Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/effb2f-9fbf-488b-9315-a99a21015937/1/_ykmB8_Y7rV7LJO7Uqan6jxlQmA.roa
File: _ykmB8_Y7rV7LJO7Uqan6jxlQmA.roa (raw, json)
Hash identifier: uD0z/UcxlE1jmEUcgqOHRJNkK/WACwxETiV1r9T8BLM=
Subject key identifier: FF:29:26:07:CF:D8:EE:B5:7B:2C:93:BB:52:A6:A7:EA:3C:65:42:60
Certificate issuer: /CN=ccb75341500807a9750a8cf55bf4e45ff03f312a
Certificate serial: 019421B2512F1F021C0B1CD18F23B50BF474
Authority key identifier: CC:B7:53:41:50:08:07:A9:75:0A:8C:F5:5B:F4:E4:5F:F0:3F:31:2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zLdTQVAIB6l1Coz1W_TkX_A_MSo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/effb2f-9fbf-488b-9315-a99a21015937/1/_ykmB8_Y7rV7LJO7Uqan6jxlQmA.roa
Signing time: Wed 01 Jan 2025 11:48:41 +0000
ROA not before: Wed 01 Jan 2025 11:48:41 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 14618
IP address blocks: 157.84.32.0/23 maxlen: 23
157.84.40.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b2:51:2f:1f:02:1c:0b:1c:d1:8f:23:b5:0b:f4:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ccb75341500807a9750a8cf55bf4e45ff03f312a
Validity
Not Before: Jan 1 11:48:41 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ff292607cfd8eeb57b2c93bb52a6a7ea3c654260
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:bd:50:67:e1:8e:4e:c4:4e:be:e9:ca:4a:91:
10:fe:95:ff:c3:4f:4b:35:fa:2c:8a:c2:1f:51:43:
a8:e6:bb:52:18:77:56:d9:36:f2:92:15:39:0b:0a:
7e:2f:ea:87:58:dc:e4:cb:0a:20:d9:5c:44:44:f3:
e5:87:e8:da:f8:d8:30:1d:b7:47:58:d8:58:5e:6c:
ca:da:29:ee:26:4e:43:51:b3:92:5e:68:df:7a:e3:
c1:c6:18:54:80:67:39:52:d5:1b:20:c4:3d:94:1d:
8c:7e:77:99:59:6a:46:95:6d:d9:85:09:85:28:c5:
6b:26:5f:ed:83:f0:71:b5:44:91:f0:df:84:24:de:
18:c3:a7:45:a3:9e:11:f9:29:1e:1f:fa:14:95:d7:
ab:bb:ec:b6:19:b5:10:23:c8:84:24:4b:af:d0:29:
44:ef:28:9d:89:af:77:9a:46:17:87:86:d3:af:02:
e9:15:4b:14:79:a9:44:9c:5a:2b:c5:3f:5a:c7:67:
1e:d7:46:a6:4e:e0:4c:dc:3a:10:d2:d1:12:f5:af:
4e:6c:16:20:b5:5f:b2:b3:33:97:2b:4f:fb:27:29:
b4:30:15:b2:83:e9:18:40:5b:e7:62:e0:ad:b4:60:
58:0a:58:27:00:f6:65:0b:ea:25:5d:b6:bb:f2:ad:
d2:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:29:26:07:CF:D8:EE:B5:7B:2C:93:BB:52:A6:A7:EA:3C:65:42:60
X509v3 Authority Key Identifier:
keyid:CC:B7:53:41:50:08:07:A9:75:0A:8C:F5:5B:F4:E4:5F:F0:3F:31:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zLdTQVAIB6l1Coz1W_TkX_A_MSo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/effb2f-9fbf-488b-9315-a99a21015937/1/_ykmB8_Y7rV7LJO7Uqan6jxlQmA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/effb2f-9fbf-488b-9315-a99a21015937/1/zLdTQVAIB6l1Coz1W_TkX_A_MSo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
157.84.32.0/23
157.84.40.0/23
Signature Algorithm: sha256WithRSAEncryption
b2:d0:37:d1:2b:c3:d5:3f:25:97:35:22:ca:d6:d6:e1:49:ff:
e7:17:ff:78:f4:8a:ab:46:9e:05:58:02:43:ba:dc:63:e6:1a:
3f:f7:4c:af:0e:41:6c:b0:13:b0:cc:dd:b1:68:08:16:cc:e0:
1c:bb:5a:c7:7c:d7:c2:94:43:f9:a9:d6:4c:b1:c0:d2:87:a6:
bb:9b:31:45:43:04:43:08:f8:5e:c0:d7:81:2e:3d:fa:44:1e:
ef:6e:08:21:11:66:43:d7:1f:ba:f6:0c:08:00:67:41:35:62:
82:f8:33:c7:cd:09:c4:4f:12:38:c8:c5:9f:d7:56:58:22:b2:
00:50:94:f1:5f:79:3e:e2:97:76:05:f2:a5:13:9c:b8:c2:71:
34:56:25:55:5b:c5:30:12:38:4d:52:79:71:28:71:9d:f0:a8:
ad:86:6a:cb:cc:b8:d3:84:54:1d:c3:53:a0:bb:c1:08:f1:9b:
06:ac:36:9f:35:5c:c2:3f:a1:c8:23:2d:be:0e:98:94:6d:1c:
a4:96:2b:4d:72:89:a1:14:dc:eb:50:da:5a:34:cc:d1:e0:05:
d4:0f:8b:fb:51:10:5e:03:f4:bc:ca:37:30:1c:1d:de:5a:83:
8e:8d:29:b3:84:71:f4:c8:c7:a5:d7:49:db:3c:62:2b:c7:1f:
bb:3a:a6:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 23:55:40 2025 by rpki-client