Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/da96f5-3f33-46f9-a514-2befffd57fb7/1/YXNgqkH32mHlbxjAP4XMYGxuX-A.roa
File: YXNgqkH32mHlbxjAP4XMYGxuX-A.roa (raw, json)
Hash identifier: U+xr/pCSHTkJQcJTemkszlIrTDWL9g14UMPWkZKLV+k=
Subject key identifier: 61:73:60:AA:41:F7:DA:61:E5:6F:18:C0:3F:85:CC:60:6C:6E:5F:E0
Certificate issuer: /CN=4196230e58decc0cbcfb15f56aa64dedd1f389f5
Certificate serial: 019426D9E540B731C7A7D675C69D73707DAC
Authority key identifier: 41:96:23:0E:58:DE:CC:0C:BC:FB:15:F5:6A:A6:4D:ED:D1:F3:89:F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QZYjDljezAy8-xX1aqZN7dHzifU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/da96f5-3f33-46f9-a514-2befffd57fb7/1/YXNgqkH32mHlbxjAP4XMYGxuX-A.roa
Signing time: Thu 02 Jan 2025 11:50:01 +0000
ROA not before: Thu 02 Jan 2025 11:50:01 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 54103
IP address blocks: 195.128.163.0/24 maxlen: 24
195.128.179.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:e5:40:b7:31:c7:a7:d6:75:c6:9d:73:70:7d:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4196230e58decc0cbcfb15f56aa64dedd1f389f5
Validity
Not Before: Jan 2 11:50:01 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=617360aa41f7da61e56f18c03f85cc606c6e5fe0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:db:f9:df:09:91:b2:5d:89:a6:12:5e:48:39:
52:26:dc:63:a2:e5:1a:58:c6:42:90:a3:86:0b:f4:
d1:0a:9d:c5:b4:40:b9:e6:1b:bd:03:af:d2:8d:c9:
14:80:60:c5:a8:d8:3a:d7:04:94:cb:5a:49:1f:fe:
4f:89:15:b7:7f:63:ac:31:f1:23:17:05:cf:19:9d:
18:22:66:32:01:60:56:90:4a:f2:b0:ae:cc:3c:e9:
fe:33:60:83:42:4d:a5:97:a4:92:23:82:d5:26:86:
b5:bc:6c:fc:72:17:8e:43:7f:22:a0:66:fc:dc:ab:
ef:d1:99:f7:d5:cc:20:dd:12:9c:63:10:2e:1d:4b:
39:f6:5b:b7:1d:23:3f:63:05:d0:27:44:00:94:a3:
ce:c8:2f:79:3b:90:16:ef:d2:fd:f1:9d:2b:3c:8b:
3f:5d:6e:f4:7d:40:1d:d6:06:e7:85:2e:1d:43:d6:
f6:c5:1e:e8:27:fc:a5:9e:60:b7:07:5f:36:42:0c:
b4:c8:d6:3e:56:04:74:c3:19:89:1f:ed:d1:2d:92:
81:40:22:d9:05:49:3b:ee:01:53:11:b4:b2:e3:36:
bb:fd:2d:b3:b4:06:ca:f1:67:6a:3a:88:1f:32:02:
86:ed:a6:22:37:88:81:b6:92:5d:e5:ed:ce:b9:37:
12:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:73:60:AA:41:F7:DA:61:E5:6F:18:C0:3F:85:CC:60:6C:6E:5F:E0
X509v3 Authority Key Identifier:
keyid:41:96:23:0E:58:DE:CC:0C:BC:FB:15:F5:6A:A6:4D:ED:D1:F3:89:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QZYjDljezAy8-xX1aqZN7dHzifU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/da96f5-3f33-46f9-a514-2befffd57fb7/1/YXNgqkH32mHlbxjAP4XMYGxuX-A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/da96f5-3f33-46f9-a514-2befffd57fb7/1/QZYjDljezAy8-xX1aqZN7dHzifU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.128.163.0/24
195.128.179.0/24
Signature Algorithm: sha256WithRSAEncryption
37:ba:1e:52:8b:1b:39:e4:4c:83:92:f4:e7:10:e9:23:6a:c8:
8b:ce:75:e0:1b:cf:49:09:8f:8c:54:65:72:4f:3c:6a:b6:41:
15:ca:d4:5c:5f:71:02:f2:a8:74:2f:a9:ca:bc:65:40:d3:41:
82:93:0b:eb:f2:55:90:85:0a:32:42:33:7f:0e:a8:1b:f6:2b:
07:6c:90:11:8b:a9:05:21:1e:62:fc:d1:dc:51:92:15:c0:11:
43:3c:b4:28:7d:2d:0a:fc:76:4f:38:1d:63:47:dc:6a:b9:0c:
cb:d3:26:99:8d:0d:98:c8:d3:f8:34:95:8f:c3:a3:e0:13:b7:
01:c3:6f:ef:72:10:62:ca:3b:13:c4:92:16:bf:39:0c:4b:a7:
12:cd:e4:7f:df:19:ab:58:e2:2b:88:cf:07:0e:4d:a0:12:02:
f2:1c:ce:39:04:c8:c1:70:11:5a:5d:7e:e7:89:b5:23:9f:21:
a2:f5:08:e0:94:1f:f8:63:c0:d8:63:75:e3:6d:ab:c3:92:df:
f9:32:b4:12:d8:ff:49:aa:95:5f:5b:eb:b8:79:a0:ee:32:0a:
fa:e6:33:bf:a3:6e:09:0a:75:2e:a5:0b:dc:ad:37:84:08:48:
d9:b5:5c:d8:a0:8b:08:33:6d:0b:8d:2a:3c:28:80:ee:83:de:
e9:09:3c:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 16:45:39 2025 by rpki-client