Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/45d97e-40fe-47e0-b2e6-8a72a1b6af85/1/byq9jEJ8I-x78db4YmLa9HioKo8.roa
File: byq9jEJ8I-x78db4YmLa9HioKo8.roa (raw, json)
Hash identifier: QYVcPpPrnjWxAxRBsq739GpWzHWctl66pKlaoafsOic=
Subject key identifier: 6F:2A:BD:8C:42:7C:23:EC:7B:F1:D6:F8:62:62:DA:F4:78:A8:2A:8F
Certificate issuer: /CN=392f6ee6ee346c31912b7630dab14ce53c4e0c99
Certificate serial: 019426D9F4479CD2E913018C708BFE957652
Authority key identifier: 39:2F:6E:E6:EE:34:6C:31:91:2B:76:30:DA:B1:4C:E5:3C:4E:0C:99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OS9u5u40bDGRK3Yw2rFM5TxODJk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/45d97e-40fe-47e0-b2e6-8a72a1b6af85/1/byq9jEJ8I-x78db4YmLa9HioKo8.roa
Signing time: Thu 02 Jan 2025 11:50:05 +0000
ROA not before: Thu 02 Jan 2025 11:50:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60475
IP address blocks: 193.168.52.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:f4:47:9c:d2:e9:13:01:8c:70:8b:fe:95:76:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=392f6ee6ee346c31912b7630dab14ce53c4e0c99
Validity
Not Before: Jan 2 11:50:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6f2abd8c427c23ec7bf1d6f86262daf478a82a8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:48:9a:91:70:0c:85:dd:19:d3:78:66:45:58:
11:24:4e:e8:f3:a9:8f:99:2d:a7:12:c5:bb:e1:bc:
de:b5:4f:07:79:a6:96:d7:8f:2a:f6:b3:9b:32:d6:
6d:84:7d:7c:81:83:9f:95:65:93:f4:ef:7d:d3:bd:
78:46:1c:57:dc:dc:a1:dc:55:d8:4e:2a:28:f3:b3:
45:90:2a:bf:f7:c2:a4:df:5a:78:7a:99:b9:31:f8:
62:3c:9d:8b:62:c4:cd:b0:bd:00:8b:29:bd:59:88:
7f:05:70:8b:0c:27:b3:c0:8f:a0:1a:c2:02:2a:ed:
36:3e:51:58:f8:de:ac:58:a6:c7:73:05:d6:fe:bb:
91:fb:d8:91:f2:00:55:f0:a2:2f:17:28:be:57:58:
34:80:a1:cf:56:e5:6a:c5:1e:39:6b:f0:7e:e7:79:
a3:b8:0c:72:5f:da:2b:ce:9f:e6:63:5a:21:01:bb:
bb:22:ea:1e:e0:53:6f:31:54:48:a8:e4:61:ab:eb:
a7:33:c7:05:11:23:22:45:79:f0:17:f1:9e:f6:c8:
62:7c:6a:f4:87:0d:ed:a1:4e:6c:aa:f9:ec:52:93:
6a:10:02:02:bc:bb:36:96:36:6e:4f:71:89:a0:e6:
91:19:e6:3f:58:fd:d0:76:25:44:6b:a6:f4:05:1b:
1b:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:2A:BD:8C:42:7C:23:EC:7B:F1:D6:F8:62:62:DA:F4:78:A8:2A:8F
X509v3 Authority Key Identifier:
keyid:39:2F:6E:E6:EE:34:6C:31:91:2B:76:30:DA:B1:4C:E5:3C:4E:0C:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OS9u5u40bDGRK3Yw2rFM5TxODJk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/45d97e-40fe-47e0-b2e6-8a72a1b6af85/1/byq9jEJ8I-x78db4YmLa9HioKo8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/45d97e-40fe-47e0-b2e6-8a72a1b6af85/1/OS9u5u40bDGRK3Yw2rFM5TxODJk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.168.52.0/24
Signature Algorithm: sha256WithRSAEncryption
74:d1:65:cc:c0:50:cc:64:f3:70:bb:65:ef:3a:81:7e:e9:0a:
7c:24:07:f2:67:b2:f2:c3:64:f9:dc:52:29:39:ba:96:3a:46:
1f:b2:86:db:28:ce:38:0d:33:ce:a4:f6:3a:9d:77:6e:f2:43:
58:41:d0:33:e6:7f:dc:ec:d6:46:03:0d:e2:f1:9b:7d:0c:17:
2f:6a:4c:a7:cb:5e:b5:93:0b:6f:c6:d2:b4:72:47:28:ca:c2:
42:82:4e:57:e2:b8:73:ca:54:95:1f:04:ed:6d:66:a6:fd:58:
b1:d2:eb:03:18:5c:ec:79:47:0f:2f:e2:18:d2:f4:cf:2e:ac:
6b:3c:5c:1f:2d:a8:b1:a0:1f:75:21:55:34:7e:b7:d5:80:e7:
57:70:94:f3:97:02:f4:44:21:cb:1e:9d:26:70:79:87:e4:44:
cc:72:40:20:3b:58:1c:18:73:54:17:ed:5e:05:91:b2:69:2a:
c4:2d:35:6c:d5:bb:0d:36:56:eb:66:43:40:8c:57:b9:1c:44:
0b:9d:35:5b:f8:4b:2b:c6:3d:d2:f7:d1:fd:0f:91:37:13:2d:
7a:ef:39:d7:a6:be:2e:6f:e7:f9:1e:07:8b:c0:66:12:cc:71:
e6:e7:84:c6:ae:4b:f1:12:a7:ea:de:9e:6d:c8:a2:4d:b2:3c:
58:59:91:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:58:55 2025 by rpki-client