Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/45c9ad-c4a7-4652-aad3-c952804932c2/1/Ydee_9sKBOYSNgV3DpsBR-w7_U8.roa
File: Ydee_9sKBOYSNgV3DpsBR-w7_U8.roa (raw, json)
Hash identifier: tgY6PnqoOsKcCw452vOSzlvkg7P0cNWRWTWaQclJxEc=
Subject key identifier: 61:D7:9E:FF:DB:0A:04:E6:12:36:05:77:0E:9B:01:47:EC:3B:FD:4F
Certificate issuer: /CN=6a016dad273047b18886691485dedd97171c4d68
Certificate serial: 0194266BF1C88F3B5B91C8048D29CC0D8284
Authority key identifier: 6A:01:6D:AD:27:30:47:B1:88:86:69:14:85:DE:DD:97:17:1C:4D:68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/agFtrScwR7GIhmkUhd7dlxccTWg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/45c9ad-c4a7-4652-aad3-c952804932c2/1/Ydee_9sKBOYSNgV3DpsBR-w7_U8.roa
Signing time: Thu 02 Jan 2025 09:49:55 +0000
ROA not before: Thu 02 Jan 2025 09:49:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16509
IP address blocks: 194.1.164.0/24 maxlen: 24
194.1.165.0/24 maxlen: 24
194.1.166.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:f1:c8:8f:3b:5b:91:c8:04:8d:29:cc:0d:82:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a016dad273047b18886691485dedd97171c4d68
Validity
Not Before: Jan 2 09:49:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=61d79effdb0a04e6123605770e9b0147ec3bfd4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:8f:ab:65:3a:ce:87:02:5e:99:49:b4:fe:26:
7b:12:02:2b:f6:00:07:55:99:c5:0b:34:62:75:b0:
4f:e2:9e:72:18:7d:63:17:20:32:ce:7e:26:af:6f:
17:ef:84:86:08:35:83:6d:ce:29:90:4e:c3:35:6d:
0c:5b:f5:78:bd:b3:4d:fe:4e:40:3c:3c:ae:4e:3e:
ae:0d:1d:28:1e:c5:e5:88:c7:8a:99:8f:2e:9c:bf:
ea:61:0d:3a:62:96:ab:19:95:88:95:96:81:41:bf:
85:e2:0e:af:28:5b:3b:03:f7:db:ff:c9:87:9f:95:
e5:38:9a:5d:01:a6:be:a4:3d:6c:18:72:f7:a8:57:
84:0f:c0:9b:6f:c2:5c:2e:ca:23:d0:0f:8d:89:ef:
02:70:1b:6c:ba:f9:3e:99:c1:73:40:cf:3d:01:12:
66:83:53:31:16:f4:79:48:b2:a2:c9:1e:c8:87:5d:
8a:1b:82:9e:9b:fd:2c:1f:86:41:27:6d:87:09:20:
d7:e1:35:eb:c1:45:36:a8:c6:c9:f0:32:67:92:11:
73:ac:9a:9a:b0:2d:4e:a1:a6:e1:fe:53:49:77:c2:
55:0a:f5:a2:b0:a5:4a:52:9b:f3:81:e8:5c:bb:6e:
31:d0:a3:49:44:1b:45:a7:37:7b:5a:62:dc:4a:2c:
55:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:D7:9E:FF:DB:0A:04:E6:12:36:05:77:0E:9B:01:47:EC:3B:FD:4F
X509v3 Authority Key Identifier:
keyid:6A:01:6D:AD:27:30:47:B1:88:86:69:14:85:DE:DD:97:17:1C:4D:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/agFtrScwR7GIhmkUhd7dlxccTWg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/45c9ad-c4a7-4652-aad3-c952804932c2/1/Ydee_9sKBOYSNgV3DpsBR-w7_U8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/45c9ad-c4a7-4652-aad3-c952804932c2/1/agFtrScwR7GIhmkUhd7dlxccTWg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.1.164.0-194.1.166.255
Signature Algorithm: sha256WithRSAEncryption
b6:ea:33:30:82:57:a2:ad:b5:3f:80:9d:e9:1b:ae:d4:73:4c:
61:06:62:56:91:58:a2:be:f5:d2:82:e3:17:5c:a9:41:89:73:
2c:a6:2f:05:e0:e4:de:87:a5:3d:8a:88:c3:8b:cf:b8:6e:f1:
26:d7:d3:11:a7:6e:70:88:9a:42:da:cb:9b:ad:40:11:d9:12:
e6:81:97:84:26:79:63:67:8b:fe:8c:0b:1f:f0:9c:16:e1:59:
e1:b0:d6:66:a8:97:32:81:30:b6:5f:28:99:0b:4c:c2:81:50:
19:3e:56:5a:1f:8a:24:09:24:da:97:ed:e6:15:49:7e:21:de:
48:6d:3b:74:e8:50:f4:08:43:73:5e:25:5c:da:c2:ca:d2:97:
48:62:d8:ed:d5:d1:53:5d:76:14:57:4d:53:15:97:86:e2:37:
94:4f:a9:36:06:62:8d:2f:6c:db:7e:7a:12:17:f1:04:53:fe:
3a:15:46:d8:48:c3:8f:56:6e:fa:0b:3c:fc:b3:bd:2b:09:77:
a7:c3:7a:50:15:00:cb:59:18:cf:7f:94:19:9b:d3:1b:6e:1d:
30:46:0c:6a:38:a9:21:6d:cd:11:92:f5:52:33:88:7f:dc:f3:
e2:af:9a:d4:36:9c:a6:eb:37:14:54:98:7f:c6:97:1e:b2:f1:
92:e3:4d:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:15:51 2025 by rpki-client