Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/0ac44d-b3be-4277-80f8-58cf89888e2a/1/yn6_FC3ZDlreYvdUbTREjMhfyxs.roa
File: yn6_FC3ZDlreYvdUbTREjMhfyxs.roa (raw, json)
Hash identifier: LlX6Tl5H1KTqy6O3g5CWu69Bs/CP9zvonCRnk8+j/fs=
Subject key identifier: CA:7E:BF:14:2D:D9:0E:5A:DE:62:F7:54:6D:34:44:8C:C8:5F:CB:1B
Certificate issuer: /CN=e56076f27e13d1800e77d16e4b60b23b6f58c820
Certificate serial: 0194258F74BDBBAF9C7846B9E1FFD6496726
Authority key identifier: E5:60:76:F2:7E:13:D1:80:0E:77:D1:6E:4B:60:B2:3B:6F:58:C8:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5WB28n4T0YAOd9FuS2CyO29YyCA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/0ac44d-b3be-4277-80f8-58cf89888e2a/1/yn6_FC3ZDlreYvdUbTREjMhfyxs.roa
Signing time: Thu 02 Jan 2025 05:49:05 +0000
ROA not before: Thu 02 Jan 2025 05:49:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206092
IP address blocks: 109.205.190.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:74:bd:bb:af:9c:78:46:b9:e1:ff:d6:49:67:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e56076f27e13d1800e77d16e4b60b23b6f58c820
Validity
Not Before: Jan 2 05:49:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ca7ebf142dd90e5ade62f7546d34448cc85fcb1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:4d:73:47:42:5f:89:31:a6:16:49:06:a8:73:
49:e7:ea:c7:4a:dc:c0:cc:e8:9d:bd:78:c9:2d:b9:
97:9b:2c:a1:18:c7:95:fe:bb:de:54:86:44:19:f9:
44:3a:a7:4b:1c:bb:1a:e2:46:15:61:62:76:ca:85:
af:f4:49:72:0e:12:32:57:99:96:98:59:5f:21:1c:
d6:69:6c:41:d3:18:d3:85:5f:d7:4e:df:c3:cd:40:
75:e2:35:d0:fb:19:d0:d0:08:6c:32:02:f5:c3:91:
fd:7c:62:b3:a5:35:09:9e:d8:6d:fc:67:e7:c9:9d:
7f:9c:da:b9:b2:0d:df:24:37:84:94:d6:0d:2b:83:
f1:b5:c6:45:8e:fd:bb:55:d0:80:bc:40:9e:95:3a:
f5:76:28:36:bb:72:a3:1e:04:f8:0e:a6:a6:c2:b4:
a9:20:c4:54:9f:b9:36:8d:93:ca:df:e9:55:3e:5c:
be:5c:ea:07:6f:f0:8c:a4:14:93:12:ba:4b:6c:72:
16:e1:9a:ce:2d:b8:18:d7:3e:ca:f8:92:2c:30:cc:
47:87:d4:c3:97:d8:8d:02:a8:af:8c:9a:45:fb:39:
dc:f9:f2:06:98:42:10:d0:b7:b5:2e:33:82:ab:85:
f5:5c:a4:da:76:19:9c:40:6b:4f:fa:af:51:78:66:
8b:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:7E:BF:14:2D:D9:0E:5A:DE:62:F7:54:6D:34:44:8C:C8:5F:CB:1B
X509v3 Authority Key Identifier:
keyid:E5:60:76:F2:7E:13:D1:80:0E:77:D1:6E:4B:60:B2:3B:6F:58:C8:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5WB28n4T0YAOd9FuS2CyO29YyCA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/0ac44d-b3be-4277-80f8-58cf89888e2a/1/yn6_FC3ZDlreYvdUbTREjMhfyxs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/0ac44d-b3be-4277-80f8-58cf89888e2a/1/5WB28n4T0YAOd9FuS2CyO29YyCA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.205.190.0/24
Signature Algorithm: sha256WithRSAEncryption
39:7e:1f:89:73:05:a9:fd:35:67:a4:67:14:bd:05:d6:44:0f:
02:d9:19:70:1b:01:4a:65:36:5d:20:68:d5:33:6e:50:30:c4:
1f:5d:8c:42:3b:51:51:65:4c:ce:00:4f:f1:03:3e:ff:43:97:
bf:1d:0d:f4:dc:00:65:8a:ed:22:d5:4c:f6:a5:16:c3:fb:96:
bd:7e:e7:81:b8:60:d3:ac:d5:33:47:83:7e:d6:aa:fa:46:47:
da:8d:71:92:74:b8:ff:7b:90:19:a5:0d:25:d4:94:d7:f8:74:
0a:b1:68:7d:52:1c:73:25:a9:28:7f:03:55:c2:84:bc:c2:9d:
12:ba:ff:ce:d4:04:7b:85:a6:f0:dd:4e:21:70:85:7a:4a:70:
be:74:d4:27:4d:86:0c:b3:d6:d3:d6:fc:70:d6:75:9c:28:05:
f0:3e:a4:db:3d:5f:db:d7:d3:ef:db:c2:44:9d:8d:8b:32:f4:
d8:31:0f:d2:f2:72:fe:a0:d9:07:c5:cc:6d:98:b6:74:11:77:
2c:27:b3:c3:cf:0b:3c:2c:74:41:41:7b:9a:c4:d6:e1:34:3a:
33:1b:17:99:d7:65:70:e8:e5:d9:f2:79:61:0d:d6:b1:b5:52:
c9:60:03:17:6f:62:4b:dd:8d:36:69:b0:92:32:c1:f3:52:3a:
fe:0d:4a:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:34:59 2025 by rpki-client