Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/5d7192-a719-4cd7-994a-62c01dc69cca/1/Y2B_AYL2gCl2_CyJ1cGobOwmPpo.roa
File: Y2B_AYL2gCl2_CyJ1cGobOwmPpo.roa (raw, json)
Hash identifier: 9wirUz6B2msilvWvCiwp1E+Ixnrs+bWT4H+o8cEiH+s=
Subject key identifier: 63:60:7F:01:82:F6:80:29:76:FC:2C:89:D5:C1:A8:6C:EC:26:3E:9A
Certificate issuer: /CN=67ce179cbe13ddb14012985a067100ef98a55601
Certificate serial: 01941FFA3AFFD538DFD902703C84B0672F3E
Authority key identifier: 67:CE:17:9C:BE:13:DD:B1:40:12:98:5A:06:71:00:EF:98:A5:56:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z84XnL4T3bFAEphaBnEA75ilVgE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/5d7192-a719-4cd7-994a-62c01dc69cca/1/Y2B_AYL2gCl2_CyJ1cGobOwmPpo.roa
Signing time: Wed 01 Jan 2025 03:48:00 +0000
ROA not before: Wed 01 Jan 2025 03:48:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51345
IP address blocks: 92.42.101.0/24 maxlen: 24
2a13:1c40::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:3a:ff:d5:38:df:d9:02:70:3c:84:b0:67:2f:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67ce179cbe13ddb14012985a067100ef98a55601
Validity
Not Before: Jan 1 03:48:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=63607f0182f6802976fc2c89d5c1a86cec263e9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:85:44:98:ed:80:6a:b7:55:ce:86:df:72:3e:
06:ff:ca:c4:c2:30:1b:62:14:ec:3b:18:85:6f:71:
f1:68:2a:fb:e6:cf:e3:16:a4:02:45:b9:24:d8:4d:
9d:50:5a:78:ac:44:09:ee:30:d1:cc:13:a9:b4:69:
6f:27:0f:de:1c:6f:e9:93:35:8a:01:44:50:56:99:
f6:c9:09:fd:cf:80:da:1b:6f:da:fd:88:64:77:e8:
94:ef:d9:33:a9:92:49:66:59:d1:2c:a5:2f:d4:c6:
88:2a:c9:10:07:fa:7f:68:0d:24:3c:a1:e6:69:0a:
0c:1b:53:81:05:0f:15:92:a8:6a:4b:8f:4a:a6:ee:
05:36:7f:08:fb:f9:4b:df:5f:a9:86:3e:c6:01:87:
9d:6c:4f:28:04:40:6a:6c:8b:c0:83:90:b4:07:4e:
04:1c:d0:fd:cb:8b:16:73:17:c5:ae:cb:1f:69:ad:
4c:93:9e:43:27:9e:0a:55:ed:f7:60:68:4f:c5:cc:
04:5b:ac:4a:a8:f8:28:a7:c5:6d:14:35:c1:89:23:
ec:38:d5:4a:e6:48:8a:70:14:67:df:df:72:5a:aa:
95:cc:bf:bc:dc:81:45:07:0d:53:ba:51:68:2a:1b:
67:ac:45:ef:fd:c2:80:95:41:7a:6f:2e:b9:7c:48:
8c:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:60:7F:01:82:F6:80:29:76:FC:2C:89:D5:C1:A8:6C:EC:26:3E:9A
X509v3 Authority Key Identifier:
keyid:67:CE:17:9C:BE:13:DD:B1:40:12:98:5A:06:71:00:EF:98:A5:56:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z84XnL4T3bFAEphaBnEA75ilVgE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/5d7192-a719-4cd7-994a-62c01dc69cca/1/Y2B_AYL2gCl2_CyJ1cGobOwmPpo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/5d7192-a719-4cd7-994a-62c01dc69cca/1/Z84XnL4T3bFAEphaBnEA75ilVgE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.42.101.0/24
IPv6:
2a13:1c40::/32
Signature Algorithm: sha256WithRSAEncryption
18:a3:68:7f:f4:0d:a0:dc:2e:22:e4:ce:72:02:e4:80:20:50:
5e:e7:04:6d:14:9b:b3:8c:3c:1f:ac:c5:70:1c:f7:fe:a9:b3:
f6:b7:81:a3:1f:06:ec:e3:05:99:fc:57:92:4f:b9:b2:ce:c5:
14:36:f4:98:b4:37:1b:50:19:0a:47:a9:b8:a7:83:14:8d:11:
aa:dc:a3:80:ca:0e:d7:ee:ea:c3:05:7d:2a:36:e3:ae:49:42:
d6:17:f6:8b:ae:68:e2:54:c2:96:23:c3:a6:b7:d8:50:b9:9b:
32:ee:d7:a1:8e:66:8a:8f:67:5e:72:8a:4b:6b:c2:e2:9c:bc:
03:5c:65:bd:51:5e:c6:c2:ee:78:4f:77:c5:29:30:b0:56:6c:
94:a5:37:a3:74:e4:78:c6:d5:8f:ee:ab:b8:b7:cb:a8:1d:4e:
18:f5:6f:18:89:c0:87:02:4e:5c:a7:fb:d6:19:a4:4c:89:2d:
22:40:87:e9:94:e5:c6:1c:78:d1:28:52:b1:e1:b7:bb:b9:81:
5a:4c:7c:d3:90:99:f2:4f:dd:89:d4:36:99:49:20:c7:42:5e:
a9:10:0f:67:aa:0f:61:b7:88:e1:8e:f4:ce:9b:8e:10:be:53:
8d:2c:e9:df:6d:b8:26:66:62:50:93:fd:85:4b:bc:8c:4e:14:
f6:f6:c4:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:56:09 2025 by rpki-client