Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/YHtiicDuKaKICo_338QHIY-WURQ.roa
File: YHtiicDuKaKICo_338QHIY-WURQ.roa (raw, json)
Hash identifier: 5hGNxbAVxcDjkeLlgQQCy72hmezisxhEttK4WwY4DWc=
Subject key identifier: 60:7B:62:89:C0:EE:29:A2:88:0A:8F:F7:DF:C4:07:21:8F:96:51:14
Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial: 019427484B512FC75F682752E072081A6F57
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/YHtiicDuKaKICo_338QHIY-WURQ.roa
Signing time: Thu 02 Jan 2025 13:50:36 +0000
ROA not before: Thu 02 Jan 2025 13:50:36 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 31800
IP address blocks: 194.14.236.0/24 maxlen: 24
194.68.45.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:4b:51:2f:c7:5f:68:27:52:e0:72:08:1a:6f:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Validity
Not Before: Jan 2 13:50:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=607b6289c0ee29a2880a8ff7dfc407218f965114
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:26:93:8d:ed:40:df:dc:ba:35:f2:df:3c:8a:
1b:c6:53:98:52:ba:6e:25:f7:92:00:88:88:39:5d:
5f:e3:2a:ed:61:26:ec:04:05:a9:36:f6:33:0e:39:
6b:57:ef:58:8e:9f:46:31:a9:a3:c0:20:38:ab:d6:
33:56:2a:79:c7:50:be:70:d1:ff:10:ba:df:2b:d5:
57:5b:e3:fb:9b:18:13:86:74:b5:eb:43:08:1e:48:
4d:1d:0e:17:c8:5c:c9:9c:6a:d1:f6:16:3f:1b:0b:
88:46:18:b3:f5:56:ed:90:ac:2e:ff:25:2e:54:0f:
dd:86:d5:d3:b5:5c:f1:a8:7d:25:25:30:81:01:56:
63:62:3e:fb:57:ad:97:95:64:37:fd:2d:dc:cc:7f:
9c:02:da:e0:8f:bd:b4:18:fb:83:d6:22:00:39:ec:
5a:76:ff:f5:e9:78:3a:85:7a:cb:4d:4c:f1:9c:25:
fa:4c:03:2a:cc:65:10:87:a9:37:55:6c:90:29:86:
53:50:b9:ff:9b:f5:7e:2b:29:5e:7c:7b:12:4a:4d:
b3:06:73:9c:79:1f:f4:7b:61:d6:d0:be:c5:2a:0f:
b5:69:9d:a7:b1:1b:e4:33:0d:15:31:df:d1:22:e7:
62:c1:e7:a7:f1:a9:1a:d7:da:64:dc:16:69:cd:eb:
20:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:7B:62:89:C0:EE:29:A2:88:0A:8F:F7:DF:C4:07:21:8F:96:51:14
X509v3 Authority Key Identifier:
keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/YHtiicDuKaKICo_338QHIY-WURQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.14.236.0/24
194.68.45.0/24
Signature Algorithm: sha256WithRSAEncryption
ca:97:05:19:bf:ef:18:ff:6a:8e:17:bc:68:67:56:cc:d9:10:
69:17:d2:58:8e:a7:2b:af:4d:28:45:82:bd:0d:ee:76:34:a5:
16:5a:7d:0c:57:7d:cb:e5:21:ac:22:57:0d:66:3f:95:60:58:
87:0b:19:57:70:70:0b:53:79:ee:c3:14:0e:9a:cd:01:12:42:
82:d8:3a:e1:6f:c6:81:2c:0c:13:70:32:b8:ba:13:45:8d:26:
6c:cf:ce:51:5b:e5:b8:da:29:48:cd:d1:94:8a:1b:c9:2d:f3:
ae:b5:3d:0c:d4:42:7f:88:79:33:ac:8f:6d:fb:b5:78:f6:90:
8e:5a:c4:3c:f6:3e:06:bc:cd:90:f2:26:e0:aa:65:0e:87:bd:
46:82:32:4f:70:f0:fe:34:5a:92:f5:38:70:bd:e7:a2:5b:fc:
63:f1:37:8f:52:cb:a3:47:d0:5e:d9:66:aa:95:8b:45:f6:8a:
d4:a6:66:26:36:b5:66:bc:3f:ae:d2:9e:e1:af:23:54:de:ad:
43:c7:93:08:60:48:ab:9f:65:12:59:1d:8f:a7:07:4e:f8:52:
10:f5:fb:66:22:4a:5e:72:d5:92:dc:66:9b:d3:4c:f4:37:d5:
47:ea:7b:f6:8d:25:c9:5f:d6:c1:0d:ef:79:6e:42:3d:b1:c4:
de:af:85:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 21:57:21 2025 by rpki-client