Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/346966-069a-40b0-b143-41eaa1fde11b/1/YINjBgqke9O6MEFg3LsttnUbivA.roa
File: YINjBgqke9O6MEFg3LsttnUbivA.roa (raw, json)
Hash identifier: FiVOsjs04yLCv34Ov+9Fkl+VTtf648KKXDA45deG6fU=
Subject key identifier: 60:83:63:06:0A:A4:7B:D3:BA:30:41:60:DC:BB:2D:B6:75:1B:8A:F0
Certificate issuer: /CN=6689c3995e2461d5a52fd4f1000782f99a4d4822
Certificate serial: 019423D75F7E502184D1C811986BAFFF5417
Authority key identifier: 66:89:C3:99:5E:24:61:D5:A5:2F:D4:F1:00:07:82:F9:9A:4D:48:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZonDmV4kYdWlL9TxAAeC-ZpNSCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/346966-069a-40b0-b143-41eaa1fde11b/1/YINjBgqke9O6MEFg3LsttnUbivA.roa
Signing time: Wed 01 Jan 2025 21:48:24 +0000
ROA not before: Wed 01 Jan 2025 21:48:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 24577
IP address blocks: 91.187.224.0/19 maxlen: 19
185.108.68.0/22 maxlen: 22
194.145.204.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:5f:7e:50:21:84:d1:c8:11:98:6b:af:ff:54:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6689c3995e2461d5a52fd4f1000782f99a4d4822
Validity
Not Before: Jan 1 21:48:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=608363060aa47bd3ba304160dcbb2db6751b8af0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:cb:9b:ee:f1:06:06:8d:f5:a0:cc:f1:b4:25:
1b:92:59:25:c1:5f:a5:1e:c3:c7:36:92:38:b9:f6:
82:04:5a:07:36:43:b1:dc:99:b2:b8:98:73:16:ac:
fe:8b:bc:02:ef:8b:eb:50:20:df:65:97:4c:8b:e2:
c8:bb:f8:e4:32:e7:28:a8:f2:99:6b:08:24:02:1b:
c2:57:1b:e7:e9:46:9e:03:c4:dd:ae:6b:f1:18:3a:
49:c2:be:d9:c2:d2:7c:f7:34:c6:52:50:06:4d:4a:
b1:25:3c:31:a8:6a:be:de:2c:4b:60:38:fa:07:61:
ca:e8:68:7e:fe:e1:ee:31:27:69:06:42:e2:64:8b:
79:80:d2:f6:52:95:27:e1:a7:07:6a:7c:9c:73:ce:
eb:1d:1a:2d:60:61:0a:c8:63:e3:cb:47:d8:ef:7a:
e7:1f:55:3e:e3:d5:ea:5c:38:4e:ff:d9:79:62:62:
8e:2f:dd:6d:57:b9:cb:43:02:b2:e1:50:ea:2e:14:
e3:7e:ad:d6:04:16:55:4d:81:09:b6:bb:4b:f4:5e:
9c:f2:52:55:d5:31:88:ad:cd:a2:45:2e:e2:ae:c0:
46:21:8b:78:77:1d:90:1c:5b:58:f7:0e:1a:5e:cc:
63:ed:fa:4c:37:9c:24:82:bd:bf:49:55:e9:60:c4:
94:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:83:63:06:0A:A4:7B:D3:BA:30:41:60:DC:BB:2D:B6:75:1B:8A:F0
X509v3 Authority Key Identifier:
keyid:66:89:C3:99:5E:24:61:D5:A5:2F:D4:F1:00:07:82:F9:9A:4D:48:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZonDmV4kYdWlL9TxAAeC-ZpNSCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/346966-069a-40b0-b143-41eaa1fde11b/1/YINjBgqke9O6MEFg3LsttnUbivA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/346966-069a-40b0-b143-41eaa1fde11b/1/ZonDmV4kYdWlL9TxAAeC-ZpNSCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.187.224.0/19
185.108.68.0/22
194.145.204.0/23
Signature Algorithm: sha256WithRSAEncryption
6f:d7:e7:17:89:54:ae:33:cf:15:8c:97:1a:ba:66:05:c6:97:
5e:c5:49:69:da:aa:50:a1:5e:cc:6b:82:1d:17:df:63:26:9e:
99:0f:72:14:8b:f0:22:75:a0:94:29:a6:da:bb:a4:b7:6c:2c:
96:ab:cb:3c:a3:70:7e:ad:91:e0:2b:15:a5:68:cb:f4:fb:db:
38:37:0c:a9:06:cd:86:eb:d6:26:68:3b:f3:e1:dd:93:bd:f3:
c3:b2:e5:39:71:26:31:e4:46:5a:4f:dc:b1:fb:c0:ed:b5:1f:
00:84:ad:dd:6b:da:03:ba:84:ad:ac:13:b9:4a:be:16:75:cd:
b7:70:2f:85:fb:47:b0:5f:8d:7d:d5:f3:f5:bd:02:68:df:e9:
13:85:ca:81:68:ba:72:c0:71:dc:13:dc:71:01:e1:25:d3:fe:
c8:65:60:5c:e3:db:6d:c4:42:d7:d0:88:60:35:63:a0:f6:2f:
c2:eb:0b:7a:6f:1a:12:ca:c0:ff:97:cf:77:8b:18:93:25:0f:
05:9e:f9:b6:8a:b0:c5:fd:24:80:ac:42:74:d4:e3:1b:84:20:
40:ba:63:1f:30:dc:31:7d:d0:f0:7c:f5:56:eb:66:81:49:4b:
11:6d:65:93:ee:87:ab:ad:d3:0c:e9:11:bb:1b:d8:1d:77:e1:
c6:ba:de:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 07:59:02 2025 by rpki-client