Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/Ygs0SITtP_d6tt9StaygNBz9nn0.roa
File: Ygs0SITtP_d6tt9StaygNBz9nn0.roa (raw, json)
Hash identifier: 3TTvAzBJeQkzHT+UMtwhSKoirQ5iUSHUXIkZy0K1h44=
Subject key identifier: 62:0B:34:48:84:ED:3F:F7:7A:B6:DF:52:B5:AC:A0:34:1C:FD:9E:7D
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 0194222047B550A589D6192980E9E9CD4B7B
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/Ygs0SITtP_d6tt9StaygNBz9nn0.roa
Signing time: Wed 01 Jan 2025 13:48:48 +0000
ROA not before: Wed 01 Jan 2025 13:48:48 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210472
IP address blocks: 194.26.172.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:20:47:b5:50:a5:89:d6:19:29:80:e9:e9:cd:4b:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Jan 1 13:48:48 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=620b344884ed3ff77ab6df52b5aca0341cfd9e7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:35:47:7a:2d:f7:6f:df:59:1a:19:3b:ff:90:
d0:f5:5d:c9:8e:57:f5:71:5c:52:43:e3:21:ed:7e:
bd:5d:03:2b:00:29:9d:95:81:10:98:7a:c2:5f:92:
88:a4:78:d1:67:d5:ed:96:3c:77:9e:b0:a3:e2:64:
69:c2:d6:43:60:2c:9f:ed:36:6f:6e:8f:c4:d9:52:
f9:4c:51:c9:28:c2:a5:96:59:b7:cc:48:d2:e7:e1:
9d:7d:ec:06:e2:d0:ad:85:f4:99:12:2a:62:18:f0:
1b:d1:05:52:18:bf:50:ca:85:d4:6c:a7:12:d1:a1:
ac:c2:02:be:3b:2e:5a:e5:f8:41:f2:ac:5e:31:06:
65:83:f0:9b:d3:6c:eb:25:3e:70:7c:88:ec:3c:46:
ee:7f:c9:ff:af:ab:2a:f6:83:75:50:a0:37:cd:5d:
3a:44:02:6a:74:0e:5f:be:3b:dc:aa:5d:f2:94:2e:
8b:58:e8:c6:f4:d6:9f:93:f1:f3:6e:e9:6a:66:93:
b5:d7:59:4e:ff:c7:da:40:13:f8:cd:11:1f:cb:b2:
77:20:4e:ff:45:eb:df:b9:80:57:38:93:a0:1e:c0:
fa:f6:84:f3:63:3e:7e:08:4b:4c:ba:bf:47:91:b7:
a5:11:11:5f:95:93:f2:50:a4:81:45:0d:3b:d6:c6:
09:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:0B:34:48:84:ED:3F:F7:7A:B6:DF:52:B5:AC:A0:34:1C:FD:9E:7D
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/Ygs0SITtP_d6tt9StaygNBz9nn0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.26.172.0/23
Signature Algorithm: sha256WithRSAEncryption
ac:81:39:3c:55:86:31:be:9b:d6:15:20:66:ba:99:df:d3:0d:
10:97:e5:31:0d:31:d3:1d:fb:83:9e:ff:c4:fd:d9:59:2e:bd:
ff:cf:29:74:43:9b:ae:13:a4:47:64:74:b1:38:9e:14:9b:28:
d0:af:c0:2c:3e:24:97:f5:9c:e9:85:3d:f0:54:07:39:1c:15:
cf:94:71:4e:7c:0b:e8:88:78:37:9d:f4:ee:75:25:d2:d9:e8:
d0:7e:fc:16:32:60:34:3b:7b:fc:45:7b:b8:02:0e:9f:ac:34:
28:e4:57:99:22:26:d8:f7:a5:8b:c7:0b:f7:b4:84:68:fa:90:
0f:85:1d:6d:14:cb:d0:ea:fe:88:d1:af:70:f7:4a:35:8c:43:
1c:ce:02:2b:0d:55:03:38:99:63:8a:4a:54:4d:19:2e:2e:97:
db:98:6c:6e:3a:8c:81:4e:3f:a9:60:dc:59:5b:5a:ab:d4:04:
a6:5d:13:30:66:93:9d:76:24:3e:bc:53:fd:47:2c:da:21:34:
20:2e:6f:fe:f5:18:7d:7b:be:3e:45:08:d8:4f:2c:99:21:7e:
fd:f1:a7:2c:c7:34:84:43:6f:91:e8:71:ee:60:ff:b6:9c:23:
d2:7c:c4:49:f8:b1:61:79:c0:14:82:a3:6d:78:a8:6b:ea:7a:
e0:e6:50:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 09:30:55 2025 by rpki-client