Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/9d8427-8e60-4429-84b3-345d064da7bf/1/YteYh8gLfdCtQ6bARTRfKjMgZiY.roa
File: YteYh8gLfdCtQ6bARTRfKjMgZiY.roa (raw, json)
Hash identifier: O6BkULbqDR2DY1kxTz+NhOETOrejdIOQ2SKweyuSWLg=
Subject key identifier: 62:D7:98:87:C8:0B:7D:D0:AD:43:A6:C0:45:34:5F:2A:33:20:66:26
Certificate issuer: /CN=34a9eb6c4d3a57c9a56456ddbf0012b81750b1d3
Certificate serial: 018570704182D98A1100E83996F1B198A678
Authority key identifier: 34:A9:EB:6C:4D:3A:57:C9:A5:64:56:DD:BF:00:12:B8:17:50:B1:D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NKnrbE06V8mlZFbdvwASuBdQsdM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/9d8427-8e60-4429-84b3-345d064da7bf/1/YteYh8gLfdCtQ6bARTRfKjMgZiY.roa
Signing time: Mon 02 Jan 2023 03:04:43 +0000
ROA not before: Mon 02 Jan 2023 03:04:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44477
IP address blocks: 185.138.164.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:70:41:82:d9:8a:11:00:e8:39:96:f1:b1:98:a6:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34a9eb6c4d3a57c9a56456ddbf0012b81750b1d3
Validity
Not Before: Jan 2 03:04:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=62d79887c80b7dd0ad43a6c045345f2a33206626
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:f1:15:7d:d8:23:9e:2f:46:eb:13:95:63:19:
bb:58:1f:d8:c2:2f:bf:0a:7f:6a:85:f9:51:f5:13:
6f:4b:8d:10:82:de:9d:12:b4:e3:f8:43:f4:28:93:
83:8e:58:25:3a:4b:50:5c:ca:0f:45:0f:e6:45:23:
c8:a5:d3:c1:03:81:4a:db:98:8f:da:2c:b2:59:bb:
07:2b:04:4d:ef:b4:56:ef:9d:e2:c1:31:f6:70:aa:
23:0d:c6:95:11:a2:75:db:39:4c:ea:68:65:1c:0f:
38:e7:28:06:dc:4e:3c:b4:74:d2:29:60:bf:9d:c8:
97:ba:70:79:9c:c2:87:e9:4b:c6:1f:76:2f:8a:cb:
6d:e7:52:32:e6:c6:8e:5d:f8:20:fa:99:a0:34:8c:
f4:14:0a:7c:62:94:06:c5:1c:ca:5e:6a:a4:47:81:
25:25:d3:50:fb:23:98:1b:3c:e0:6e:62:a5:1d:08:
c7:39:4b:5c:86:c3:99:61:5f:10:e9:8f:b5:98:81:
1b:46:a0:f8:6e:f0:cd:70:72:2e:9f:87:9f:5a:da:
2f:55:6a:fb:ef:48:79:80:75:84:c1:90:a2:f1:56:
a1:36:ca:ab:de:af:c5:30:4d:b3:16:fe:c4:c2:b9:
be:7b:5e:f5:e9:74:97:90:2a:50:89:f0:46:8e:09:
eb:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:D7:98:87:C8:0B:7D:D0:AD:43:A6:C0:45:34:5F:2A:33:20:66:26
X509v3 Authority Key Identifier:
keyid:34:A9:EB:6C:4D:3A:57:C9:A5:64:56:DD:BF:00:12:B8:17:50:B1:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NKnrbE06V8mlZFbdvwASuBdQsdM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/9d8427-8e60-4429-84b3-345d064da7bf/1/YteYh8gLfdCtQ6bARTRfKjMgZiY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/9d8427-8e60-4429-84b3-345d064da7bf/1/NKnrbE06V8mlZFbdvwASuBdQsdM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.138.164.0/24
Signature Algorithm: sha256WithRSAEncryption
20:d9:6b:49:27:23:68:f3:ea:4d:d4:91:38:d2:bc:2a:fe:26:
ec:c7:fe:8d:1b:ab:1e:86:c7:b8:42:6b:16:09:a8:5f:00:08:
00:b8:fe:32:70:f8:a1:91:be:00:94:95:f2:96:df:c8:ea:a0:
c3:2a:9f:2e:00:85:da:4d:48:3f:b4:79:50:bd:e6:20:99:8a:
82:ed:24:93:62:b8:5a:25:87:67:61:c2:5f:e2:02:92:f1:26:
66:7e:ac:b1:a8:f4:02:5f:ef:f7:2c:28:60:9e:af:40:7d:66:
48:ca:cb:76:f5:05:f0:74:f3:91:f4:b6:c3:94:64:cd:fe:5a:
80:43:f4:d3:9e:fb:cd:4f:b8:2f:ec:97:5e:7c:2b:39:c1:a8:
0e:e1:df:10:84:34:ee:f7:a1:eb:92:cc:bf:5d:01:04:01:95:
59:99:23:25:da:35:7f:70:bd:13:d7:8f:28:28:1b:15:d4:78:
6d:bc:3b:33:70:2f:40:f9:39:82:0f:66:7e:06:d4:f8:db:fe:
66:3a:2a:02:d8:de:52:63:d9:20:7d:87:2d:7e:fb:65:76:51:
40:87:68:e1:96:9a:62:90:64:a9:d7:30:cc:21:de:f7:24:bc:
e5:24:f1:45:48:d4:7a:2e:7d:55:fc:a1:19:f9:31:f0:b9:c0:
e0:f9:e7:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 07:05:13 2025 by rpki-client