Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/243f91-8747-4981-9cbf-1d373499924e/1/Ylbq5ntwI4lobnJRn4w_8RBAWYU.roa
File: Ylbq5ntwI4lobnJRn4w_8RBAWYU.roa (raw, json)
Hash identifier: EjqMbrULb7iRN3e+HzHVHj0EJ4f37rSShZWRA2TwvuI=
Subject key identifier: 62:56:EA:E6:7B:70:23:89:68:6E:72:51:9F:8C:3F:F1:10:40:59:85
Certificate issuer: /CN=c755702467770ed69b367b77bbe640bc6db4153e
Certificate serial: 01942143B263C6A66B8D9AB8AD9CEF796F94
Authority key identifier: C7:55:70:24:67:77:0E:D6:9B:36:7B:77:BB:E6:40:BC:6D:B4:15:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x1VwJGd3DtabNnt3u-ZAvG20FT4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/243f91-8747-4981-9cbf-1d373499924e/1/Ylbq5ntwI4lobnJRn4w_8RBAWYU.roa
Signing time: Wed 01 Jan 2025 09:47:52 +0000
ROA not before: Wed 01 Jan 2025 09:47:52 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 14618
IP address blocks: 84.254.134.0/24 maxlen: 24
84.254.136.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:43:b2:63:c6:a6:6b:8d:9a:b8:ad:9c:ef:79:6f:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c755702467770ed69b367b77bbe640bc6db4153e
Validity
Not Before: Jan 1 09:47:52 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6256eae67b702389686e72519f8c3ff110405985
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:fe:b8:95:55:9b:7f:c6:d9:19:e9:7b:c3:72:
9b:c9:c9:9e:27:43:02:e7:c4:71:86:48:54:1d:52:
7f:06:eb:40:ee:ee:04:a6:6a:a5:d8:3b:2f:ba:e2:
d8:43:26:d2:59:ef:65:30:0c:e1:ac:7e:ac:eb:4f:
1d:f6:83:3f:59:47:22:82:9c:17:c0:bb:81:7c:0a:
cc:41:46:aa:c0:c9:4f:d6:70:29:44:07:18:86:4d:
b1:e7:5a:37:39:f2:22:f3:f0:70:ed:63:60:80:d0:
12:cb:31:06:92:08:32:ca:56:7a:17:a3:dc:aa:6e:
c9:a2:9c:d4:56:53:74:d2:6a:c1:13:7d:64:55:f8:
83:07:a4:4d:73:a8:cc:02:80:57:d0:55:95:f4:5b:
05:26:35:a3:86:d5:f4:7f:ea:11:86:e4:15:11:ab:
0f:c4:bf:ed:8a:90:bd:73:da:6a:7b:f3:c0:cd:5c:
22:70:66:6e:aa:1c:8f:c7:79:78:4e:d7:f9:aa:ef:
82:d7:0d:5c:f2:7a:cd:81:f1:5f:be:fb:4c:c3:78:
b3:4e:66:1f:fc:a2:93:53:e2:61:5b:25:06:47:47:
58:83:cc:5f:6e:8f:31:93:70:69:d7:b6:84:a4:3d:
e5:30:22:b0:5a:68:3a:35:04:d4:b8:d7:9a:29:77:
6d:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:56:EA:E6:7B:70:23:89:68:6E:72:51:9F:8C:3F:F1:10:40:59:85
X509v3 Authority Key Identifier:
keyid:C7:55:70:24:67:77:0E:D6:9B:36:7B:77:BB:E6:40:BC:6D:B4:15:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x1VwJGd3DtabNnt3u-ZAvG20FT4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/243f91-8747-4981-9cbf-1d373499924e/1/Ylbq5ntwI4lobnJRn4w_8RBAWYU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/243f91-8747-4981-9cbf-1d373499924e/1/x1VwJGd3DtabNnt3u-ZAvG20FT4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.254.134.0/24
84.254.136.0/24
Signature Algorithm: sha256WithRSAEncryption
70:49:e2:ce:8c:59:f4:1f:04:86:55:a0:57:de:d6:07:2c:b2:
c4:a2:73:d5:97:ba:c1:51:e0:1c:f1:d0:75:99:99:bc:6f:72:
9a:09:24:91:65:a5:b5:4d:0b:c8:f1:22:19:4d:63:60:e2:e2:
df:1a:a4:53:06:98:c4:fc:f4:46:20:40:09:3d:0f:0b:4e:19:
4f:09:19:d9:3f:48:97:ae:51:6b:56:a2:36:79:d6:e0:4d:09:
bd:b8:a1:00:95:89:f2:0f:3b:c5:86:db:4c:7b:3c:81:4f:50:
a4:7d:4b:df:bc:ba:b6:a1:0c:f1:36:9a:4a:f7:3e:f3:4b:6b:
76:04:e8:db:ce:94:7d:18:67:af:46:54:2f:4f:6f:c6:59:2a:
41:09:4c:97:a8:29:2b:f2:0d:c9:24:b2:08:1a:e4:fb:e9:6c:
fe:71:07:f9:64:ab:c7:0d:50:ab:7b:55:14:3c:94:fd:60:95:
c2:18:f0:79:d0:f1:84:8b:25:e0:f4:d2:62:b9:ee:fc:f9:5d:
a5:c4:a9:99:14:8e:9d:74:ce:b3:8c:04:35:61:90:c4:1f:e1:
1d:16:46:76:fd:03:42:ce:c6:dc:1e:d5:b9:5b:15:24:56:10:
dd:5c:fe:25:8c:a6:d5:e2:52:a5:3c:58:4b:8f:68:2e:5e:39:
42:33:0a:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 23:54:21 2025 by rpki-client