Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/b03213-5e80-4931-81ce-f752d81605fb/1/yRetO5hGF2Sg7Urg7tPPa5ziUiI.roa
File: yRetO5hGF2Sg7Urg7tPPa5ziUiI.roa (raw, json)
Hash identifier: 0y+iCbPQCXEytpzJVMYbIqcFI7KG0+fLz2JnONERKbY=
Subject key identifier: C9:17:AD:3B:98:46:17:64:A0:ED:4A:E0:EE:D3:CF:6B:9C:E2:52:22
Certificate issuer: /CN=f93ac6cd2240249bba60171f086e9101cc87ca24
Certificate serial: 019424B4081CF85351E9DA524FB7D86B96AA
Authority key identifier: F9:3A:C6:CD:22:40:24:9B:BA:60:17:1F:08:6E:91:01:CC:87:CA:24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-TrGzSJAJJu6YBcfCG6RAcyHyiQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/b03213-5e80-4931-81ce-f752d81605fb/1/yRetO5hGF2Sg7Urg7tPPa5ziUiI.roa
Signing time: Thu 02 Jan 2025 01:49:25 +0000
ROA not before: Thu 02 Jan 2025 01:49:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 47447
IP address blocks: 185.127.94.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b4:08:1c:f8:53:51:e9:da:52:4f:b7:d8:6b:96:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f93ac6cd2240249bba60171f086e9101cc87ca24
Validity
Not Before: Jan 2 01:49:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c917ad3b98461764a0ed4ae0eed3cf6b9ce25222
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:90:8f:e1:ce:8a:a4:22:94:bd:94:66:41:7d:
a1:f8:cf:99:a9:74:a4:7c:6f:c6:51:ec:6e:a8:8a:
f9:99:68:62:75:24:27:92:0d:9b:fa:2b:5c:bd:bf:
ea:87:f6:28:e7:8a:50:bc:39:bd:fd:9b:43:90:ac:
c6:f1:dd:0d:5f:dd:eb:0b:17:f4:13:e6:25:75:cc:
bb:21:62:b6:8b:53:44:02:9f:93:25:60:86:35:08:
e6:14:36:88:af:c6:e9:1c:8f:47:ef:c9:b9:e3:2e:
a2:3f:93:d7:83:7b:d6:d5:8a:00:c4:63:92:9d:f9:
f7:ae:01:d0:be:aa:f7:56:b6:e7:e8:83:e3:dc:c9:
e9:dc:a2:64:1a:fb:c5:9a:88:b3:b9:26:30:c2:ee:
49:97:99:fe:4d:0f:50:5b:da:ef:55:65:e1:d3:17:
28:fd:d5:f6:4c:78:c4:67:08:82:b0:fd:c9:6b:0c:
e1:37:96:57:0a:93:79:db:87:07:30:ab:28:c9:f0:
86:71:fd:12:bb:58:ec:12:a8:d3:26:40:06:c2:3c:
81:05:70:06:8e:6a:ed:94:6a:68:8e:ff:8f:74:8b:
a9:21:9e:8e:c5:3c:83:04:b6:7c:71:3e:31:10:3e:
f4:6a:08:6a:2f:f7:c2:ac:dc:e7:f2:56:3e:cd:c7:
9b:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:17:AD:3B:98:46:17:64:A0:ED:4A:E0:EE:D3:CF:6B:9C:E2:52:22
X509v3 Authority Key Identifier:
keyid:F9:3A:C6:CD:22:40:24:9B:BA:60:17:1F:08:6E:91:01:CC:87:CA:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-TrGzSJAJJu6YBcfCG6RAcyHyiQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/b03213-5e80-4931-81ce-f752d81605fb/1/yRetO5hGF2Sg7Urg7tPPa5ziUiI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/b03213-5e80-4931-81ce-f752d81605fb/1/1-TrGzSJAJJu6YBcfCG6RAcyHyiQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.127.94.0/24
Signature Algorithm: sha256WithRSAEncryption
15:c4:0e:49:55:a4:b8:9f:62:b0:c6:61:f1:ab:b1:14:98:a5:
7d:e7:57:04:88:6d:d8:d0:66:af:4f:11:3c:97:46:a7:6b:44:
b5:55:ff:bf:ca:a3:9e:db:08:5d:48:4e:0e:7e:f3:bb:83:96:
4e:f3:21:07:90:94:f4:59:c1:46:37:98:ef:1c:c9:fa:96:e2:
80:56:24:77:b5:a8:8b:7b:af:38:ef:83:eb:d5:64:71:a8:43:
78:ca:a4:37:7d:e1:d3:c1:4d:1f:ca:fb:ee:cf:b6:32:df:e9:
0b:b8:83:e1:0c:97:e4:26:9e:37:70:da:89:c7:71:27:dc:a2:
dc:77:2e:cd:31:bf:a9:69:ed:c2:b3:92:96:82:c3:c4:b9:21:
74:b6:67:4b:3d:9e:4a:fb:cf:38:1a:a9:44:7e:2c:73:54:b4:
fb:7f:67:16:47:13:3f:eb:fe:18:ca:66:20:04:3a:ff:8f:d3:
a2:06:a2:a7:12:71:c2:54:1b:19:25:4c:fa:ad:91:9a:c0:c3:
e4:db:ef:cf:aa:db:3c:2a:55:bb:b4:55:a9:ae:ba:34:b5:dd:
02:85:c7:0a:1f:0a:72:9e:b5:cb:9e:34:1d:89:f8:56:70:0e:
9e:5d:c2:6c:fc:c4:42:92:ba:b7:67:62:b3:28:37:3a:b3:97:
e5:04:d1:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 23:32:33 2025 by rpki-client