Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/566938-e2a8-48b3-816b-27b113cff53b/1/YhlJJJSXn0316GXMCt3evKM4RRA.roa
File: YhlJJJSXn0316GXMCt3evKM4RRA.roa (raw, json)
Hash identifier: GoRGuSI9MFxsC15qVirr/MrX3xBRfDPgJUjig6NxAVs=
Subject key identifier: 62:19:49:24:94:97:9F:4D:F5:E8:65:CC:0A:DD:DE:BC:A3:38:45:10
Certificate issuer: /CN=c1ab247c636ad389bf9f8c5074c8220230e8edcc
Certificate serial: 01941F8C8F237A61516A7904CA6FE2F5D3B7
Authority key identifier: C1:AB:24:7C:63:6A:D3:89:BF:9F:8C:50:74:C8:22:02:30:E8:ED:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/waskfGNq04m_n4xQdMgiAjDo7cw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/566938-e2a8-48b3-816b-27b113cff53b/1/YhlJJJSXn0316GXMCt3evKM4RRA.roa
Signing time: Wed 01 Jan 2025 01:48:12 +0000
ROA not before: Wed 01 Jan 2025 01:48:12 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205978
IP address blocks: 37.203.244.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:8f:23:7a:61:51:6a:79:04:ca:6f:e2:f5:d3:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1ab247c636ad389bf9f8c5074c8220230e8edcc
Validity
Not Before: Jan 1 01:48:12 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6219492494979f4df5e865cc0adddebca3384510
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:b3:da:c4:c0:30:54:10:60:fb:34:39:7b:b9:
cd:03:2c:34:8b:f9:78:48:94:fc:68:86:e2:b9:38:
a8:cf:fd:d7:11:61:73:b2:07:0a:d3:1f:32:6e:c3:
41:61:69:c6:a1:f8:b7:8d:a4:31:e3:9c:6c:b5:7c:
9e:f6:31:a0:84:83:24:23:3e:8f:b9:49:5a:d7:c2:
1b:36:d4:06:a7:65:0d:22:9d:a3:4d:ab:39:e9:67:
96:ea:1f:39:f8:f8:70:1b:d5:e4:78:ad:f3:19:b6:
a7:8a:77:61:a6:70:5f:45:b4:ac:4a:44:66:ca:b0:
55:35:88:c5:24:e7:ff:16:66:47:09:eb:f8:43:65:
0c:78:47:61:c2:6d:26:b0:51:18:c5:70:43:6c:c8:
e5:e1:4a:62:37:da:0d:eb:6c:5e:90:8f:66:5b:eb:
0c:8b:a2:0d:13:3a:d7:03:b0:31:d0:24:63:88:24:
f8:42:93:47:de:4c:b3:e4:8c:e0:79:51:e3:cb:88:
87:dd:1e:21:1b:40:fc:03:66:08:2c:1d:3d:1f:24:
cf:51:3e:af:ef:a4:a1:1b:14:3e:08:b4:7a:f2:38:
78:31:da:08:54:47:b5:d8:ca:72:f9:af:27:4e:0a:
e5:0f:af:ef:7f:2f:74:ab:c1:26:3c:c7:15:69:fd:
61:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:19:49:24:94:97:9F:4D:F5:E8:65:CC:0A:DD:DE:BC:A3:38:45:10
X509v3 Authority Key Identifier:
keyid:C1:AB:24:7C:63:6A:D3:89:BF:9F:8C:50:74:C8:22:02:30:E8:ED:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/waskfGNq04m_n4xQdMgiAjDo7cw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/566938-e2a8-48b3-816b-27b113cff53b/1/YhlJJJSXn0316GXMCt3evKM4RRA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/566938-e2a8-48b3-816b-27b113cff53b/1/waskfGNq04m_n4xQdMgiAjDo7cw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.203.244.0/24
Signature Algorithm: sha256WithRSAEncryption
09:71:46:7b:e9:d6:51:bb:64:dc:1c:c7:c2:62:5b:20:4b:c4:
b5:f3:4e:8c:e3:24:a7:86:5e:66:de:2e:f4:20:28:d4:0d:3c:
59:aa:92:4d:f5:73:38:18:08:1b:4c:c0:1a:65:81:fb:6c:6e:
d2:96:1d:cb:93:9e:93:ec:a8:1b:8c:9b:fb:ee:1e:15:f8:bf:
da:62:f0:de:48:ee:e1:71:91:77:8c:90:6c:6a:fa:56:46:fc:
37:52:ae:eb:79:2d:0a:d3:06:4f:de:bb:42:2d:07:9d:5d:a7:
96:2c:b2:91:cb:65:fa:08:95:d3:54:5e:bd:34:aa:84:8d:6b:
7b:2e:31:a3:ab:ee:b0:2b:b7:46:f7:f9:7d:12:cd:19:d5:e7:
32:ac:52:f6:90:4d:66:a3:55:d2:c2:75:7c:e0:b9:b2:b5:34:
1f:95:45:8a:1b:67:20:15:5e:b3:55:82:9d:76:92:17:4f:bd:
44:95:8e:2c:4e:7b:48:2f:6f:2b:12:ab:cc:f2:34:da:78:de:
43:10:d9:cf:6d:78:b7:0a:e9:5e:99:73:ba:41:14:0a:f0:05:
51:ff:40:02:6f:74:1e:63:ca:8c:c4:51:dc:ab:61:55:5e:69:
1b:67:f0:d6:68:bf:d1:ea:09:d1:3c:15:53:77:89:d2:f9:0c:
a5:ad:2c:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 14:31:13 2025 by rpki-client