Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/yLfAUM-a36ZulM01BghoWwfuKK4.roa
File: yLfAUM-a36ZulM01BghoWwfuKK4.roa (raw, json)
Hash identifier: z8A+U/UImqCVxQsXNU9C7O+BkxuV13RZjx1eLeOqjGM=
Subject key identifier: C8:B7:C0:50:CF:9A:DF:A6:6E:94:CD:35:06:08:68:5B:07:EE:28:AE
Certificate issuer: /CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Certificate serial: 019427484F9654A0412953BD5024B3D34C5D
Authority key identifier: 05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/yLfAUM-a36ZulM01BghoWwfuKK4.roa
Signing time: Thu 02 Jan 2025 13:50:37 +0000
ROA not before: Thu 02 Jan 2025 13:50:37 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 265627
IP address blocks: 91.109.162.0/24 maxlen: 24
217.76.242.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:4f:96:54:a0:41:29:53:bd:50:24:b3:d3:4c:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Validity
Not Before: Jan 2 13:50:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c8b7c050cf9adfa66e94cd350608685b07ee28ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:42:1f:ab:6c:59:63:d0:09:c9:f8:b0:f2:28:
0b:72:53:7d:42:9a:98:8c:bf:d4:4f:cc:00:1a:d9:
98:e1:f6:9d:73:1e:54:fd:2a:bb:4d:36:7f:8f:89:
38:eb:04:d5:bd:e9:46:ea:3c:e8:08:f0:54:76:9c:
72:5b:47:3f:3e:58:9d:70:92:4d:2d:fa:30:56:88:
d6:80:62:4d:f8:ec:84:0a:f1:33:db:1d:c9:36:16:
09:ce:4b:c5:39:f0:1a:9a:ca:37:b8:b7:71:e1:e2:
b5:3e:48:14:e1:3e:66:a3:28:ba:65:28:f4:f0:78:
b7:b3:23:aa:b0:f2:c6:d1:f9:40:0e:9a:c6:63:0f:
36:cc:82:94:6a:26:dc:ff:77:0d:59:5b:92:d4:80:
ed:c3:83:e0:08:33:b1:37:2f:1c:c2:c5:3f:ee:e8:
4a:ee:bd:f7:99:25:cf:7c:ac:3e:e7:58:22:f1:0a:
9b:fe:db:90:b2:2f:ef:23:06:9c:0b:4b:87:f9:d5:
6a:0e:c3:d0:dc:bf:c2:55:27:d5:dd:89:66:c6:f9:
b2:c7:66:42:98:26:52:3b:b6:f1:c8:a2:50:db:c2:
26:ff:8d:94:11:f1:d6:46:be:e2:ce:ca:75:0b:cd:
cb:86:4c:80:37:fb:23:0b:e9:98:81:5b:06:86:89:
06:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:B7:C0:50:CF:9A:DF:A6:6E:94:CD:35:06:08:68:5B:07:EE:28:AE
X509v3 Authority Key Identifier:
keyid:05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/yLfAUM-a36ZulM01BghoWwfuKK4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.109.162.0/24
217.76.242.0/23
Signature Algorithm: sha256WithRSAEncryption
1f:7a:03:a5:0f:35:14:ff:80:f1:a8:a3:98:0d:96:ef:9d:6a:
a2:e3:69:c3:87:8c:1b:75:1c:7b:0a:38:bb:8b:b9:50:fa:6a:
ad:42:7a:00:81:59:3a:d7:ac:a2:c6:c4:ad:91:1d:db:32:28:
42:fe:5f:21:de:90:92:cc:f9:87:7d:7d:4d:be:52:3b:4f:e2:
47:4c:4c:9e:a2:f1:2a:e8:17:94:47:f6:0c:80:7d:61:e4:52:
a8:04:48:df:70:07:ae:f8:f9:9e:24:7c:08:15:16:e9:8d:48:
8f:4b:01:a4:27:a4:d1:1e:e3:68:2e:7c:68:3d:ce:de:5e:e6:
b3:52:2d:ab:9a:3c:d9:6e:dd:52:bd:84:f0:ac:a2:0b:98:1d:
36:14:82:64:fd:8f:d1:3f:5b:6d:fa:80:2c:2a:83:1b:e9:8b:
c0:f3:6a:fe:00:e9:09:8b:9a:1c:dd:c0:db:89:f7:5a:fe:4d:
f4:79:77:d9:30:68:38:b3:52:31:f1:48:09:a4:53:58:9e:74:
8f:0e:29:48:5f:d5:6c:71:c4:11:7b:0d:83:24:d5:53:35:c3:
3d:ea:d8:5c:be:f5:09:75:6b:74:71:81:9f:25:85:14:2a:76:
4c:90:c6:25:42:9b:d7:09:d4:84:87:cc:e8:b5:9d:84:cb:5a:
16:d6:42:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 19:12:23 2025 by rpki-client