Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/f68113-73a7-400d-8c99-99befa476a8f/1/xYYxzYq0r-nKOjSaEuRqyNSfLGo.roa
File: xYYxzYq0r-nKOjSaEuRqyNSfLGo.roa (raw, json)
Hash identifier: WlgzWiotOv3SXCX8HKoZjagG8AGnEnZi42DdWzoIFmM=
Subject key identifier: C5:86:31:CD:8A:B4:AF:E9:CA:3A:34:9A:12:E4:6A:C8:D4:9F:2C:6A
Certificate issuer: /CN=62fc2ed6557d0ce80e81505b1f9d580698887c6e
Certificate serial: 01852E54D7E495BB18642F8374EE6945679E
Authority key identifier: 62:FC:2E:D6:55:7D:0C:E8:0E:81:50:5B:1F:9D:58:06:98:88:7C:6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yvwu1lV9DOgOgVBbH51YBpiIfG4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/f68113-73a7-400d-8c99-99befa476a8f/1/xYYxzYq0r-nKOjSaEuRqyNSfLGo.roa
Signing time: Tue 20 Dec 2022 06:59:50 +0000
ROA not before: Tue 20 Dec 2022 06:59:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 199624
IP address blocks: 91.208.171.0/24 maxlen: 32
185.8.4.0/22 maxlen: 32
185.166.240.0/22 maxlen: 32
2a0a:2100::/29 maxlen: 32
2a03:13c0::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:2e:54:d7:e4:95:bb:18:64:2f:83:74:ee:69:45:67:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fc2ed6557d0ce80e81505b1f9d580698887c6e
Validity
Not Before: Dec 20 06:59:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c58631cd8ab4afe9ca3a349a12e46ac8d49f2c6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:03:af:b0:70:63:2d:f1:b4:0b:76:ed:62:25:
c9:48:e4:24:3a:65:71:fe:6b:05:2a:1e:3d:e4:d2:
ea:e0:df:ba:04:a9:53:a4:f9:ed:12:ef:09:7a:4f:
be:74:a9:29:73:10:6e:4e:55:59:17:7d:84:cd:b4:
94:f8:92:99:90:a8:6e:ab:f4:88:26:d1:64:e7:ba:
98:eb:12:7b:45:e2:a8:36:70:f3:eb:bc:6d:a7:ff:
0c:14:f4:43:23:1a:da:f4:31:04:bd:26:e3:c8:f8:
a0:57:e7:5f:f6:79:c4:38:27:6f:de:7a:61:0e:7b:
f5:82:6d:8d:ba:fa:d1:ce:60:69:f4:63:56:93:2f:
b1:38:43:8b:fc:07:e9:99:7e:1b:85:e7:62:ed:ab:
b1:3b:d4:e7:e0:4c:a2:05:df:4e:85:cb:a8:81:c9:
0b:4a:89:b6:41:1b:6a:16:02:2e:c1:02:bb:3e:dc:
6a:44:d7:1d:2e:7e:25:86:31:2e:e1:f3:fb:da:2c:
f3:ef:e6:dd:ce:af:1b:ca:8d:7d:07:99:b2:d2:75:
f1:3f:2b:99:92:57:0f:d5:12:6f:5f:01:f0:22:4b:
38:99:db:c5:0d:2c:02:f1:12:7c:fe:eb:cb:82:7a:
d8:09:9f:8e:4f:5b:e0:12:d0:10:88:d4:37:51:43:
4c:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:86:31:CD:8A:B4:AF:E9:CA:3A:34:9A:12:E4:6A:C8:D4:9F:2C:6A
X509v3 Authority Key Identifier:
keyid:62:FC:2E:D6:55:7D:0C:E8:0E:81:50:5B:1F:9D:58:06:98:88:7C:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yvwu1lV9DOgOgVBbH51YBpiIfG4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/f68113-73a7-400d-8c99-99befa476a8f/1/xYYxzYq0r-nKOjSaEuRqyNSfLGo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/f68113-73a7-400d-8c99-99befa476a8f/1/Yvwu1lV9DOgOgVBbH51YBpiIfG4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.208.171.0/24
185.8.4.0/22
185.166.240.0/22
IPv6:
2a03:13c0::/32
2a0a:2100::/29
Signature Algorithm: sha256WithRSAEncryption
66:ff:70:ca:f9:b1:06:af:b6:a0:54:1b:d2:c9:95:c4:cd:0c:
74:64:4b:1b:63:99:38:dd:60:bc:cc:f6:39:cf:5e:22:00:b7:
ce:66:7a:80:8f:4c:aa:07:3b:2a:e7:d9:96:26:28:c6:ff:a2:
64:15:a9:f8:7f:99:a4:0d:4c:f6:2b:ae:97:12:c6:89:cd:45:
ed:61:9c:8c:3d:ff:21:0d:b6:31:62:cb:63:47:f3:44:a8:76:
a0:8f:d5:5e:b0:3a:a4:89:1c:59:c0:b3:c2:5d:70:7e:ac:0b:
f8:9a:0d:55:09:25:bc:f8:9b:e6:89:8e:15:a1:4d:cc:31:b2:
e3:bc:69:dc:ed:a0:0f:17:63:7f:f2:64:d8:23:de:a2:6d:dc:
97:3e:6c:bd:04:05:54:e6:42:55:fc:1b:9f:24:6d:d1:27:91:
57:1f:e3:f0:c0:84:31:5c:3d:0d:46:e7:87:eb:ba:7a:fe:c0:
f9:e3:d5:fb:af:8e:27:77:79:95:26:74:44:03:01:09:44:a8:
42:cc:2b:29:ed:63:5c:f0:dd:dc:ce:d5:d3:91:7a:d8:99:09:
05:66:0d:50:d9:2b:d7:0d:e0:91:10:7d:b9:95:70:80:88:f7:
db:3c:fb:fe:4b:e8:7a:72:88:0a:f9:0b:96:49:f1:a4:7e:63:
06:cf:45:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 13:09:10 2025 by rpki-client