Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/yKEdRFXOJFuyJYCF7aSbI9k7vIY.roa
File: yKEdRFXOJFuyJYCF7aSbI9k7vIY.roa (raw, json)
Hash identifier: olpAS/BP77ckE1S+8At9tAowdd3Qk7OGXOO6QIOSVg4=
Subject key identifier: C8:A1:1D:44:55:CE:24:5B:B2:25:80:85:ED:A4:9B:23:D9:3B:BC:86
Certificate issuer: /CN=7df132df13e4be53d8250c8c48420264eef6c14c
Certificate serial: 01941FFA399302F6064B9D4298FA3BDD1378
Authority key identifier: 7D:F1:32:DF:13:E4:BE:53:D8:25:0C:8C:48:42:02:64:EE:F6:C1:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ffEy3xPkvlPYJQyMSEICZO72wUw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/yKEdRFXOJFuyJYCF7aSbI9k7vIY.roa
Signing time: Wed 01 Jan 2025 03:47:59 +0000
ROA not before: Wed 01 Jan 2025 03:47:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49302
IP address blocks: 89.35.77.0/24 maxlen: 24
92.114.108.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:39:93:02:f6:06:4b:9d:42:98:fa:3b:dd:13:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7df132df13e4be53d8250c8c48420264eef6c14c
Validity
Not Before: Jan 1 03:47:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c8a11d4455ce245bb2258085eda49b23d93bbc86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:73:59:29:cc:da:5e:b1:5f:b0:eb:33:68:d0:
4f:66:dd:8e:49:a8:ac:da:36:88:53:98:c7:e8:e4:
45:93:f0:b6:e9:a9:1f:35:28:7e:79:b1:5f:85:06:
76:5e:1d:b0:ab:aa:30:58:68:bf:38:fe:20:52:da:
6c:b8:9a:0f:7a:c3:f6:fe:5f:32:b8:58:c4:4a:e7:
c3:91:8b:03:c1:87:b7:0d:91:36:21:36:01:28:49:
f0:4b:b0:0e:cb:3b:8e:05:a8:17:71:6f:51:50:a1:
74:51:0a:d0:72:26:39:62:62:b9:40:3c:c6:6c:bc:
be:bb:64:98:f3:34:dd:3a:4a:1c:41:d2:d8:96:03:
69:53:d5:da:b9:ff:35:22:44:6b:6f:d8:29:95:f2:
60:f7:c0:32:d5:65:d6:21:3b:a4:21:33:59:de:36:
c1:a3:16:48:cf:b3:11:4f:fc:2d:d7:aa:55:d7:3f:
f8:f5:e9:5a:46:4b:a7:c8:7a:b3:8f:14:86:58:10:
3d:2e:05:c3:62:e8:79:18:40:bd:2d:87:ef:58:ee:
fb:27:c1:fb:14:1b:46:76:62:51:45:24:95:61:7c:
f1:14:02:d3:93:34:c6:39:59:58:c2:2b:4f:e9:dd:
72:c5:1c:ef:c5:40:23:74:a8:37:5d:88:a5:91:9a:
66:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:A1:1D:44:55:CE:24:5B:B2:25:80:85:ED:A4:9B:23:D9:3B:BC:86
X509v3 Authority Key Identifier:
keyid:7D:F1:32:DF:13:E4:BE:53:D8:25:0C:8C:48:42:02:64:EE:F6:C1:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ffEy3xPkvlPYJQyMSEICZO72wUw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/yKEdRFXOJFuyJYCF7aSbI9k7vIY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/ffEy3xPkvlPYJQyMSEICZO72wUw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.35.77.0/24
92.114.108.0/24
Signature Algorithm: sha256WithRSAEncryption
32:e9:6a:64:8c:ff:ac:ac:24:82:d3:e2:e5:25:7e:57:aa:37:
8d:0d:a6:d4:dd:70:f3:9d:d8:40:d1:b0:26:fd:65:af:3b:98:
96:08:3b:38:d9:cb:57:02:24:c7:88:0c:27:da:72:10:cc:76:
80:8a:ee:7b:9e:7f:a6:49:b4:4f:06:86:cf:ce:80:f4:e6:6b:
00:65:6f:81:8c:a6:3e:42:35:82:c3:54:30:64:c9:77:2e:4b:
cc:6e:94:b3:2b:50:c2:c4:03:75:a8:a8:be:db:c0:dc:6c:50:
37:32:84:d7:f1:a3:1d:86:58:e0:64:9b:4d:ad:08:bd:21:76:
ce:c2:5c:5d:76:56:b2:63:72:81:ef:b6:18:7b:e3:45:33:92:
31:a3:d6:c4:5b:5d:e6:c7:ea:4e:42:70:51:eb:8b:78:a9:97:
0a:10:f4:20:d6:53:a1:78:6b:de:bb:61:68:e5:61:16:85:6a:
de:6c:15:cc:ed:89:bd:f2:77:c4:09:29:57:c5:19:82:83:87:
27:ef:4c:46:31:a4:e2:1b:12:7f:a2:a8:36:26:f9:db:77:45:
ee:c6:4b:63:46:f9:15:46:31:7f:af:cb:0b:80:8d:75:72:6e:
03:a5:79:45:8d:d0:d2:f0:7b:25:a7:cf:0e:d0:88:b1:05:65:
51:dc:e1:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 20:15:15 2025 by rpki-client