Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/YMY8SkwxP4m-8h-3OwtOnhDx180.roa
File: YMY8SkwxP4m-8h-3OwtOnhDx180.roa (raw, json)
Hash identifier: PqKx3y2u4bSihph2gbhVet/cNiHB7Rg66rh7uA+7Zwk=
Subject key identifier: 60:C6:3C:4A:4C:31:3F:89:BE:F2:1F:B7:3B:0B:4E:9E:10:F1:D7:CD
Certificate issuer: /CN=72b78f6682fc39c55b41d48f80b8838d5d2dbf07
Certificate serial: 019425FCE19B2CFF3BE03E37B0C86408C8F7
Authority key identifier: 72:B7:8F:66:82:FC:39:C5:5B:41:D4:8F:80:B8:83:8D:5D:2D:BF:07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/crePZoL8OcVbQdSPgLiDjV0tvwc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/YMY8SkwxP4m-8h-3OwtOnhDx180.roa
Signing time: Thu 02 Jan 2025 07:48:37 +0000
ROA not before: Thu 02 Jan 2025 07:48:37 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 46450
IP address blocks: 94.154.183.0/24 maxlen: 24
162.218.95.0/24 maxlen: 24
2a07:c6c0:9::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fc:e1:9b:2c:ff:3b:e0:3e:37:b0:c8:64:08:c8:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72b78f6682fc39c55b41d48f80b8838d5d2dbf07
Validity
Not Before: Jan 2 07:48:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=60c63c4a4c313f89bef21fb73b0b4e9e10f1d7cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:8b:81:93:26:2f:1b:c8:16:e5:34:79:26:1e:
5a:d7:fd:da:d7:cf:63:62:d4:7a:74:83:d8:9f:38:
89:36:8a:cb:97:97:e5:db:a6:f4:9a:91:32:76:cd:
62:14:f8:31:5c:af:31:53:57:ce:92:78:18:cb:8e:
cd:61:28:1d:e0:27:9a:67:58:41:21:ad:24:5d:01:
28:f3:60:67:b6:af:a1:5e:83:d9:fe:e9:76:9b:50:
1a:b5:7f:7d:61:6e:ef:90:69:13:3c:74:83:af:40:
b1:75:84:c1:31:36:36:aa:9c:6e:fb:0b:b1:9e:35:
0b:93:d3:af:59:69:d5:5f:99:fa:4e:6c:70:ee:fe:
07:71:04:ba:63:b1:90:97:09:b5:10:8e:9a:cf:fb:
08:bc:1a:b7:39:6e:a7:46:ff:33:25:52:c9:62:41:
77:02:f7:10:c9:15:a9:8a:f7:f4:cb:ac:e1:24:c4:
27:f4:9e:e8:9b:35:ec:36:fe:92:0d:4d:54:6e:41:
cd:5c:db:cd:f3:50:fb:46:dc:a7:d7:5e:90:ec:a4:
c1:f1:00:8e:65:08:eb:14:e2:82:b8:b6:37:b2:88:
89:1d:1d:5a:ed:35:55:a6:7e:9f:97:77:e7:80:d9:
7f:64:b8:fd:0d:55:0b:0c:4f:a5:cc:52:a4:24:fb:
ef:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:C6:3C:4A:4C:31:3F:89:BE:F2:1F:B7:3B:0B:4E:9E:10:F1:D7:CD
X509v3 Authority Key Identifier:
keyid:72:B7:8F:66:82:FC:39:C5:5B:41:D4:8F:80:B8:83:8D:5D:2D:BF:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/crePZoL8OcVbQdSPgLiDjV0tvwc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/YMY8SkwxP4m-8h-3OwtOnhDx180.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.154.183.0/24
162.218.95.0/24
IPv6:
2a07:c6c0:9::/48
Signature Algorithm: sha256WithRSAEncryption
24:22:aa:80:31:c4:00:39:f7:bc:24:f4:d8:0b:20:70:7f:3b:
d8:a1:c7:65:a9:05:25:1f:fd:8c:c9:9e:32:ca:6e:03:9c:ed:
17:9a:49:cf:0a:ff:81:d4:69:c4:07:71:6f:b0:7a:dc:9e:bb:
50:cf:86:9d:02:92:3e:8b:8b:b3:b6:67:91:8e:e3:72:3b:a6:
d9:d8:52:89:96:7c:01:ae:14:15:e9:cd:11:a6:56:5f:05:50:
12:b2:1e:ab:04:61:cc:02:c4:9d:e1:2c:7b:5a:50:f5:19:17:
86:98:ed:5b:91:7c:a3:92:b4:a1:78:47:56:e8:eb:2c:ac:bd:
ca:e5:3e:a9:8b:22:24:e9:b7:9a:64:a3:df:3e:5a:91:0c:71:
a8:f1:39:8c:2c:fc:7c:8e:3b:d3:e6:c9:f7:57:3e:b0:d3:03:
13:27:ea:17:eb:bc:20:54:9c:e4:68:7b:c7:97:96:bf:03:a4:
f3:e1:d5:39:e7:93:34:25:04:89:67:ff:46:77:f4:bc:30:84:
84:04:ce:c6:35:57:ca:8f:34:46:aa:8b:17:1f:e4:fb:52:0b:
14:ab:90:8c:bc:86:33:6e:28:f4:37:7e:83:5c:61:51:9e:7b:
08:e3:1b:16:a3:78:46:76:ea:02:25:b1:30:4c:36:7b:e0:ca:
2e:78:6b:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 09:40:57 2025 by rpki-client