Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/4a3caf-f84c-4c76-8065-962206b1686b/1/UsY0DXPP6n766FRiykt_pSqHwzE.roa
File: UsY0DXPP6n766FRiykt_pSqHwzE.roa (raw, json)
Hash identifier: NitQAMfHtwFmOnU+ziuoGVZOIdtEIm3Tg9s1wr+3SzM=
Subject key identifier: 52:C6:34:0D:73:CF:EA:7E:FA:E8:54:62:CA:4B:7F:A5:2A:87:C3:31
Certificate issuer: /CN=806757de8ffcdd1fd9af78b645536bda7c76c30e
Certificate serial: 0194236A21A636FAA10A6522B0D597E5E040
Authority key identifier: 80:67:57:DE:8F:FC:DD:1F:D9:AF:78:B6:45:53:6B:DA:7C:76:C3:0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gGdX3o_83R_Zr3i2RVNr2nx2ww4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/4a3caf-f84c-4c76-8065-962206b1686b/1/UsY0DXPP6n766FRiykt_pSqHwzE.roa
Signing time: Wed 01 Jan 2025 19:49:05 +0000
ROA not before: Wed 01 Jan 2025 19:49:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57043
IP address blocks: 156.67.62.0/24 maxlen: 24
156.67.63.0/24 maxlen: 24
195.162.69.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:6a:21:a6:36:fa:a1:0a:65:22:b0:d5:97:e5:e0:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=806757de8ffcdd1fd9af78b645536bda7c76c30e
Validity
Not Before: Jan 1 19:49:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=52c6340d73cfea7efae85462ca4b7fa52a87c331
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:3b:64:df:a9:19:84:32:f8:46:0c:46:5c:56:
ac:d9:39:2b:73:65:23:93:3f:68:86:2e:5f:f1:bd:
60:ce:17:21:0c:e1:62:6a:8c:b7:41:0d:13:4e:23:
e2:eb:5d:da:80:5d:73:88:17:db:ed:42:62:97:bd:
b5:93:aa:47:f0:d0:df:e1:c9:cd:bd:db:ee:87:e3:
1f:e4:20:61:bb:bf:b2:59:f2:d8:c1:74:b0:02:52:
07:a1:3d:74:89:94:e6:6c:8c:54:51:fe:61:5f:96:
22:4a:1d:cc:01:88:d1:a6:95:d1:1b:b7:2b:a1:4e:
f1:84:11:94:43:d6:37:ad:d6:55:9e:bb:bf:22:3a:
5e:12:34:5d:a8:f6:50:44:6f:ab:2e:6e:6d:9a:92:
11:91:32:0d:2f:3d:d7:ed:d8:f0:b7:f2:66:6f:85:
65:9d:0f:ab:f9:b0:a2:58:48:4b:24:77:15:3f:d2:
59:d5:1a:1b:92:bc:a3:31:a4:32:7e:38:de:c6:d7:
46:e1:fb:94:83:d7:2e:97:62:8d:6b:75:a2:c5:39:
69:dc:66:82:04:f7:d8:e8:3a:bb:64:78:07:0a:d0:
fb:93:77:08:db:3e:5b:1b:cd:93:bb:0d:c0:47:33:
eb:f2:22:57:c8:0a:95:aa:25:b0:10:e2:2d:74:f8:
60:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:C6:34:0D:73:CF:EA:7E:FA:E8:54:62:CA:4B:7F:A5:2A:87:C3:31
X509v3 Authority Key Identifier:
keyid:80:67:57:DE:8F:FC:DD:1F:D9:AF:78:B6:45:53:6B:DA:7C:76:C3:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gGdX3o_83R_Zr3i2RVNr2nx2ww4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/4a3caf-f84c-4c76-8065-962206b1686b/1/UsY0DXPP6n766FRiykt_pSqHwzE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/4a3caf-f84c-4c76-8065-962206b1686b/1/gGdX3o_83R_Zr3i2RVNr2nx2ww4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
156.67.62.0/23
195.162.69.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:2f:7d:64:6e:d5:3b:18:ab:5e:8c:0a:c5:dd:51:82:b2:28:
f8:c8:2b:52:1c:57:66:ef:59:0b:64:32:c8:f6:48:43:d9:c1:
8e:b0:78:1c:6d:fe:61:a2:0d:a7:d9:e2:3e:8a:90:2d:d7:30:
ce:f8:7b:76:dc:d9:97:7a:89:3d:08:6d:c3:f5:1a:7b:55:e5:
34:63:4c:e7:16:26:63:7c:d0:cc:0a:73:a4:d3:98:08:cd:0b:
02:2a:ba:5f:48:a5:3b:ef:43:c4:7e:9b:d3:7c:f4:b3:ec:3d:
e0:1c:71:3f:82:3b:8e:eb:d9:cf:2d:66:36:50:73:06:dc:ac:
fc:34:fb:d4:01:d9:a7:68:ef:77:9f:8b:b9:a6:ba:32:9b:a1:
46:d5:ae:5b:8f:de:9a:31:e2:fd:f7:c3:83:bd:9c:10:71:11:
d4:9b:53:48:67:58:c3:4e:2e:af:8d:df:c4:9c:67:7c:43:ff:
c1:ee:47:78:96:6c:0a:00:f8:95:b2:59:d3:1b:41:1c:36:f6:
4e:2c:e2:04:20:1c:29:1f:0f:37:9d:e3:9c:ff:1c:27:e2:24:
70:9d:b3:12:24:bd:16:9f:dd:c4:12:84:53:36:fe:d0:c0:5c:
7d:42:a4:de:a0:ad:d3:4b:dc:76:fc:79:fc:dc:4c:4f:51:f1:
06:b0:55:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 14:27:32 2025 by rpki-client