Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/65e543-7e7a-4aab-ac74-bc6794e95e5a/1/YRRXPoENpmdtt6jCnuMjG8rrikY.roa
File: YRRXPoENpmdtt6jCnuMjG8rrikY.roa (raw, json)
Hash identifier: DbDzgUZdi2jed/+3x8UofBswoXpqS+WPTmkA9M7K92c=
Subject key identifier: 61:14:57:3E:81:0D:A6:67:6D:B7:A8:C2:9E:E3:23:1B:CA:EB:8A:46
Certificate issuer: /CN=17b5042fc20d9bab1676e09af7ff1ba5bfadae75
Certificate serial: 0194236A0C244073F313420A57C2875AC264
Authority key identifier: 17:B5:04:2F:C2:0D:9B:AB:16:76:E0:9A:F7:FF:1B:A5:BF:AD:AE:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F7UEL8INm6sWduCa9_8bpb-trnU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/65e543-7e7a-4aab-ac74-bc6794e95e5a/1/YRRXPoENpmdtt6jCnuMjG8rrikY.roa
Signing time: Wed 01 Jan 2025 19:48:59 +0000
ROA not before: Wed 01 Jan 2025 19:48:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 47821
IP address blocks: 91.242.242.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:6a:0c:24:40:73:f3:13:42:0a:57:c2:87:5a:c2:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17b5042fc20d9bab1676e09af7ff1ba5bfadae75
Validity
Not Before: Jan 1 19:48:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6114573e810da6676db7a8c29ee3231bcaeb8a46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:2f:2c:7e:2e:b6:69:f5:80:8f:0b:c5:09:46:
2f:dd:b7:20:ac:a1:f5:82:1b:59:80:6c:5e:cc:7d:
8e:85:4f:7f:b9:42:ac:3a:84:8e:40:89:ea:24:4f:
69:64:68:b3:83:d1:e7:6e:ec:39:87:12:14:93:f6:
37:30:ad:5f:39:74:9c:db:df:78:1c:9c:41:82:40:
99:0f:0b:4e:a4:fb:ca:ad:1a:6a:3f:92:c2:25:8c:
78:e2:ec:30:88:59:ce:bf:ad:13:12:43:c7:99:bb:
85:9f:be:c7:30:e3:c8:34:32:85:41:ef:6b:45:f2:
81:e5:fe:b4:37:4c:b0:be:a2:43:ca:1c:0b:65:12:
60:83:2f:48:39:5b:93:67:e5:61:6a:cf:fd:c7:9a:
4b:8b:44:cc:f9:d8:0c:db:af:cb:2b:19:23:85:77:
2f:b5:c8:14:4c:82:9e:70:b7:40:da:44:fa:99:31:
18:4f:d3:1d:a5:a9:00:5b:b5:67:c1:fc:89:f7:80:
6f:8c:02:7d:0f:54:d6:5f:f8:0c:88:89:25:30:0b:
6d:5a:95:94:ff:b9:5c:20:70:b1:b9:77:14:9a:21:
10:20:b0:b0:aa:14:50:c5:9b:d7:48:dc:1e:83:1b:
c5:f3:ee:10:31:9a:ec:55:7f:1d:a7:12:85:9c:6f:
fa:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:14:57:3E:81:0D:A6:67:6D:B7:A8:C2:9E:E3:23:1B:CA:EB:8A:46
X509v3 Authority Key Identifier:
keyid:17:B5:04:2F:C2:0D:9B:AB:16:76:E0:9A:F7:FF:1B:A5:BF:AD:AE:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F7UEL8INm6sWduCa9_8bpb-trnU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/65e543-7e7a-4aab-ac74-bc6794e95e5a/1/YRRXPoENpmdtt6jCnuMjG8rrikY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/65e543-7e7a-4aab-ac74-bc6794e95e5a/1/F7UEL8INm6sWduCa9_8bpb-trnU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.242.242.0/24
Signature Algorithm: sha256WithRSAEncryption
06:85:90:3a:fd:04:2b:79:df:28:2d:d9:0e:6b:d3:9e:38:73:
c6:11:bb:95:24:bf:92:35:57:09:00:0d:62:92:2a:12:88:b7:
ab:2c:73:86:4a:2a:b6:49:76:2e:bb:e6:85:57:a8:68:60:e1:
23:15:20:c9:fd:72:49:67:eb:92:13:45:fd:20:41:19:ea:f5:
ce:65:44:13:40:a0:74:8a:7c:2d:cb:9b:c6:32:c2:63:23:7e:
c3:82:7c:f5:75:2a:8d:27:82:67:67:68:b6:bc:b4:80:af:2e:
7b:9c:f4:b6:4f:cc:e5:ae:1a:c8:6b:5b:61:46:6a:fb:32:5f:
57:ee:23:94:d7:02:fb:e6:16:76:aa:45:cc:31:a2:a9:9d:d4:
9b:22:0e:34:49:77:e3:2e:a3:c3:db:20:8b:78:a4:94:a8:89:
04:3a:95:56:44:65:ca:7c:01:bb:12:f8:de:09:6a:30:3b:c6:
db:f5:b1:bd:bf:33:ce:c5:ac:9a:08:5a:ea:34:b6:b5:89:3e:
cc:5b:ca:09:51:1a:3c:4c:f4:2a:76:a9:7b:12:bd:a0:d4:82:
2e:58:d8:8f:4b:7f:12:aa:b0:ca:5b:2f:e5:3a:81:c3:00:ef:
30:5f:3e:c3:36:87:55:4b:63:d9:37:79:97:c5:d4:fb:29:11:
c2:fa:2f:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 07:27:09 2025 by rpki-client