Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/66578f-e8bf-40e0-ab30-a4c128075862/1/Y2PRIXlvoLUvaJRI_Do9j4XcqPk.roa
File: Y2PRIXlvoLUvaJRI_Do9j4XcqPk.roa (raw, json)
Hash identifier: 5PYmU1FMb9SDbJhCU1KiV8VGC7stgGinp2hnu0BY1I0=
Subject key identifier: 63:63:D1:21:79:6F:A0:B5:2F:68:94:48:FC:3A:3D:8F:85:DC:A8:F9
Certificate issuer: /CN=27391ae28a91d5991346aedaf17bf8605c8cf22e
Certificate serial: 01942144500560E525B20233A4509910D7AC
Authority key identifier: 27:39:1A:E2:8A:91:D5:99:13:46:AE:DA:F1:7B:F8:60:5C:8C:F2:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jzka4oqR1ZkTRq7a8Xv4YFyM8i4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/66578f-e8bf-40e0-ab30-a4c128075862/1/Y2PRIXlvoLUvaJRI_Do9j4XcqPk.roa
Signing time: Wed 01 Jan 2025 09:48:32 +0000
ROA not before: Wed 01 Jan 2025 09:48:32 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50252
IP address blocks: 194.102.140.0/23 maxlen: 23
194.102.140.0/24 maxlen: 24
194.102.141.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:44:50:05:60:e5:25:b2:02:33:a4:50:99:10:d7:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27391ae28a91d5991346aedaf17bf8605c8cf22e
Validity
Not Before: Jan 1 09:48:32 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6363d121796fa0b52f689448fc3a3d8f85dca8f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:a6:e2:90:45:f9:45:08:a6:27:80:85:d9:57:
76:e6:11:2f:af:22:fb:fc:63:78:c0:88:07:60:de:
66:f7:37:98:7a:40:43:6b:11:bc:4c:55:7b:6f:da:
5f:ad:f1:1a:5b:8c:32:e0:6e:ba:c4:80:e5:d7:52:
27:ce:4a:e8:7e:02:f0:03:9a:d1:55:f6:19:d5:c4:
be:71:f1:86:58:10:81:f0:43:dc:ac:b0:de:a8:70:
aa:92:3b:42:2b:84:7f:a6:9f:81:d9:c4:b5:a3:ef:
4d:e9:20:90:17:76:21:d7:ea:6e:ee:7f:02:b9:a0:
30:c5:a4:45:52:fa:41:3d:76:0f:a3:a5:8c:aa:3e:
1f:25:ed:4d:ed:89:21:4b:d3:51:31:6c:1b:e3:9a:
90:69:0d:11:88:97:33:4c:2d:2a:c8:21:46:12:8d:
9c:6a:14:e0:3c:04:8c:1a:e7:53:ac:f5:ce:15:2d:
49:5b:9d:49:e6:34:f8:db:1c:20:2e:1e:e3:87:df:
56:31:79:10:38:8d:a8:f0:cc:f9:7f:6b:10:a5:f5:
fb:3c:ad:5a:c6:43:d5:74:2a:98:4d:77:cb:6c:70:
e0:d0:28:a9:dd:31:2f:5e:b2:41:5d:47:03:4a:af:
d0:8c:50:99:42:fc:85:5a:31:8d:aa:82:a2:0b:43:
08:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:63:D1:21:79:6F:A0:B5:2F:68:94:48:FC:3A:3D:8F:85:DC:A8:F9
X509v3 Authority Key Identifier:
keyid:27:39:1A:E2:8A:91:D5:99:13:46:AE:DA:F1:7B:F8:60:5C:8C:F2:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jzka4oqR1ZkTRq7a8Xv4YFyM8i4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/66578f-e8bf-40e0-ab30-a4c128075862/1/Y2PRIXlvoLUvaJRI_Do9j4XcqPk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/66578f-e8bf-40e0-ab30-a4c128075862/1/Jzka4oqR1ZkTRq7a8Xv4YFyM8i4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.102.140.0/23
Signature Algorithm: sha256WithRSAEncryption
2a:34:7f:d6:67:75:95:be:8d:32:ff:6b:fb:05:e0:2f:73:9d:
d9:13:60:65:7c:46:9d:0c:62:0d:aa:8a:c6:00:7e:1d:d5:a9:
6c:21:c4:30:8c:e0:b9:eb:85:dd:cd:48:f3:77:7a:15:c2:ec:
a5:f3:fa:b9:45:72:e6:35:f8:93:37:0b:0b:fd:e5:fb:49:c0:
32:da:8d:11:dc:f2:8b:e2:57:8f:4b:d4:9a:c6:a3:d5:98:98:
a8:2b:b8:8f:83:73:3b:0a:4f:73:74:72:7c:9e:19:fa:50:21:
09:be:35:d8:79:9a:32:7a:84:59:f6:32:40:f4:78:29:dd:f0:
17:4f:71:88:43:b5:a9:1a:58:56:b1:2a:64:87:c8:c4:a4:b1:
8c:95:97:c2:c0:e7:41:cb:ef:59:93:ad:7c:5e:42:42:a1:12:
a7:8b:30:9d:22:29:ed:a9:c5:42:01:eb:a7:8c:64:ff:b2:47:
3a:36:18:ef:a8:52:ad:69:df:be:52:da:fc:ac:0b:84:5e:d7:
3f:b9:3d:49:65:42:70:75:f0:7c:7a:a5:cc:64:f5:79:62:66:
8c:5f:5b:09:39:f9:89:2e:8e:f0:44:c0:02:ca:74:1e:cc:cb:
fc:7f:66:4b:9a:8b:43:b9:ac:62:f6:fe:99:0b:ff:5b:6f:11:
13:70:0b:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 09:11:05 2025 by rpki-client