Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/f93db8-0e7d-4ea6-891d-70c67f126bf2/1/jYHVHa_z-zz0JtB1DIQ1TtprFQY.roa
File: jYHVHa_z-zz0JtB1DIQ1TtprFQY.roa (raw, json)
Hash identifier: 5f5RDqgvWFs/JJIC0o4g6y4OSZQd4pIoTEeBtxoIxSo=
Subject key identifier: 8D:81:D5:1D:AF:F3:FB:3C:F4:26:D0:75:0C:84:35:4E:DA:6B:15:06
Certificate issuer: /CN=d7f6f4827c58cb28f996a9aaeb348f1fd26a0ca5
Certificate serial: 0194244490683787B78B847A89D9C86FD098
Authority key identifier: D7:F6:F4:82:7C:58:CB:28:F9:96:A9:AA:EB:34:8F:1F:D2:6A:0C:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1_b0gnxYyyj5lqmq6zSPH9JqDKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/f93db8-0e7d-4ea6-891d-70c67f126bf2/1/jYHVHa_z-zz0JtB1DIQ1TtprFQY.roa
Signing time: Wed 01 Jan 2025 23:47:40 +0000
ROA not before: Wed 01 Jan 2025 23:47:40 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 34906
IP address blocks: 193.189.94.0/23 maxlen: 23
193.189.94.0/24 maxlen: 24
193.189.95.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:44:90:68:37:87:b7:8b:84:7a:89:d9:c8:6f:d0:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7f6f4827c58cb28f996a9aaeb348f1fd26a0ca5
Validity
Not Before: Jan 1 23:47:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8d81d51daff3fb3cf426d0750c84354eda6b1506
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:b9:a5:19:93:06:8f:6f:1e:11:2f:f3:56:a7:
26:0f:94:c2:af:54:8a:00:c6:c0:2f:97:a2:2a:48:
ae:22:f3:9c:59:4e:28:4a:0e:13:87:4a:ab:a2:68:
38:89:b3:2a:b2:38:ac:65:2f:3b:a9:a0:bf:52:7d:
04:ba:72:48:31:f3:f8:74:ec:26:e6:8b:39:7f:aa:
7b:85:f7:79:35:dc:35:62:69:7f:d9:1f:08:36:65:
d1:70:9b:27:89:69:4d:d0:ef:6f:36:f9:74:43:70:
0e:50:af:ba:ff:2c:fc:58:5f:56:3c:33:e2:79:ed:
1a:0b:e2:28:da:bd:b7:90:7f:0b:2f:b0:04:92:83:
fb:6f:a2:bc:ab:20:c3:a1:a8:19:9a:42:ca:d6:2f:
48:79:7e:21:72:0c:d0:26:f3:5b:8d:68:17:9b:ce:
aa:e0:d9:05:10:f5:60:97:a5:69:e2:0e:a1:da:d8:
0b:f9:e6:d7:9f:68:9c:6c:24:e5:80:cb:bf:78:44:
a4:3d:84:16:ab:bf:39:96:5b:50:42:97:cd:f5:8d:
28:88:c7:b5:e5:21:5d:f8:92:5f:e9:65:1d:ad:a8:
aa:0d:a3:c2:7f:93:da:b2:bc:77:0e:52:12:a9:8a:
3d:4f:44:e3:41:84:86:56:25:d7:c6:74:f7:b7:c1:
94:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:81:D5:1D:AF:F3:FB:3C:F4:26:D0:75:0C:84:35:4E:DA:6B:15:06
X509v3 Authority Key Identifier:
keyid:D7:F6:F4:82:7C:58:CB:28:F9:96:A9:AA:EB:34:8F:1F:D2:6A:0C:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1_b0gnxYyyj5lqmq6zSPH9JqDKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/f93db8-0e7d-4ea6-891d-70c67f126bf2/1/jYHVHa_z-zz0JtB1DIQ1TtprFQY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/f93db8-0e7d-4ea6-891d-70c67f126bf2/1/1_b0gnxYyyj5lqmq6zSPH9JqDKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.189.94.0/23
Signature Algorithm: sha256WithRSAEncryption
04:bd:f9:88:ce:d9:be:56:6d:61:e2:5e:84:23:38:22:6c:7b:
82:85:40:3a:54:6d:18:47:1f:44:57:82:e9:70:9f:97:66:d7:
78:78:36:a8:f8:1e:de:36:ef:f5:ed:d0:5c:14:db:0c:aa:2e:
e4:a5:28:5e:98:aa:bd:1f:17:7f:ec:d7:3c:42:96:1b:df:4d:
28:15:69:fb:f8:2e:93:77:3d:d1:08:80:4b:fc:7a:15:41:cf:
59:50:ec:b3:fe:72:dd:9f:21:3b:01:97:4d:a6:97:0e:2d:6e:
b4:f9:9f:81:dc:a9:a9:1a:85:47:92:ea:85:a7:6f:11:d2:76:
26:3f:6f:dd:cf:74:d2:00:a8:0a:ab:cd:ab:ad:32:dc:87:00:
4a:7e:b6:8a:d5:8f:99:64:8f:4f:39:71:be:09:fd:91:d2:ba:
e6:6f:52:ee:b2:0c:c4:23:34:ee:8b:99:39:d2:c4:b2:d4:9d:
77:8a:32:a7:45:6d:41:18:c3:b5:7d:4f:9d:fb:8b:f7:10:a6:
50:34:44:5c:37:ac:20:07:71:43:63:c9:9b:25:3e:de:6b:5c:
2d:4d:84:25:0f:e8:0e:4f:8c:93:20:6b:b8:b6:67:78:8e:bd:
78:7f:3e:5b:62:71:d5:b5:86:dc:08:bb:bc:b0:92:19:63:a5:
18:80:da:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 16:43:22 2025 by rpki-client