Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/2c5af2-0937-4f40-88e0-1104841d374e/1/YwpFL-la1dCDFyOhJkDlnsbvc0E.roa
File: YwpFL-la1dCDFyOhJkDlnsbvc0E.roa (raw, json)
Hash identifier: 5Fts0SsJTbarORUPjAMAPXr3a1lfXPj9HBkPNFyTj4M=
Subject key identifier: 63:0A:45:2F:E9:5A:D5:D0:83:17:23:A1:26:40:E5:9E:C6:EF:73:41
Certificate issuer: /CN=479762e88d8f67fad4aa059a1b8b46fa4cc7a893
Certificate serial: 019423D701F515BCD303A19D99F43EC66309
Authority key identifier: 47:97:62:E8:8D:8F:67:FA:D4:AA:05:9A:1B:8B:46:FA:4C:C7:A8:93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R5di6I2PZ_rUqgWaG4tG-kzHqJM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/2c5af2-0937-4f40-88e0-1104841d374e/1/YwpFL-la1dCDFyOhJkDlnsbvc0E.roa
Signing time: Wed 01 Jan 2025 21:48:00 +0000
ROA not before: Wed 01 Jan 2025 21:48:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60014
IP address blocks: 78.31.232.0/22 maxlen: 22
193.106.190.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:01:f5:15:bc:d3:03:a1:9d:99:f4:3e:c6:63:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=479762e88d8f67fad4aa059a1b8b46fa4cc7a893
Validity
Not Before: Jan 1 21:48:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=630a452fe95ad5d0831723a12640e59ec6ef7341
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:ca:76:d0:73:2f:c1:8a:5b:17:e7:3e:c5:11:
24:e9:a4:0e:95:72:c6:ef:29:67:a5:6f:42:9d:67:
7c:62:a6:85:62:53:59:58:a4:3e:0a:35:34:a8:ac:
30:00:ab:6c:16:25:37:b6:22:91:03:bf:8e:7d:26:
9f:8a:bc:ce:39:d1:11:cf:71:eb:db:52:7e:90:45:
3a:0a:b1:fd:a3:76:39:d1:bc:7b:6d:8c:bc:14:e5:
dd:d0:8f:e3:47:5a:be:22:dd:ea:e1:20:07:de:f4:
09:8b:58:76:a7:c3:31:e3:44:ef:21:c2:aa:e2:29:
e2:a7:0f:9d:c3:67:b6:d3:33:e5:5a:b5:0b:08:e9:
37:98:7c:90:89:1c:a7:35:54:76:e0:62:bb:95:98:
63:6b:01:50:88:16:8b:4a:e5:e5:42:c0:fc:90:ac:
4b:ef:64:49:42:0c:13:37:6a:c4:ff:45:74:1f:b7:
82:16:d9:8c:4a:e6:30:64:0d:80:d3:d0:60:74:22:
d2:b5:43:82:cc:68:13:da:90:ba:dd:19:fd:57:e5:
f3:08:ab:7c:c4:4c:cb:f5:80:ee:46:c1:ee:27:e6:
a0:0e:dd:ab:a9:20:af:de:cb:ff:b9:f2:0c:8d:9b:
b3:e0:8d:30:94:d7:f6:1c:13:a0:22:ca:04:dd:b8:
66:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:0A:45:2F:E9:5A:D5:D0:83:17:23:A1:26:40:E5:9E:C6:EF:73:41
X509v3 Authority Key Identifier:
keyid:47:97:62:E8:8D:8F:67:FA:D4:AA:05:9A:1B:8B:46:FA:4C:C7:A8:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R5di6I2PZ_rUqgWaG4tG-kzHqJM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/2c5af2-0937-4f40-88e0-1104841d374e/1/YwpFL-la1dCDFyOhJkDlnsbvc0E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/2c5af2-0937-4f40-88e0-1104841d374e/1/R5di6I2PZ_rUqgWaG4tG-kzHqJM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.31.232.0/22
193.106.190.0/24
Signature Algorithm: sha256WithRSAEncryption
97:2d:3c:77:3e:3c:48:e0:8f:fe:a8:87:f9:13:a1:33:0b:da:
bf:97:7f:5e:dc:6d:13:58:c2:fd:31:a7:c6:64:01:08:b4:37:
b3:81:17:c4:94:e1:b4:ec:0d:82:68:47:bf:43:4a:c6:2e:4a:
4a:26:aa:35:fb:f2:93:fc:6a:77:a3:3c:af:79:38:23:70:a7:
67:65:ec:41:af:12:c7:fc:e8:fc:33:8b:23:3b:fb:e7:2d:55:
b8:eb:6c:cf:19:b7:29:43:e0:44:6c:8d:10:7b:dc:c4:75:f6:
f0:dc:39:61:c9:8f:5b:36:ef:44:da:ca:f2:a1:01:3c:09:68:
9e:83:e2:d2:67:21:61:0c:24:e2:4a:fa:a5:19:3c:79:d6:de:
02:53:fa:3f:a9:e8:ff:29:d7:e1:33:ee:11:f0:b0:d1:6d:b3:
42:ac:c7:76:fe:fd:28:fd:76:4d:3d:26:57:93:04:0e:ba:05:
92:01:7a:7a:27:b5:0e:ff:af:1d:d4:91:9d:98:8b:22:1c:d4:
70:b0:db:d5:ba:ae:e0:37:19:0d:72:a5:35:9d:5e:33:8c:7b:
08:b1:8a:e3:fe:7a:7b:e8:38:7a:79:34:3f:01:85:35:a8:82:
48:e7:f7:03:4a:28:80:83:9d:b5:52:e6:ae:b0:36:7b:63:0d:
04:f3:8c:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:11:25 2025 by rpki-client