Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/3d1945-d60e-48ab-88bc-8cfe4b8157d2/1/yDUn3h0GVYr8AzZ3iFV36MDLBwE.roa
File: yDUn3h0GVYr8AzZ3iFV36MDLBwE.roa (raw, json)
Hash identifier: PlIOs4C5Qd6cNibfYsVX5yo0iY1gRsx3evxSGdFImvg=
Subject key identifier: C8:35:27:DE:1D:06:55:8A:FC:03:36:77:88:55:77:E8:C0:CB:07:01
Certificate issuer: /CN=5e717627f7b2fcc56f0d7be469a13171607d2427
Certificate serial: 018DB1F99B03A1DA1EE439C7EEDF3BA1BE35
Authority key identifier: 5E:71:76:27:F7:B2:FC:C5:6F:0D:7B:E4:69:A1:31:71:60:7D:24:27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XnF2J_ey_MVvDXvkaaExcWB9JCc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/3d1945-d60e-48ab-88bc-8cfe4b8157d2/1/yDUn3h0GVYr8AzZ3iFV36MDLBwE.roa
Signing time: Fri 16 Feb 2024 12:52:21 +0000
ROA not before: Fri 16 Feb 2024 12:52:21 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 60808
IP address blocks: 195.254.165.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:b1:f9:9b:03:a1:da:1e:e4:39:c7:ee:df:3b:a1:be:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e717627f7b2fcc56f0d7be469a13171607d2427
Validity
Not Before: Feb 16 12:52:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c83527de1d06558afc033677885577e8c0cb0701
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:be:85:f5:99:a3:52:93:25:46:70:48:fe:61:
9e:d7:4c:4d:31:29:d7:b1:96:0c:1c:0f:51:0f:f3:
d4:d6:58:07:82:d4:01:8b:24:05:a8:81:a4:ad:fd:
e8:b6:58:59:b9:76:ed:91:ec:f0:b5:bd:37:ce:7f:
74:fa:3f:c9:66:7a:2a:24:bf:31:d6:1d:ef:a2:a4:
04:7b:9c:29:02:3e:d3:66:3f:48:ea:b3:cf:0a:d0:
a3:e3:dc:66:fe:5f:54:a6:c7:a8:98:1d:ae:b4:3f:
7d:76:94:95:14:5b:47:e1:39:fe:35:58:99:b9:7b:
19:bc:1f:0b:2b:86:b6:82:b1:55:c2:92:9f:7a:77:
d0:e0:14:8d:f9:2e:26:c9:d7:d5:cd:5e:69:e8:12:
46:84:01:d5:d0:c7:5b:80:b7:33:20:94:23:c9:ee:
1f:97:8a:cc:97:ed:9d:f1:b1:49:c9:ce:1f:d9:a5:
e5:c9:1b:89:26:d7:82:bc:06:63:9e:a5:95:1a:97:
cf:f2:39:5e:fe:ab:4e:e5:93:50:72:4a:2d:f0:d6:
fe:96:51:53:a0:a5:f7:c7:ef:13:69:9c:01:c0:94:
f2:c4:8c:19:e8:a6:46:b0:73:66:99:dc:5b:de:e1:
1f:65:41:5c:d4:71:27:93:ac:f8:c3:ac:73:55:7f:
fe:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:35:27:DE:1D:06:55:8A:FC:03:36:77:88:55:77:E8:C0:CB:07:01
X509v3 Authority Key Identifier:
keyid:5E:71:76:27:F7:B2:FC:C5:6F:0D:7B:E4:69:A1:31:71:60:7D:24:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XnF2J_ey_MVvDXvkaaExcWB9JCc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/3d1945-d60e-48ab-88bc-8cfe4b8157d2/1/yDUn3h0GVYr8AzZ3iFV36MDLBwE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/3d1945-d60e-48ab-88bc-8cfe4b8157d2/1/XnF2J_ey_MVvDXvkaaExcWB9JCc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.254.165.0/24
Signature Algorithm: sha256WithRSAEncryption
99:a5:95:7d:51:7c:72:d0:62:a8:7a:23:6e:af:fb:da:9a:ae:
af:a2:e8:c5:c8:22:7d:bb:04:d6:1d:4e:5f:62:99:c4:2e:8e:
fc:e4:ac:de:95:77:7b:79:12:98:9a:40:5b:51:bf:fb:c0:2f:
60:2d:43:50:1f:b3:cd:9a:5c:0d:7d:b2:1e:c1:89:17:20:de:
ea:28:54:41:72:fb:29:b6:9b:1b:96:32:f5:20:1e:95:9a:46:
39:28:be:a3:19:ab:98:b3:bd:e9:fb:5f:83:48:66:36:c9:00:
c0:69:82:4e:b3:d1:57:8e:26:79:3e:fa:7f:a3:51:28:12:6a:
51:38:47:1a:00:a0:3e:22:79:ce:d7:b1:6a:80:cd:65:50:a7:
aa:b8:86:a2:5b:d8:0b:63:e1:a2:54:c3:f7:c2:79:c3:ce:d4:
0a:3c:f6:1d:07:23:ff:58:ef:17:85:cb:c1:6c:d1:31:bf:82:
13:b0:65:cf:c2:9e:63:ea:c6:0a:8e:ef:fe:1b:d0:b6:ab:5a:
2f:31:96:f4:37:8d:e9:10:f6:3c:fa:0b:b1:90:41:f4:fc:1d:
b1:10:19:ed:67:af:40:a3:8d:0c:59:9d:5a:f0:7c:fb:6b:70:
2c:d3:2d:cb:83:c8:99:ec:1c:08:78:20:ee:a6:89:ad:c0:6d:
44:01:a8:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:34:13 2025 by rpki-client