:43:f0:8e:a6:76:62:58:1b:56:b1:a3:39:f8:2e:
23:8e:fa:f3:92:d0:af:4d:f8:a8:52:6e:55:05:0a:b0:29:31:
16:eb:6a:1a:78:9b:9f:fe:ed:a8:3d:9d:6f:92:6f:82:9c:87:
f5:f3:93:85:be:f6:c4:73:0d:22:1e:1d:15:e6:79:76:d6:be:
d1:ef:6d:0d:8d:18:32:1b:3c:07:22:99:4c:54:47:f7:67:72:
2f:cc:d2:9c:09:a1:2a:bb:b0:75:45:45:ae:97:32:cf:e2:4b:
e9:04:a3:a2:12:45:05:3b:01:d1:da:53:fc:2f:11:38:45:c8:
5d:dd:82:0c:d1:fe:75:61:21:a3:8f:dc:81:af:a9:2e:d5:9a:
be:79:1b:67:e7:a9:ed:10:87:db:ad:92:af:13:54:db:41:1b:
a6:85:af:8e:1a:4d:60:06:a4:3a:de:44:6c:5d:e0:6c:5a:7d:
64:6e:fb:9d:e7:97:10:34:f5:88:6d:f9:8d:db:24:69:18:53:
92:53:78:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 03:16:16 2025 by rpki-client