Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/a94dea-2ffc-408d-aa9d-1ae36a4469fd/1/y-vKKwMZ-Jm1IyyKOX5h3UFOkJs.roa
File: y-vKKwMZ-Jm1IyyKOX5h3UFOkJs.roa (raw, json)
Hash identifier: TREazVziiS/zSuZ98yUE1lCBdvTaOvsRUmgllHq3JrQ=
Subject key identifier: CB:EB:CA:2B:03:19:F8:99:B5:23:2C:8A:39:7E:61:DD:41:4E:90:9B
Certificate issuer: /CN=ab06c8f2247d22041c82e555667881e50f9154ab
Certificate serial: 0194266A131F753B1DC7112A8E49674146AC
Authority key identifier: AB:06:C8:F2:24:7D:22:04:1C:82:E5:55:66:78:81:E5:0F:91:54:AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qwbI8iR9IgQcguVVZniB5Q-RVKs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/a94dea-2ffc-408d-aa9d-1ae36a4469fd/1/y-vKKwMZ-Jm1IyyKOX5h3UFOkJs.roa
Signing time: Thu 02 Jan 2025 09:47:53 +0000
ROA not before: Thu 02 Jan 2025 09:47:53 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48821
IP address blocks: 45.159.32.0/22 maxlen: 24
185.138.52.0/22 maxlen: 24
2a07:a40::/29 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6a:13:1f:75:3b:1d:c7:11:2a:8e:49:67:41:46:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab06c8f2247d22041c82e555667881e50f9154ab
Validity
Not Before: Jan 2 09:47:53 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cbebca2b0319f899b5232c8a397e61dd414e909b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:1d:71:95:a0:e5:52:b0:ff:29:ef:61:c9:57:
e4:d9:d6:e7:36:9b:51:86:34:4a:5d:63:ef:21:e4:
68:4b:14:d2:77:04:4a:96:8b:b2:c7:d3:66:75:ab:
e6:3e:54:df:9f:f4:22:ec:92:d2:5a:2d:ea:69:8f:
7c:8f:65:38:04:a7:e4:e1:05:f7:4a:50:c6:4e:df:
40:72:e4:ca:0d:78:8d:5d:6a:cb:90:a8:c5:e7:68:
ee:ef:8c:a5:73:0b:e1:8e:1a:b5:95:34:26:37:e8:
d4:76:5a:2b:a2:e1:1b:84:b0:fb:3b:78:d9:8f:56:
55:8c:e4:2f:99:7b:ab:77:e2:67:51:cb:f5:ec:f5:
4e:36:e4:a7:7a:a0:a1:76:3a:75:ee:2a:29:1a:4e:
f9:aa:ab:1e:de:42:a5:da:ff:b7:c5:aa:a0:16:02:
3e:74:fb:ce:46:12:0c:ef:a4:76:44:11:7b:c3:7c:
ba:7f:3c:25:74:36:ae:6c:b6:db:f9:fd:66:f1:f2:
56:d6:66:1c:01:a1:d5:e4:9e:89:27:e6:a0:2e:59:
b9:ef:44:40:a8:f9:db:61:55:97:1c:6f:82:93:89:
76:fd:54:dd:64:37:26:a6:59:ef:db:e0:5c:37:06:
2c:cb:93:ea:0a:a2:56:94:a2:10:8d:e1:9b:da:93:
1d:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:EB:CA:2B:03:19:F8:99:B5:23:2C:8A:39:7E:61:DD:41:4E:90:9B
X509v3 Authority Key Identifier:
keyid:AB:06:C8:F2:24:7D:22:04:1C:82:E5:55:66:78:81:E5:0F:91:54:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qwbI8iR9IgQcguVVZniB5Q-RVKs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/a94dea-2ffc-408d-aa9d-1ae36a4469fd/1/y-vKKwMZ-Jm1IyyKOX5h3UFOkJs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/a94dea-2ffc-408d-aa9d-1ae36a4469fd/1/qwbI8iR9IgQcguVVZniB5Q-RVKs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.159.32.0/22
185.138.52.0/22
IPv6:
2a07:a40::/29
Signature Algorithm: sha256WithRSAEncryption
36:4f:2f:f1:8c:bf:1f:5c:41:a9:87:a8:67:cb:d9:ae:30:00:
98:de:03:3c:d4:d7:93:c6:a5:b9:1f:61:ef:0f:9d:4e:09:68:
44:62:7d:9b:70:3d:e8:c9:5e:32:bf:b6:df:71:6d:d7:52:4b:
6b:09:3b:de:ae:7d:bb:89:29:c5:6c:e7:92:fd:3b:24:c8:f8:
01:fb:b1:9b:62:9f:2f:b1:32:4e:7d:11:a9:8a:4d:c6:08:8d:
c3:0f:a1:aa:ac:61:31:d2:b5:ac:2d:58:ad:5f:92:9d:67:92:
df:52:f4:32:3e:bb:15:c6:73:24:6b:dc:32:ae:67:d7:5f:35:
36:ba:22:49:8e:0a:07:7a:48:ed:72:99:11:b2:8c:b3:98:2a:
81:df:61:ab:ba:54:b8:34:70:4c:44:6a:3d:87:36:6f:77:9d:
37:b4:5e:2b:59:4f:7e:0b:c4:57:1d:d6:28:a3:dc:ce:f2:83:
0c:ff:9f:21:29:c6:78:28:53:98:89:53:6a:7f:ec:e8:92:01:
02:18:5f:70:d7:90:37:36:f2:2f:82:5a:97:75:f7:f7:03:86:
f7:da:43:b7:55:b2:ba:25:fa:11:13:00:ba:dc:21:a4:de:41:
f5:41:de:72:a8:36:04:df:2d:06:ae:6f:b3:4c:eb:d1:a0:c9:
67:31:7b:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:16:03 2025 by rpki-client