Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/38c198-0f1b-4c59-81fe-1c8ce7c33ac0/1/Y5Fkdf8lCYdQD9ZGIAjVuUbledE.roa
File: Y5Fkdf8lCYdQD9ZGIAjVuUbledE.roa (raw, json)
Hash identifier: JnnOlLV8xwOOoN+r0LJHTPSQEB+QaVe9fn2jfA8Y6mA=
Subject key identifier: 63:91:64:75:FF:25:09:87:50:0F:D6:46:20:08:D5:B9:46:E5:79:D1
Certificate issuer: /CN=461207a3eef2b44f8e2731b7b0ac7d1716e355c5
Certificate serial: 019422200BE558D32EF88A3BA035839D0BAD
Authority key identifier: 46:12:07:A3:EE:F2:B4:4F:8E:27:31:B7:B0:AC:7D:17:16:E3:55:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RhIHo-7ytE-OJzG3sKx9FxbjVcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/38c198-0f1b-4c59-81fe-1c8ce7c33ac0/1/Y5Fkdf8lCYdQD9ZGIAjVuUbledE.roa
Signing time: Wed 01 Jan 2025 13:48:32 +0000
ROA not before: Wed 01 Jan 2025 13:48:32 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207851
IP address blocks: 193.105.208.0/24 maxlen: 24
193.105.217.0/24 maxlen: 24
193.105.250.0/24 maxlen: 24
193.106.239.0/24 maxlen: 24
2a0f:8b40::/29 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:20:0b:e5:58:d3:2e:f8:8a:3b:a0:35:83:9d:0b:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=461207a3eef2b44f8e2731b7b0ac7d1716e355c5
Validity
Not Before: Jan 1 13:48:32 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=63916475ff250987500fd6462008d5b946e579d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:87:8a:4b:56:12:a3:6b:b2:66:9c:07:f0:bf:
f2:62:7a:1b:7a:ab:ff:e7:1c:b6:8f:b4:0f:57:f7:
c6:9f:bc:2c:3a:1c:cb:51:94:fa:9d:8d:f5:ca:4d:
d6:72:ad:22:1f:8c:77:06:4a:05:c4:59:99:24:77:
a7:f2:60:e9:6d:2a:70:95:0a:50:29:07:fb:18:40:
e2:a7:06:7a:68:33:e8:1a:3d:19:87:68:f1:cb:d7:
ba:04:9e:35:df:63:84:a5:81:9d:7c:f7:4c:a3:d7:
bd:7f:76:14:00:84:c9:8d:c6:19:fa:cb:ea:fd:d7:
4d:37:5f:a4:77:c7:54:58:5d:83:15:12:73:ab:2f:
54:45:59:96:e9:d8:85:d2:71:0e:0d:ac:4b:db:2d:
5a:2a:56:f6:c2:35:3d:1f:ec:0d:43:a6:13:0b:28:
da:dd:86:6c:a9:69:4b:32:83:ec:0e:0e:48:44:6a:
35:41:ca:13:59:b0:3b:51:4f:a6:f7:e7:0c:53:f3:
7c:b3:9d:e9:96:df:f4:47:fe:c2:06:36:a1:ac:66:
f4:b1:5d:4e:9f:cc:ca:26:2a:b1:41:b5:35:19:4c:
f6:ed:eb:09:5f:7e:04:a6:62:2e:b2:0d:13:fc:61:
8f:56:27:b6:23:5c:6e:7e:c4:53:3e:3e:52:d2:0f:
02:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:91:64:75:FF:25:09:87:50:0F:D6:46:20:08:D5:B9:46:E5:79:D1
X509v3 Authority Key Identifier:
keyid:46:12:07:A3:EE:F2:B4:4F:8E:27:31:B7:B0:AC:7D:17:16:E3:55:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RhIHo-7ytE-OJzG3sKx9FxbjVcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/38c198-0f1b-4c59-81fe-1c8ce7c33ac0/1/Y5Fkdf8lCYdQD9ZGIAjVuUbledE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/38c198-0f1b-4c59-81fe-1c8ce7c33ac0/1/RhIHo-7ytE-OJzG3sKx9FxbjVcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.105.208.0/24
193.105.217.0/24
193.105.250.0/24
193.106.239.0/24
IPv6:
2a0f:8b40::/29
Signature Algorithm: sha256WithRSAEncryption
b3:74:21:f6:fb:d0:9a:7f:97:08:00:a3:a0:58:4e:0e:4d:3c:
4d:b3:f8:b8:1d:fd:58:a9:b2:c8:2e:59:43:67:bd:a7:06:ee:
68:69:f0:9b:0a:71:05:d1:88:f5:6b:5a:e7:02:4a:75:eb:fe:
14:8b:8b:91:3e:fe:8a:26:e0:7f:24:99:c6:f8:e1:7b:c9:e4:
22:b8:ae:48:01:95:3f:d2:78:c8:e6:04:d9:07:a8:b4:c4:f1:
f7:27:77:a8:3d:72:d7:54:30:4d:80:81:05:d1:b9:54:07:d8:
63:0d:4c:94:3e:ef:48:ff:dd:a3:49:c8:70:e3:6b:64:dd:ae:
51:c9:80:be:bc:db:b7:fc:23:b5:0c:cc:23:40:11:01:08:c6:
6f:fc:cb:78:51:22:c2:3e:6e:3a:c0:f4:8f:e5:a0:1f:db:23:
94:1d:91:64:43:fd:04:f8:4b:2b:03:24:dc:94:19:fc:65:59:
6d:ee:6c:24:dc:83:b5:17:90:b7:b0:8d:4d:66:5b:16:fa:80:
08:d5:f2:e5:cf:12:d3:fd:5e:d3:8c:a3:0b:90:91:a9:37:9c:
f2:e3:c6:24:ce:d3:88:9a:e6:00:9e:c7:0b:38:95:5b:dd:cf:
33:f9:b6:fd:a1:08:74:43:32:bb:a1:b3:60:62:2e:6b:fc:f3:
aa:9c:c0:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:54:15 2025 by rpki-client