Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/a5188d-a0ad-453c-ba82-3879bd703946/1/yATYs5RQnNSomy8BdI2rSObywPg.roa
File: yATYs5RQnNSomy8BdI2rSObywPg.roa (raw, json)
Hash identifier: b8O6fsQ738Y0NuUeiBS8msZwSYfgqn0qenaET6r1H/c=
Subject key identifier: C8:04:D8:B3:94:50:9C:D4:A8:9B:2F:01:74:8D:AB:48:E6:F2:C0:F8
Certificate issuer: /CN=9a233bbddfe438646f586f085e5df0d79bdfb9fc
Certificate serial: 01941F8C77EBEF00E3AF29C09F0843196C61
Authority key identifier: 9A:23:3B:BD:DF:E4:38:64:6F:58:6F:08:5E:5D:F0:D7:9B:DF:B9:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/miM7vd_kOGRvWG8IXl3w15vfufw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/a5188d-a0ad-453c-ba82-3879bd703946/1/yATYs5RQnNSomy8BdI2rSObywPg.roa
Signing time: Wed 01 Jan 2025 01:48:06 +0000
ROA not before: Wed 01 Jan 2025 01:48:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 63017
IP address blocks: 80.91.56.0/24 maxlen: 24
80.91.57.0/24 maxlen: 24
2a02:6000:ffff::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:77:eb:ef:00:e3:af:29:c0:9f:08:43:19:6c:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a233bbddfe438646f586f085e5df0d79bdfb9fc
Validity
Not Before: Jan 1 01:48:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c804d8b394509cd4a89b2f01748dab48e6f2c0f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:e9:ba:fb:6d:15:93:d8:f8:e5:64:c0:3c:78:
5b:7f:12:94:d7:76:c7:f3:1a:42:bb:3f:e4:4a:70:
19:e5:a0:28:d2:0f:26:37:44:2f:a3:9f:31:05:b0:
91:f4:27:4e:fe:95:8c:34:b6:76:5f:90:c7:3b:57:
57:93:73:45:7f:81:91:08:6f:0e:37:4b:eb:2a:a0:
c5:69:da:24:25:60:47:40:7d:1c:8f:26:63:54:3e:
47:49:91:85:19:ea:d0:07:61:d1:c0:20:04:6b:bc:
cc:8f:cc:d5:74:84:cd:e1:8a:e4:e5:40:b4:7c:e8:
0a:06:86:a4:bc:8b:d1:3c:62:59:03:e0:92:29:14:
3c:da:d6:82:d8:75:67:cd:d7:6e:8c:e5:b2:31:24:
6f:8d:90:2d:ec:d7:be:47:cb:e4:a3:7c:d2:29:be:
ec:30:08:71:b7:f9:e9:db:14:2e:e8:b6:e8:27:64:
c4:04:ab:4d:f5:0e:1a:96:91:1d:0f:a6:96:92:a0:
a4:c1:f5:e3:44:eb:06:a3:1c:42:28:ff:22:b0:7d:
aa:2d:3f:c1:cf:64:98:94:ec:00:d2:9c:da:e1:0c:
b4:a5:ec:bf:ae:b2:af:19:b3:6d:e9:17:e9:fa:1f:
7b:89:4c:b9:99:6e:15:bd:f6:f2:03:ce:70:c7:26:
1e:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:04:D8:B3:94:50:9C:D4:A8:9B:2F:01:74:8D:AB:48:E6:F2:C0:F8
X509v3 Authority Key Identifier:
keyid:9A:23:3B:BD:DF:E4:38:64:6F:58:6F:08:5E:5D:F0:D7:9B:DF:B9:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/miM7vd_kOGRvWG8IXl3w15vfufw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/a5188d-a0ad-453c-ba82-3879bd703946/1/yATYs5RQnNSomy8BdI2rSObywPg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/a5188d-a0ad-453c-ba82-3879bd703946/1/miM7vd_kOGRvWG8IXl3w15vfufw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.91.56.0/23
IPv6:
2a02:6000:ffff::/48
Signature Algorithm: sha256WithRSAEncryption
13:8d:39:3d:5f:c1:1a:51:1c:a5:53:27:91:44:2d:ce:30:1c:
e3:1b:dc:81:dd:28:5b:a4:74:36:09:26:62:27:93:86:e5:76:
b7:a8:be:24:5b:b0:56:56:a8:6e:8b:47:f1:08:35:6f:55:b9:
a7:6b:a1:84:16:96:b7:52:67:0b:1f:31:31:67:d8:a9:1c:e9:
a6:bf:81:17:87:84:61:45:0e:d0:79:fd:94:e5:47:3b:66:5b:
1a:55:40:f0:7d:92:d0:d3:e5:32:de:7a:9e:5f:4d:74:9c:42:
aa:17:85:12:fe:4c:99:1f:16:9b:b2:31:40:93:98:64:68:55:
21:45:38:8b:59:b0:94:77:f3:17:13:e4:36:70:72:0e:97:03:
54:13:16:b9:af:69:a9:c0:7d:1f:e7:7c:eb:d0:88:f6:cd:e6:
52:88:fd:31:cb:25:f1:de:a9:38:11:fe:11:c0:f3:84:37:88:
19:f2:34:48:30:39:df:94:22:d1:22:c9:2f:28:9d:ef:e8:93:
c6:f5:6b:87:82:e2:af:e8:cd:05:39:ee:d4:73:67:8e:47:b9:
88:37:13:35:47:a3:95:2d:a5:68:c9:46:7c:09:09:46:9b:f8:
b6:4e:a8:dc:00:e8:11:0d:b1:65:da:17:50:f8:40:60:93:67:
2f:d6:fa:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 17:03:25 2025 by rpki-client