Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/880b00-58ab-47de-9728-0cad6ca7ecd7/1/YTi5kVsPsdj_lVOXlLvthRcyZYk.roa
File: YTi5kVsPsdj_lVOXlLvthRcyZYk.roa (raw, json)
Hash identifier: yclAP/FevQD565z0O5X4lV8O1DrwrH9X8Lbd0rW1rtQ=
Subject key identifier: 61:38:B9:91:5B:0F:B1:D8:FF:95:53:97:94:BB:ED:85:17:32:65:89
Certificate issuer: /CN=81523888eed5311f92a16615ef2cf0175c6fe41e
Certificate serial: 019425FD3CFA244ADDCB035E5A10849DDCE8
Authority key identifier: 81:52:38:88:EE:D5:31:1F:92:A1:66:15:EF:2C:F0:17:5C:6F:E4:1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gVI4iO7VMR-SoWYV7yzwF1xv5B4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/880b00-58ab-47de-9728-0cad6ca7ecd7/1/YTi5kVsPsdj_lVOXlLvthRcyZYk.roa
Signing time: Thu 02 Jan 2025 07:49:00 +0000
ROA not before: Thu 02 Jan 2025 07:49:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214081
IP address blocks: 193.105.92.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:3c:fa:24:4a:dd:cb:03:5e:5a:10:84:9d:dc:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81523888eed5311f92a16615ef2cf0175c6fe41e
Validity
Not Before: Jan 2 07:49:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6138b9915b0fb1d8ff95539794bbed8517326589
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:60:a1:82:d4:94:0b:7d:05:13:1f:9c:3a:7b:
64:f7:05:5d:59:f7:9c:88:3d:25:0c:a2:08:50:ab:
7d:b0:bb:75:67:2b:f8:3d:b7:1b:03:8b:97:b6:c3:
f2:55:8e:ac:f2:89:a5:57:ed:38:01:1b:2f:37:f0:
81:fe:3e:ee:21:32:34:aa:41:2a:0d:4a:ea:7d:6a:
ee:0d:35:57:f1:5c:f2:68:7d:25:54:a1:a9:03:56:
64:81:88:90:30:8c:8a:d3:ed:05:15:bf:99:5e:6f:
59:5b:de:b7:e9:2c:d5:33:48:6b:78:ef:8a:ca:24:
5b:84:5b:21:17:70:f9:e7:88:fb:1a:10:1f:8c:01:
be:ef:32:9a:32:0f:f6:4c:fa:ae:45:3c:19:4c:39:
bd:dc:05:3a:4a:26:b9:3c:7d:2e:b5:0c:df:16:50:
4e:e7:30:35:b8:6e:35:18:c6:5c:84:c2:01:90:0c:
51:f4:dc:f5:8f:ee:4e:f5:b0:89:7b:56:d4:57:24:
68:80:3d:7a:7b:2b:41:d9:98:ab:88:4e:c7:a7:66:
bf:5d:b6:c6:76:d7:ba:ab:7e:97:93:49:f5:93:43:
26:e4:04:13:87:1a:ab:32:3b:59:40:23:c4:95:24:
d4:c8:a0:f8:e0:5e:3d:8a:74:33:81:2d:c9:e9:e7:
8f:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:38:B9:91:5B:0F:B1:D8:FF:95:53:97:94:BB:ED:85:17:32:65:89
X509v3 Authority Key Identifier:
keyid:81:52:38:88:EE:D5:31:1F:92:A1:66:15:EF:2C:F0:17:5C:6F:E4:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gVI4iO7VMR-SoWYV7yzwF1xv5B4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/880b00-58ab-47de-9728-0cad6ca7ecd7/1/YTi5kVsPsdj_lVOXlLvthRcyZYk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/880b00-58ab-47de-9728-0cad6ca7ecd7/1/gVI4iO7VMR-SoWYV7yzwF1xv5B4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.105.92.0/24
Signature Algorithm: sha256WithRSAEncryption
b5:10:7d:ab:a6:67:a7:38:9d:84:ed:ba:d4:4f:3b:4f:5a:69:
43:8b:f4:a1:a9:87:06:bf:0f:c3:16:ec:45:ac:1d:3b:27:f6:
77:9c:39:19:05:17:4e:21:06:61:4f:a1:e4:8a:98:ab:0d:fb:
b7:89:b5:30:5e:ec:33:85:7d:8e:94:c3:d8:05:3d:fd:2e:7c:
4a:33:ef:54:7f:91:e9:e9:df:f2:73:c8:d2:cb:25:ba:05:d6:
ac:71:1e:b6:1e:97:87:2d:a0:a2:9d:c5:66:b9:cd:54:2b:e7:
5a:2e:98:11:74:d9:4a:de:15:c6:1f:ea:a8:0b:66:2e:81:45:
d8:ab:13:3a:68:41:8e:47:9b:4b:9b:1c:68:da:47:c8:d1:c0:
59:17:72:43:c6:9d:b2:db:20:19:21:66:16:48:dc:8a:ab:2e:
fb:80:28:ba:3d:59:8b:2b:7c:df:97:4a:29:60:82:b4:08:70:
d0:ae:79:73:75:22:14:aa:cd:b5:49:f7:3b:57:20:e1:8d:d7:
b7:fb:ff:e9:15:7b:6e:2e:ca:39:ee:be:9e:27:fd:06:ba:02:
61:9e:17:a8:6a:ef:88:7e:92:de:23:c3:5e:35:0d:56:ea:ff:
d8:0b:b5:08:31:ef:2e:d3:61:c2:48:18:44:90:7c:3a:8f:70:
45:bb:86:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 14:17:34 2025 by rpki-client