Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/yxb4qAopfVWx9tbVX2D9X8-NDPo.roa
File: yxb4qAopfVWx9tbVX2D9X8-NDPo.roa (raw, json)
Hash identifier: SCjFOGOJpyW+e/90L6KJ17UwdzCSiXn/XxCg01egwec=
Subject key identifier: CB:16:F8:A8:0A:29:7D:55:B1:F6:D6:D5:5F:60:FD:5F:CF:8D:0C:FA
Certificate issuer: /CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702
Certificate serial: 019427B601F642AF10C8FC6332B07CAC89D8
Authority key identifier: CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/yxb4qAopfVWx9tbVX2D9X8-NDPo.roa
Signing time: Thu 02 Jan 2025 15:50:26 +0000
ROA not before: Thu 02 Jan 2025 15:50:26 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214526
IP address blocks: 85.133.195.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b6:01:f6:42:af:10:c8:fc:63:32:b0:7c:ac:89:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702
Validity
Not Before: Jan 2 15:50:26 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cb16f8a80a297d55b1f6d6d55f60fd5fcf8d0cfa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:89:3b:fc:66:e7:0a:bb:94:e4:d7:70:31:66:
68:77:ab:5d:97:b3:a1:3b:b6:8e:05:63:04:d1:80:
7f:83:e4:c1:28:f8:c7:4b:54:7b:3a:05:ba:69:a4:
be:60:21:86:0a:d4:9f:d3:a5:dd:a0:46:a9:e2:8a:
fd:8b:cc:4b:d5:2a:fb:a7:2a:5c:1e:fd:a9:fe:6a:
84:d2:ee:44:9f:96:fd:52:99:3c:24:25:22:5a:6d:
3b:0a:2d:66:89:01:92:27:86:70:7f:c1:12:c4:5c:
1c:95:78:51:7b:08:bf:75:56:22:03:2c:37:ee:02:
28:88:33:8e:8b:7b:b9:51:67:67:48:24:9d:5c:01:
2b:6b:2a:e4:0b:44:32:4d:87:b1:b1:8b:f2:07:b8:
2e:cd:0e:60:6c:45:d7:be:f0:da:92:0d:9e:51:ce:
04:69:2d:6a:a2:75:11:c0:9c:02:bd:28:73:73:c8:
c6:e5:16:e2:e0:c7:b5:b1:a7:88:5e:56:aa:77:27:
5a:b4:34:c5:20:ae:02:77:4b:88:b4:39:df:9d:c6:
b5:c1:4a:b9:79:a3:d4:65:c7:4c:5f:91:ee:26:dc:
c4:79:1d:00:b2:4b:ae:64:08:e2:21:e0:cf:75:61:
97:63:7b:6f:84:33:34:7b:7a:b1:c0:d8:70:da:ff:
db:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:16:F8:A8:0A:29:7D:55:B1:F6:D6:D5:5F:60:FD:5F:CF:8D:0C:FA
X509v3 Authority Key Identifier:
keyid:CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/yxb4qAopfVWx9tbVX2D9X8-NDPo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.133.195.0/24
Signature Algorithm: sha256WithRSAEncryption
69:4c:87:27:3d:61:57:71:06:df:41:d1:ca:2e:a4:83:ef:40:
70:3d:0f:a6:e5:a0:6d:39:f7:52:01:4d:e0:70:ee:dc:18:d0:
79:e6:97:f2:cf:4a:7a:c5:16:fc:ad:60:fc:f9:4a:70:5c:e5:
3f:fe:05:02:4b:f3:6a:41:c4:8c:b4:13:91:b7:3b:c8:f8:58:
0c:34:c3:c6:44:33:02:44:1a:1c:14:22:92:21:35:78:11:78:
a3:93:6f:3a:81:9e:c7:4c:4f:5d:fe:08:a5:d1:10:26:6d:f0:
18:13:3a:bc:0d:39:0d:bc:95:d4:11:9a:b6:6a:80:9d:97:21:
4a:07:f9:96:bc:fe:dd:0e:0d:64:21:55:d0:39:c5:50:ee:46:
30:00:d9:48:1a:69:44:ce:ef:d9:10:88:87:29:b7:50:8a:23:
61:1b:3c:bd:d1:4c:13:e1:c0:79:de:fe:31:3a:02:8c:d6:82:
d3:9b:c4:0c:1a:ce:ef:6a:44:58:2a:49:41:81:93:f9:71:13:
c5:22:f0:59:70:38:f6:bf:ab:ad:01:8d:94:11:9f:e6:7d:78:
6d:b8:0f:09:01:98:e3:9b:b4:68:cc:57:c7:7a:92:fe:22:c7:
e8:d3:c6:ca:08:0e:73:f2:e0:f1:cd:56:a5:db:15:cd:b2:56:
6c:55:32:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:29:30 2025 by rpki-client