Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/d0a3f9-997a-42a8-aa47-4bb71e274a5c/1/ygWfHOj23VJgj35j5q6wo1fH7i4.roa
File: ygWfHOj23VJgj35j5q6wo1fH7i4.roa (raw, json)
Hash identifier: Fn0E1OEA7wrBSTSTMjLK8G+ESh9SLPnfGckk+sIOOeI=
Subject key identifier: CA:05:9F:1C:E8:F6:DD:52:60:8F:7E:63:E6:AE:B0:A3:57:C7:EE:2E
Certificate issuer: /CN=318cbfffcd21127de3628697598db0c2d9e11351
Certificate serial: 019420D5CDA3DFEFC3487CD6CE4737E90FE4
Authority key identifier: 31:8C:BF:FF:CD:21:12:7D:E3:62:86:97:59:8D:B0:C2:D9:E1:13:51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYy__80hEn3jYoaXWY2wwtnhE1E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/d0a3f9-997a-42a8-aa47-4bb71e274a5c/1/ygWfHOj23VJgj35j5q6wo1fH7i4.roa
Signing time: Wed 01 Jan 2025 07:47:49 +0000
ROA not before: Wed 01 Jan 2025 07:47:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42721
IP address blocks: 194.110.205.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d5:cd:a3:df:ef:c3:48:7c:d6:ce:47:37:e9:0f:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=318cbfffcd21127de3628697598db0c2d9e11351
Validity
Not Before: Jan 1 07:47:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ca059f1ce8f6dd52608f7e63e6aeb0a357c7ee2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:12:3c:a8:02:39:cd:40:6d:77:42:4c:eb:25:
07:55:3f:63:c7:71:a5:19:51:44:6a:72:81:2c:f7:
d4:e0:7f:74:e1:7c:50:2a:0e:99:19:2b:2f:05:96:
b4:c4:27:93:f2:22:5c:d8:d9:74:98:e6:0e:13:27:
8a:c4:f8:f9:30:5b:00:2c:f6:34:3f:f8:e7:c3:a9:
86:2e:5c:5d:10:13:01:67:8a:a5:72:f1:19:df:fb:
f8:39:af:7b:bd:03:7c:a5:61:8e:52:f2:ce:e3:2e:
ff:31:89:d1:03:ba:42:7d:e5:4d:e4:02:18:b8:11:
b0:e8:05:2e:f7:ec:da:47:8b:72:4b:9d:1b:ea:61:
a2:eb:5a:c4:31:7c:bb:08:3b:46:ce:b2:e3:e4:00:
43:6c:45:24:c3:b0:ff:28:a0:6e:e9:ae:d7:f6:ff:
40:b0:33:56:e3:08:99:1b:f9:1f:f2:5e:78:bc:f8:
81:5d:03:9b:f2:6b:b2:70:a3:49:f5:37:69:94:b1:
e5:c6:fd:24:65:9d:0a:40:18:10:c9:6f:d0:74:16:
ac:4f:4d:f9:3b:aa:8a:07:1f:a8:20:a4:69:d0:cd:
e6:6a:f2:0d:37:d7:6b:91:dd:1f:2d:eb:e7:90:3a:
b0:be:14:14:c1:a7:da:e8:7e:cc:12:e6:16:3b:bd:
42:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:05:9F:1C:E8:F6:DD:52:60:8F:7E:63:E6:AE:B0:A3:57:C7:EE:2E
X509v3 Authority Key Identifier:
keyid:31:8C:BF:FF:CD:21:12:7D:E3:62:86:97:59:8D:B0:C2:D9:E1:13:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYy__80hEn3jYoaXWY2wwtnhE1E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/d0a3f9-997a-42a8-aa47-4bb71e274a5c/1/ygWfHOj23VJgj35j5q6wo1fH7i4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/d0a3f9-997a-42a8-aa47-4bb71e274a5c/1/MYy__80hEn3jYoaXWY2wwtnhE1E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.110.205.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:05:7b:e5:49:81:c5:bf:3c:b6:90:da:56:71:c7:e7:fe:1c:
58:83:99:aa:b4:f6:47:50:a3:ae:60:b4:12:22:fc:22:cb:5e:
95:6f:1d:c0:bb:a2:9d:b3:91:2c:1f:5a:21:42:ba:19:c5:e2:
1f:69:13:14:a3:e1:cb:ac:f7:4a:d6:8a:bb:93:9d:0b:78:4f:
0f:e0:de:fb:25:3f:71:16:b7:ff:33:c7:bb:a5:9b:0a:65:3b:
ae:da:e1:04:7e:42:ec:fa:4c:ab:20:d9:33:ba:39:b7:8d:33:
49:08:36:9f:e0:db:03:99:72:f5:bb:32:cc:2c:39:be:cc:17:
47:28:66:a0:f7:75:20:75:dc:70:1e:60:0b:68:78:62:ae:a7:
e6:93:4a:67:eb:fe:70:7c:b7:13:8a:c5:0d:06:63:aa:6e:16:
44:dd:bc:47:37:e4:0d:8b:4b:78:27:b0:fe:30:96:a8:89:65:
74:30:01:15:e2:e8:23:ec:60:cc:dc:ff:32:42:23:31:b7:49:
a5:df:64:ab:74:96:07:7b:61:14:d3:ca:63:e8:d9:56:47:86:
db:23:2e:3e:2f:f3:fb:6d:b0:0e:c6:ea:e4:f5:86:5a:04:4f:
7d:a3:e0:15:86:26:2b:76:03:1b:cd:2c:67:c0:1d:3f:86:79:
93:35:9f:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 11:24:44 2025 by rpki-client