Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/2a8f88-b05d-4291-93d4-07f7d5195c2c/1/YJqTNqqIesHe-dycJcy9xj_pIQY.roa
File: YJqTNqqIesHe-dycJcy9xj_pIQY.roa (raw, json)
Hash identifier: gWFu5S/Jd4xeYG1Nm3fFs4fqADkExqgxea/J49+nbBA=
Subject key identifier: 60:9A:93:36:AA:88:7A:C1:DE:F9:DC:9C:25:CC:BD:C6:3F:E9:21:06
Certificate issuer: /CN=e4bdd6b1ebfc95899a58333dc94cf82a19a6b3be
Certificate serial: 01942826E87851D57775D5BA76BBEDFAF700
Authority key identifier: E4:BD:D6:B1:EB:FC:95:89:9A:58:33:3D:C9:4C:F8:2A:19:A6:B3:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5L3Wsev8lYmaWDM9yUz4Khmms74.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/2a8f88-b05d-4291-93d4-07f7d5195c2c/1/YJqTNqqIesHe-dycJcy9xj_pIQY.roa
Signing time: Thu 02 Jan 2025 17:53:45 +0000
ROA not before: Thu 02 Jan 2025 17:53:45 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 47381
IP address blocks: 5.159.232.0/21 maxlen: 24
80.77.112.0/20 maxlen: 24
188.227.224.0/21 maxlen: 24
195.5.177.0/24 maxlen: 24
2001:950::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:26:e8:78:51:d5:77:75:d5:ba:76:bb:ed:fa:f7:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4bdd6b1ebfc95899a58333dc94cf82a19a6b3be
Validity
Not Before: Jan 2 17:53:45 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=609a9336aa887ac1def9dc9c25ccbdc63fe92106
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:8c:1f:cf:55:87:e3:e5:c6:bd:c1:7b:9a:b3:
7e:b5:36:27:4e:36:cf:3a:98:81:52:99:bf:04:e0:
fc:a1:e1:22:70:1a:33:f9:62:c4:b4:76:d8:8d:96:
36:01:27:98:27:a8:fd:a3:b5:ad:b9:8e:68:15:32:
c5:20:07:5b:65:5d:89:9e:9d:df:97:ed:95:1b:5b:
ab:08:20:88:7b:62:a5:fa:b1:f1:59:73:4d:b8:69:
e6:54:bf:98:19:df:39:00:bc:ff:e3:97:75:d0:90:
be:9b:aa:82:93:1e:2b:88:c4:61:23:1f:28:cd:2e:
68:be:ad:e1:f2:58:6d:29:69:05:15:35:c2:d2:13:
12:e4:29:0c:38:e7:33:97:54:21:45:52:1b:7c:7f:
3a:2d:4c:f3:c5:02:67:36:a3:01:1c:2a:62:84:16:
32:00:0a:b8:f1:3d:dd:4f:4c:25:8e:cf:d8:f1:08:
5b:4d:35:96:59:81:2f:20:e9:fa:89:a3:18:6d:54:
89:42:ab:fd:e0:ec:da:11:31:f1:87:e4:ed:99:9d:
04:f7:94:cf:27:e8:7c:c5:e0:d3:4c:d8:d3:74:9c:
15:c3:5a:2f:3c:99:61:44:be:0c:a7:71:0a:a3:17:
01:62:21:eb:2a:1d:39:26:5e:5e:8c:b2:cd:77:26:
cb:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:9A:93:36:AA:88:7A:C1:DE:F9:DC:9C:25:CC:BD:C6:3F:E9:21:06
X509v3 Authority Key Identifier:
keyid:E4:BD:D6:B1:EB:FC:95:89:9A:58:33:3D:C9:4C:F8:2A:19:A6:B3:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5L3Wsev8lYmaWDM9yUz4Khmms74.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/2a8f88-b05d-4291-93d4-07f7d5195c2c/1/YJqTNqqIesHe-dycJcy9xj_pIQY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/2a8f88-b05d-4291-93d4-07f7d5195c2c/1/5L3Wsev8lYmaWDM9yUz4Khmms74.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.159.232.0/21
80.77.112.0/20
188.227.224.0/21
195.5.177.0/24
IPv6:
2001:950::/32
Signature Algorithm: sha256WithRSAEncryption
ad:9a:a8:62:df:71:6a:4b:b3:f8:82:48:2b:f2:11:79:5b:95:
79:d3:bc:f3:64:9b:94:d5:ef:af:da:19:ac:cd:af:0b:4b:43:
37:17:a0:85:ec:29:5d:08:6b:f4:4c:d9:e5:d4:3c:82:7c:bf:
c4:fa:57:8b:31:bd:d5:b3:23:da:4e:2f:d7:c2:b3:cc:b6:fb:
69:64:8c:47:b6:2c:33:da:04:bc:45:52:67:6b:d2:56:89:cc:
82:df:e7:7f:46:08:4a:fd:34:fe:6f:6e:80:5e:14:f6:a7:05:
6e:9a:6f:ff:9b:23:38:e2:61:cd:6c:05:db:5b:8c:c9:f6:61:
79:48:84:3b:cc:45:29:36:50:7d:ce:bc:99:69:e6:6f:50:9a:
11:1a:0a:85:79:4d:55:e8:e0:4a:24:8c:44:43:ac:7f:fc:6b:
88:94:ff:8b:b9:99:91:32:d0:f1:b3:92:8d:a3:0d:58:0f:f5:
85:54:2a:05:5f:ec:17:97:ea:1e:d0:86:95:85:41:e6:a4:d7:
96:93:5c:6e:11:82:52:87:18:ee:ad:db:2b:b1:f8:d2:6a:58:
30:a1:f4:8f:b3:5b:00:ff:21:35:6d:44:ee:de:6b:be:5e:32:
2e:3c:3f:5e:3c:b5:f5:26:af:c1:38:a9:fb:3c:1a:f9:e0:3e:
f3:c6:b8:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 00:43:43 2025 by rpki-client