Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/c363c4-7775-446a-bdd7-c1484ec151ca/1/yzvMF30fphNMT9FpFDFIwd6EF0A.roa
File: yzvMF30fphNMT9FpFDFIwd6EF0A.roa (raw, json)
Hash identifier: /eOZ4VLG9wsRVdyVt4X7XvzeHBoq1Nwv797JFlKHSAM=
Subject key identifier: CB:3B:CC:17:7D:1F:A6:13:4C:4F:D1:69:14:31:48:C1:DE:84:17:40
Certificate issuer: /CN=26235ea70deaae0e999412876e9d216afd65cbdb
Certificate serial: 01856E81EE48A34844DD16864D8777DFC525
Authority key identifier: 26:23:5E:A7:0D:EA:AE:0E:99:94:12:87:6E:9D:21:6A:FD:65:CB:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JiNepw3qrg6ZlBKHbp0hav1ly9s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/c363c4-7775-446a-bdd7-c1484ec151ca/1/yzvMF30fphNMT9FpFDFIwd6EF0A.roa
Signing time: Sun 01 Jan 2023 18:04:46 +0000
ROA not before: Sun 01 Jan 2023 18:04:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 28742
IP address blocks: 185.158.29.0/24 maxlen: 24
185.158.28.0/24 maxlen: 24
93.93.16.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:81:ee:48:a3:48:44:dd:16:86:4d:87:77:df:c5:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=26235ea70deaae0e999412876e9d216afd65cbdb
Validity
Not Before: Jan 1 18:04:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cb3bcc177d1fa6134c4fd169143148c1de841740
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:b5:d6:8a:2f:ac:65:03:98:0c:95:bb:3a:6a:
31:c1:ff:39:a7:b5:ab:e2:62:a5:45:91:e6:f6:64:
cd:15:a3:63:38:30:18:16:ac:28:39:51:ff:f6:02:
34:f1:ae:75:f8:d2:c2:a1:6a:01:da:76:19:43:30:
7a:28:c1:69:15:a8:8f:d2:ef:6f:37:77:0f:88:88:
e0:43:d6:e9:b7:07:d1:dc:05:ea:c6:34:b8:e5:13:
65:4b:6e:e4:fa:d8:8b:34:9b:33:bb:1a:69:60:94:
2c:b6:e3:88:a4:ab:36:d4:a9:c6:47:08:ca:15:f8:
ec:9b:7a:bf:1a:ff:e8:b2:0b:90:94:50:5d:75:2a:
3f:26:dc:4a:4d:20:86:ca:ac:f3:85:1e:93:1b:d4:
a5:d3:d6:0d:53:09:28:10:e7:df:05:53:6d:92:4b:
75:15:fb:7a:c2:65:de:83:80:e4:78:db:1d:db:b5:
65:3c:80:ae:b4:55:f1:77:48:ea:1b:5f:20:d7:31:
7b:e0:1a:98:a5:95:d7:f2:38:0f:1a:0a:eb:6a:5b:
43:d1:41:95:b4:cb:a5:13:34:f1:97:0c:42:9e:c3:
83:c7:64:33:31:73:f0:11:40:7e:20:2d:08:fe:10:
b7:6f:3c:6b:c5:2f:08:7e:39:8e:73:fd:95:71:97:
ae:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:3B:CC:17:7D:1F:A6:13:4C:4F:D1:69:14:31:48:C1:DE:84:17:40
X509v3 Authority Key Identifier:
keyid:26:23:5E:A7:0D:EA:AE:0E:99:94:12:87:6E:9D:21:6A:FD:65:CB:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JiNepw3qrg6ZlBKHbp0hav1ly9s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/c363c4-7775-446a-bdd7-c1484ec151ca/1/yzvMF30fphNMT9FpFDFIwd6EF0A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/c363c4-7775-446a-bdd7-c1484ec151ca/1/JiNepw3qrg6ZlBKHbp0hav1ly9s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.93.16.0/23
185.158.28.0/23
Signature Algorithm: sha256WithRSAEncryption
35:15:7f:bb:da:81:4f:a8:7f:54:9c:4b:d0:5e:7c:30:8b:83:
de:85:59:b1:0e:a9:30:1c:74:dd:14:17:37:bd:fa:3e:b0:37:
09:76:b9:a5:40:83:c5:8c:b9:69:6e:52:f9:fc:6a:f3:1f:03:
1d:51:fb:bc:03:00:22:3a:42:ec:23:c9:1b:8e:c5:f9:b0:c0:
53:4a:d6:77:db:21:65:c5:a1:00:32:91:fe:56:09:a6:70:4e:
69:ad:27:0a:f2:b0:3f:24:58:16:a4:40:be:eb:4f:1c:41:07:
85:d0:f5:f0:da:59:16:40:3a:6b:19:07:5d:14:44:27:27:df:
13:8d:58:0f:c2:c4:dd:be:b0:2c:2e:d0:36:50:75:c0:a9:87:
33:2d:fa:51:35:3c:6a:8f:3c:34:1e:2e:83:ea:a7:77:53:c6:
23:d9:07:1a:d7:23:dc:78:d7:a1:1a:80:4c:5a:7b:6a:9b:39:
e0:9c:9d:08:95:ca:c1:39:30:f5:bb:54:5b:4a:79:87:f6:35:
70:6b:73:7e:9c:59:37:f8:c6:b8:51:c2:5a:49:dc:dd:cc:3e:
ed:48:42:a9:5a:44:2f:df:24:35:6a:ed:4f:24:3b:58:16:42:
63:bc:7d:25:88:a6:96:15:7d:76:56:bb:17:c9:79:40:a6:62:
bd:b7:59:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 00:08:16 2025 by rpki-client