Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/ed96c5-d633-402f-8e00-2b1d674595b7/1/y9JMR_ZxLXrYLvgRShORqLwJidY.roa
File: y9JMR_ZxLXrYLvgRShORqLwJidY.roa (raw, json)
Hash identifier: Uw28deLkoDLLwc6/RTXYzT+/L0LSFoqfWT5M5xI68aM=
Subject key identifier: CB:D2:4C:47:F6:71:2D:7A:D8:2E:F8:11:4A:13:91:A8:BC:09:89:D6
Certificate issuer: /CN=62af1d7f36b1865802535e49a7331e035ad01008
Certificate serial: 01941F8C34A20D430A35B82BDACA21D67338
Authority key identifier: 62:AF:1D:7F:36:B1:86:58:02:53:5E:49:A7:33:1E:03:5A:D0:10:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yq8dfzaxhlgCU15JpzMeA1rQEAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/ed96c5-d633-402f-8e00-2b1d674595b7/1/y9JMR_ZxLXrYLvgRShORqLwJidY.roa
Signing time: Wed 01 Jan 2025 01:47:49 +0000
ROA not before: Wed 01 Jan 2025 01:47:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 47305
IP address blocks: 195.182.40.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:34:a2:0d:43:0a:35:b8:2b:da:ca:21:d6:73:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62af1d7f36b1865802535e49a7331e035ad01008
Validity
Not Before: Jan 1 01:47:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cbd24c47f6712d7ad82ef8114a1391a8bc0989d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:39:f3:99:c1:ad:ab:5e:79:78:69:1a:8d:3d:
5b:c8:67:50:89:2d:5d:00:9a:9d:5d:f7:f7:5b:f3:
3e:ed:26:93:a9:c5:e4:d0:4a:b1:e1:0c:c1:19:dc:
19:08:41:bb:a4:1c:e8:83:55:26:74:0c:25:7b:40:
93:fa:5e:e0:aa:17:ac:ee:ac:dc:26:1d:df:ef:f6:
3a:f5:8d:ec:af:15:e1:66:ac:20:ea:e7:c3:bc:74:
13:f8:74:72:3e:e3:1b:3e:a6:c9:36:59:10:ac:d2:
3a:9f:e1:c1:92:2a:67:e6:96:38:c4:aa:eb:b5:be:
8d:5e:86:12:d9:c8:b2:73:a1:f6:e6:df:80:fc:e3:
5d:ca:db:df:0f:6d:c2:1d:a6:6a:5c:86:eb:95:9a:
48:02:70:73:24:98:b5:aa:51:ea:7e:e2:c9:5f:0f:
d9:40:90:3f:16:df:72:d6:0b:ce:f1:ca:f2:3a:ac:
92:bc:44:e5:25:f3:e4:49:c6:df:55:18:59:a5:98:
d7:2d:ce:48:45:cf:5a:8c:43:6f:b5:c4:8e:a8:f2:
e3:70:d9:cc:80:88:50:f7:f0:49:c7:71:b6:4f:2a:
ef:7d:27:43:05:dd:5a:c3:e6:45:b1:61:cc:ac:61:
56:e6:fe:0b:7b:00:16:0b:4f:a6:92:22:df:2f:5a:
5d:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:D2:4C:47:F6:71:2D:7A:D8:2E:F8:11:4A:13:91:A8:BC:09:89:D6
X509v3 Authority Key Identifier:
keyid:62:AF:1D:7F:36:B1:86:58:02:53:5E:49:A7:33:1E:03:5A:D0:10:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yq8dfzaxhlgCU15JpzMeA1rQEAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/ed96c5-d633-402f-8e00-2b1d674595b7/1/y9JMR_ZxLXrYLvgRShORqLwJidY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/ed96c5-d633-402f-8e00-2b1d674595b7/1/Yq8dfzaxhlgCU15JpzMeA1rQEAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.182.40.0/24
Signature Algorithm: sha256WithRSAEncryption
61:a7:33:e7:22:cf:00:26:65:83:0c:96:f2:75:ee:41:2e:fc:
66:ac:63:cc:14:a1:8c:8e:26:17:f1:07:17:33:d5:fc:72:42:
c7:1e:58:45:97:4c:12:6a:ed:77:dc:9a:3c:47:df:f1:25:2e:
9a:8a:97:64:3b:da:4e:dd:64:27:d5:4b:22:17:97:58:d5:91:
69:31:2f:f1:64:01:fe:64:ad:3d:75:a0:9a:99:56:84:b9:70:
37:f3:49:a6:33:2c:22:03:52:69:7e:36:4d:52:1c:c4:78:d8:
88:c8:18:bd:1e:4a:5c:ff:8c:51:2a:2f:88:7a:31:61:92:e7:
d7:7d:d2:66:10:50:40:09:a8:51:14:66:e3:25:f0:6f:4e:f4:
b7:15:e9:58:c6:5c:73:bb:d0:72:48:84:66:33:07:54:a9:54:
b6:f0:86:e8:28:f4:be:3f:78:9d:7d:c2:6a:e4:e5:8d:0d:53:
30:51:d8:74:ed:8b:5d:8a:d7:ca:07:3c:39:ed:9e:e9:71:c0:
33:ca:0b:0f:36:59:ef:ee:b0:9d:d3:cf:ed:46:04:39:c6:fb:
45:95:a8:01:25:0b:81:77:13:90:dd:68:8e:ea:a4:86:06:57:
81:6b:cb:69:c2:94:5a:79:15:3b:af:f1:a9:b4:13:80:60:b2:
dd:d0:c6:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:50:54 2025 by rpki-client