Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/2ef0f1-5082-48df-94fe-f7531a2b6247/1/yP_xOjInkHSElpUI3rCkgbnGJ60.roa
File: yP_xOjInkHSElpUI3rCkgbnGJ60.roa (raw, json)
Hash identifier: v6o5sFYBHNMjcWw6SsKfp7iLE+k+lZNrA8DPpUYvYb0=
Subject key identifier: C8:FF:F1:3A:32:27:90:74:84:96:95:08:DE:B0:A4:81:B9:C6:27:AD
Certificate issuer: /CN=075fdb0de4051347a21e9628ac41736734cb4f2b
Certificate serial: 019423D6CFF21EACC56322454B830D85BA78
Authority key identifier: 07:5F:DB:0D:E4:05:13:47:A2:1E:96:28:AC:41:73:67:34:CB:4F:2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B1_bDeQFE0eiHpYorEFzZzTLTys.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/2ef0f1-5082-48df-94fe-f7531a2b6247/1/yP_xOjInkHSElpUI3rCkgbnGJ60.roa
Signing time: Wed 01 Jan 2025 21:47:47 +0000
ROA not before: Wed 01 Jan 2025 21:47:47 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 25400
IP address blocks: 79.174.16.0/24 maxlen: 24
194.146.8.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d6:cf:f2:1e:ac:c5:63:22:45:4b:83:0d:85:ba:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=075fdb0de4051347a21e9628ac41736734cb4f2b
Validity
Not Before: Jan 1 21:47:47 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c8fff13a3227907484969508deb0a481b9c627ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:a3:0b:3c:5c:23:25:74:60:9c:da:c4:74:b5:
b9:28:4a:d6:3e:6f:2a:d5:f7:8f:83:75:86:a3:15:
c7:72:71:c6:c6:a8:e3:09:c3:b7:7b:12:cb:cd:2e:
dd:0a:10:74:7a:5c:a6:bd:31:cf:09:0e:f4:d1:29:
40:57:8d:99:e5:c8:e7:2e:71:d5:2e:d1:8e:55:fa:
75:2a:25:37:9f:ab:3d:d3:8c:5f:bf:e1:31:57:be:
6f:4e:8c:c1:23:af:12:1a:87:49:1e:63:7e:f9:8f:
a7:9e:a4:c1:32:71:9e:7c:05:33:85:fb:fa:a2:8e:
dc:d0:57:a1:76:e8:86:cf:b2:f1:ff:12:25:5b:94:
d2:d6:a4:cd:4f:16:cb:cb:53:1b:eb:c9:b0:c1:6c:
7c:10:aa:ee:3b:99:b6:c9:a7:2d:30:ab:5c:b0:4b:
39:aa:f3:96:1f:39:9c:16:2d:50:21:a7:d4:07:db:
f7:e4:e8:aa:63:4a:59:82:b2:10:6d:68:80:e2:3b:
57:39:80:a4:33:2b:af:b0:a6:75:58:40:7f:63:e2:
b1:de:f0:04:d8:44:75:17:66:f7:cd:73:fc:23:3c:
ed:e9:a5:65:86:60:e1:d3:c4:19:b4:f4:52:ea:b1:
f1:4a:aa:1f:9e:b2:6e:e8:38:65:f2:c4:4f:aa:df:
36:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:FF:F1:3A:32:27:90:74:84:96:95:08:DE:B0:A4:81:B9:C6:27:AD
X509v3 Authority Key Identifier:
keyid:07:5F:DB:0D:E4:05:13:47:A2:1E:96:28:AC:41:73:67:34:CB:4F:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B1_bDeQFE0eiHpYorEFzZzTLTys.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/2ef0f1-5082-48df-94fe-f7531a2b6247/1/yP_xOjInkHSElpUI3rCkgbnGJ60.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/2ef0f1-5082-48df-94fe-f7531a2b6247/1/B1_bDeQFE0eiHpYorEFzZzTLTys.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.174.16.0/24
194.146.8.0/22
Signature Algorithm: sha256WithRSAEncryption
17:02:d8:8c:7c:93:d7:da:e1:96:6b:a2:34:aa:06:5c:7f:d4:
9c:4c:dc:25:69:e7:b0:5e:47:78:fe:83:07:d4:fe:7b:cf:a1:
01:84:4d:21:a0:a2:53:3b:55:fb:9c:9a:e7:fc:bc:a6:ce:cf:
4e:d0:0f:30:8a:a4:10:69:d7:18:b8:7e:13:3a:0e:de:40:4f:
cb:58:a8:e7:13:62:2d:c6:14:3b:eb:a6:0a:b8:60:a7:e9:f5:
18:02:86:43:32:06:ed:38:42:1e:3a:d2:cb:f4:14:c5:db:96:
84:85:7e:60:53:b9:c7:25:17:6d:7b:27:8c:2b:c3:4d:ee:5a:
2a:15:d7:16:ec:18:83:32:f2:ff:d7:76:1f:cb:27:68:e7:e7:
9b:38:da:e1:81:d9:ef:5b:dc:6b:3e:03:77:64:af:31:41:a8:
4e:39:9e:b7:dc:84:e3:42:12:f6:c1:4c:f9:cd:80:84:f9:1c:
fa:4d:99:4f:dd:79:9d:2f:db:1c:4d:d7:fd:5b:5b:b2:8c:7e:
b9:2b:8c:27:d6:4d:7e:3e:43:44:6d:95:aa:59:04:ca:86:68:
5c:05:25:31:86:57:53:a3:33:17:98:97:0f:14:31:41:70:71:
8c:0d:c3:72:40:4f:2d:5f:4a:79:8b:56:86:67:2e:93:a0:c0:
a0:fb:f1:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:59:05 2025 by rpki-client