Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/01a285-fc81-4b06-80b2-00c913cb0557/1/mycUbYI1PYCeJUOytd7OByddKj4.roa
File: mycUbYI1PYCeJUOytd7OByddKj4.roa (raw, json)
Hash identifier: PDtk9wU6hfm72jtlMfw1RCeJrC6rGpFRRw/nfzu+rDk=
Subject key identifier: 9B:27:14:6D:82:35:3D:80:9E:25:43:B2:B5:DE:CE:07:27:5D:2A:3E
Certificate issuer: /CN=458b6759c1a0cf5ad82da5c393bcd0fff7c7e2f0
Certificate serial: 01941FFA7F08A0C1F0B0790DA5D17C925F73
Authority key identifier: 45:8B:67:59:C1:A0:CF:5A:D8:2D:A5:C3:93:BC:D0:FF:F7:C7:E2:F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RYtnWcGgz1rYLaXDk7zQ__fH4vA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/01a285-fc81-4b06-80b2-00c913cb0557/1/mycUbYI1PYCeJUOytd7OByddKj4.roa
Signing time: Wed 01 Jan 2025 03:48:17 +0000
ROA not before: Wed 01 Jan 2025 03:48:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 25081
IP address blocks: 195.248.252.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:7f:08:a0:c1:f0:b0:79:0d:a5:d1:7c:92:5f:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=458b6759c1a0cf5ad82da5c393bcd0fff7c7e2f0
Validity
Not Before: Jan 1 03:48:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9b27146d82353d809e2543b2b5dece07275d2a3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:48:56:63:64:52:50:c6:13:18:03:5c:fb:e6:
a2:a0:10:61:f6:71:3a:ae:ba:65:1c:12:17:8b:18:
c6:e2:0d:80:7a:5e:c7:5d:7d:af:d1:5b:b8:c6:a6:
ac:ca:4e:44:96:67:9d:cc:0b:1a:25:bd:43:80:b8:
0f:3b:ef:f4:43:1f:5e:af:3f:91:bb:e7:1d:a3:e6:
78:ed:01:80:50:12:a7:45:05:0b:b0:d6:8a:11:4b:
56:21:08:83:40:c6:2c:28:c2:aa:d3:32:b7:0b:16:
a6:fc:36:c3:1c:58:c0:43:71:9b:7f:5e:a6:ad:11:
9a:56:92:ca:f6:13:d7:2c:d8:57:20:27:eb:e0:57:
67:53:5f:d2:c1:e9:bf:40:1d:52:c6:b8:49:b5:81:
cb:60:e0:02:49:1c:a9:d2:3c:62:91:78:05:e3:84:
58:52:ed:8e:87:ac:f7:c1:93:49:83:a7:7f:9f:2f:
50:91:04:c7:2c:b9:ff:b6:d0:90:87:03:43:79:89:
98:09:8a:e9:59:38:70:32:fc:37:03:16:4f:06:90:
cd:70:80:dd:20:19:1e:4f:6e:36:2c:ac:41:f0:86:
a2:fd:29:39:9e:a3:47:ec:35:2b:05:93:7c:40:3d:
e6:fc:54:5f:fc:4e:d4:ee:16:65:6e:aa:02:7e:9e:
bd:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:27:14:6D:82:35:3D:80:9E:25:43:B2:B5:DE:CE:07:27:5D:2A:3E
X509v3 Authority Key Identifier:
keyid:45:8B:67:59:C1:A0:CF:5A:D8:2D:A5:C3:93:BC:D0:FF:F7:C7:E2:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RYtnWcGgz1rYLaXDk7zQ__fH4vA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/01a285-fc81-4b06-80b2-00c913cb0557/1/mycUbYI1PYCeJUOytd7OByddKj4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/01a285-fc81-4b06-80b2-00c913cb0557/1/RYtnWcGgz1rYLaXDk7zQ__fH4vA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.248.252.0/23
Signature Algorithm: sha256WithRSAEncryption
38:35:4b:fe:7d:00:a9:b8:4c:1d:fb:73:57:61:df:97:37:a2:
f8:75:24:6d:d3:5b:5c:4c:49:fd:5d:02:27:88:0d:b9:ea:db:
37:d6:87:3c:80:4f:c0:81:ad:56:7a:9a:c6:30:87:ee:51:2a:
1f:3d:a2:31:92:8a:e2:e7:a7:8f:98:a1:15:32:fe:2a:0e:db:
61:ea:80:a9:2d:4c:8c:b2:b9:88:31:d3:e8:fc:ef:c7:77:e4:
53:60:8a:64:71:ca:3b:fb:26:e4:62:df:f2:93:5b:f1:a4:28:
95:fb:5d:af:14:e4:37:0d:d4:d7:3f:ff:60:85:f2:a8:40:59:
69:82:76:03:69:48:55:a8:2a:c8:b7:69:0c:d5:85:be:5e:7a:
99:15:07:c7:bb:c0:21:ad:82:d7:db:38:ad:4b:90:dd:a9:13:
9e:50:e5:b8:75:b6:cd:93:9b:ce:80:68:86:2b:8c:3f:7c:47:
d0:7d:51:64:75:e9:3f:d2:23:de:bb:03:d5:32:25:59:cb:97:
5f:9b:f6:db:8e:d4:1c:82:af:af:56:73:ed:5f:47:48:43:65:
69:49:6a:fb:19:8c:6b:78:d0:96:a6:92:06:38:51:cf:88:0b:
7d:fb:2b:07:a2:3d:9f:43:3c:37:70:4b:d6:55:25:df:30:e5:
80:85:c3:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:07:50 2025 by rpki-client