Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/3c0269-c194-4e6d-abce-72735e118d51/1/yslXZh7Cuzs6wadu870G9PNND8c.roa
File: yslXZh7Cuzs6wadu870G9PNND8c.roa (raw, json)
Hash identifier: 8SYbXXCsMqY9gXe1d2tV7R6DC4ZuExzsWyNdSPv/Pg4=
Subject key identifier: CA:C9:57:66:1E:C2:BB:3B:3A:C1:A7:6E:F3:BD:06:F4:F3:4D:0F:C7
Certificate issuer: /CN=88b213bf1627548efdfb1b2e2645baaf1d983aa0
Certificate serial: 0194266C2D102C8B2E9A289FB2DD128EFDE5
Authority key identifier: 88:B2:13:BF:16:27:54:8E:FD:FB:1B:2E:26:45:BA:AF:1D:98:3A:A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iLITvxYnVI79-xsuJkW6rx2YOqA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/3c0269-c194-4e6d-abce-72735e118d51/1/yslXZh7Cuzs6wadu870G9PNND8c.roa
Signing time: Thu 02 Jan 2025 09:50:11 +0000
ROA not before: Thu 02 Jan 2025 09:50:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 400175
IP address blocks: 194.26.223.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6c:2d:10:2c:8b:2e:9a:28:9f:b2:dd:12:8e:fd:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88b213bf1627548efdfb1b2e2645baaf1d983aa0
Validity
Not Before: Jan 2 09:50:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cac957661ec2bb3b3ac1a76ef3bd06f4f34d0fc7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:96:c2:1f:25:61:13:4f:5c:1a:36:53:99:88:
82:cc:0c:02:24:00:03:ca:d9:bb:69:9c:ed:a5:49:
7f:9e:d4:ec:90:54:64:4c:e2:af:a4:ae:87:44:87:
e0:aa:5b:e8:5a:2c:59:c3:1b:0e:66:d2:ff:86:2b:
d3:5d:40:a0:13:5a:a9:10:12:55:fd:66:57:ea:6b:
ed:6a:fe:ba:5b:aa:c0:64:84:4e:a0:55:d7:42:a6:
3b:e8:84:57:5c:ba:bd:07:c6:6c:02:b5:22:ac:07:
f5:50:15:2e:22:c1:0b:12:ab:20:fa:37:f8:a9:56:
69:b2:1a:13:67:13:0a:53:0d:76:92:2d:ad:bc:ec:
4c:81:c1:39:4c:76:93:51:92:81:1d:49:e4:07:c4:
ea:bf:1c:48:22:63:11:9c:1e:81:f5:d8:66:f7:1a:
08:cd:e8:7d:a9:0a:28:db:f2:98:5d:3b:61:ba:b0:
6c:36:42:2f:83:c7:71:bc:c5:11:70:c2:3e:ad:36:
92:02:3a:95:51:a1:31:61:3a:69:b2:08:30:21:a2:
84:ba:7f:ee:7a:bf:81:0c:ac:15:57:16:0e:7d:91:
bd:a2:43:78:43:2b:9c:0d:04:78:50:24:62:e5:25:
f6:b3:98:46:37:78:2c:fd:1a:fa:22:66:83:9e:77:
99:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:C9:57:66:1E:C2:BB:3B:3A:C1:A7:6E:F3:BD:06:F4:F3:4D:0F:C7
X509v3 Authority Key Identifier:
keyid:88:B2:13:BF:16:27:54:8E:FD:FB:1B:2E:26:45:BA:AF:1D:98:3A:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iLITvxYnVI79-xsuJkW6rx2YOqA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/3c0269-c194-4e6d-abce-72735e118d51/1/yslXZh7Cuzs6wadu870G9PNND8c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/3c0269-c194-4e6d-abce-72735e118d51/1/iLITvxYnVI79-xsuJkW6rx2YOqA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.26.223.0/24
Signature Algorithm: sha256WithRSAEncryption
49:83:12:95:82:f2:9d:c7:64:68:7b:66:8c:26:a4:92:90:21:
d7:e0:7f:61:94:22:90:0f:26:ac:44:c8:f8:08:ef:3d:86:e8:
b8:e9:c2:8f:82:88:ba:68:a1:a2:58:f6:6b:98:6c:a4:89:cc:
7f:a5:29:56:1f:af:89:17:31:78:33:59:b8:47:0d:9d:75:1a:
2f:4b:be:20:78:f3:63:47:f8:d9:74:4c:b9:7e:30:3e:20:45:
81:b6:f9:41:c8:61:cd:c1:24:d5:3d:91:a4:bc:d5:75:c1:a3:
e0:5e:23:56:a2:2c:e0:77:0f:d8:61:4f:55:54:cc:f2:7e:68:
16:e6:16:04:ec:31:0f:29:8e:3d:d7:da:91:42:28:8e:3c:4b:
aa:91:d7:95:30:b2:40:16:36:a6:e1:ce:ec:2e:86:79:ef:e5:
7e:7c:d6:5a:cb:52:cd:ba:82:af:3d:bf:8d:44:81:0d:d1:d8:
54:ca:2f:2c:34:aa:92:6d:a7:7e:0c:98:ab:2d:a5:47:c5:66:
c7:3b:1c:b1:e2:68:64:af:7c:ca:24:a8:36:57:df:29:55:1f:
75:fc:93:d6:0a:f9:75:71:4e:d0:06:5b:16:f7:14:c9:6a:7b:
33:65:e3:05:78:f4:68:21:fd:e1:e9:28:90:c9:13:87:59:87:
3e:f4:e1:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:41:42 2025 by rpki-client