Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/e4ccb1-ca25-4099-8273-3993aa324e1f/1/yqrbohxedJqZYRfOM_ZbeFgbUDk.roa
File: yqrbohxedJqZYRfOM_ZbeFgbUDk.roa (raw, json)
Hash identifier: 5D+jOOYzSjHZwRxIJ5GcJlLwrz/EOLrzaFXp3+Dosvg=
Subject key identifier: CA:AA:DB:A2:1C:5E:74:9A:99:61:17:CE:33:F6:5B:78:58:1B:50:39
Certificate issuer: /CN=6ce97cf4d8d0bc17b3af1d62c4d71488661bd212
Certificate serial: 019425FDC9FA9CBA987EB7FF2E4EC20E0EC4
Authority key identifier: 6C:E9:7C:F4:D8:D0:BC:17:B3:AF:1D:62:C4:D7:14:88:66:1B:D2:12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bOl89NjQvBezrx1ixNcUiGYb0hI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/e4ccb1-ca25-4099-8273-3993aa324e1f/1/yqrbohxedJqZYRfOM_ZbeFgbUDk.roa
Signing time: Thu 02 Jan 2025 07:49:36 +0000
ROA not before: Thu 02 Jan 2025 07:49:36 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211218
IP address blocks: 194.28.101.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:c9:fa:9c:ba:98:7e:b7:ff:2e:4e:c2:0e:0e:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ce97cf4d8d0bc17b3af1d62c4d71488661bd212
Validity
Not Before: Jan 2 07:49:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=caaadba21c5e749a996117ce33f65b78581b5039
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:e8:07:9e:55:99:ef:1c:14:7e:88:17:e5:75:
7f:cd:b8:eb:81:9a:b6:72:3c:87:3f:bd:75:29:a4:
9f:01:35:bc:86:39:59:46:2b:25:c4:de:0a:9b:33:
61:14:24:47:4d:d2:5c:dc:8c:95:54:d4:3a:95:1f:
4d:a6:06:41:81:e0:5d:52:fb:9e:4b:57:54:66:98:
ba:a0:c5:5f:74:35:62:0d:bd:c4:93:ef:80:fb:e0:
05:a8:b1:87:9b:7e:84:a9:04:c4:5a:7f:56:e0:cf:
c2:58:f4:be:d5:e6:66:f9:b8:d7:07:7e:1b:e1:e2:
b7:22:71:aa:ce:76:06:b0:ab:74:59:03:b7:16:88:
53:0b:fa:e1:fd:3c:75:77:26:ca:48:b4:17:b1:c7:
f2:95:5f:ab:84:f8:73:34:e5:37:ea:ed:9f:c1:c8:
71:08:dc:20:51:2e:85:6c:29:bb:03:80:3a:06:a2:
a5:04:bf:4a:68:3f:53:29:52:a9:ce:85:3e:07:17:
0c:c0:5f:ab:34:5b:18:3a:ba:bd:65:4e:25:82:b1:
db:39:a7:a2:85:6f:63:ad:a0:83:5d:68:13:1a:00:
b8:ab:b7:5a:c1:b5:75:ae:fc:c1:f1:78:ea:e3:5b:
8c:2a:c8:27:fb:fd:e9:c2:f3:f2:6c:5e:a2:be:89:
d2:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:AA:DB:A2:1C:5E:74:9A:99:61:17:CE:33:F6:5B:78:58:1B:50:39
X509v3 Authority Key Identifier:
keyid:6C:E9:7C:F4:D8:D0:BC:17:B3:AF:1D:62:C4:D7:14:88:66:1B:D2:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bOl89NjQvBezrx1ixNcUiGYb0hI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/e4ccb1-ca25-4099-8273-3993aa324e1f/1/yqrbohxedJqZYRfOM_ZbeFgbUDk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/e4ccb1-ca25-4099-8273-3993aa324e1f/1/bOl89NjQvBezrx1ixNcUiGYb0hI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.28.101.0/24
Signature Algorithm: sha256WithRSAEncryption
41:49:c9:82:e7:4c:23:f7:cf:48:51:8d:b2:16:b7:9c:82:d3:
da:b4:ed:7f:91:c4:f8:7d:a8:2b:6c:8f:38:3b:b5:6c:70:f9:
83:aa:ad:15:02:8e:bf:65:bd:0f:6f:1d:18:7b:9a:7d:ac:53:
4e:6b:ab:d9:be:c4:23:bd:06:4a:57:6c:15:15:7a:e9:fb:11:
39:d9:b7:57:04:61:74:e8:81:93:87:15:ad:1d:a5:6d:d9:44:
4a:bd:c8:19:fb:65:ae:b5:da:78:99:45:35:80:9d:1a:0f:40:
3d:2e:b2:fd:d5:08:e0:bf:58:6c:1f:4d:b6:7d:f1:5e:26:c7:
8c:f8:16:45:47:10:65:f5:e9:58:88:3c:cd:64:1a:2e:5e:f7:
ea:bb:15:7a:2c:ff:64:e5:a1:09:4b:c3:5c:e3:10:3c:5b:32:
5f:a0:d3:9d:c1:19:3c:bb:10:52:8c:20:ca:3c:9d:f6:9b:f8:
07:30:90:fa:48:9d:31:2e:ad:15:e1:d5:6e:bd:39:47:ea:f0:
41:0d:9e:14:59:25:13:f8:0d:f0:0c:0e:c4:2b:24:10:65:39:
c3:0e:9a:18:b3:9c:33:9d:21:58:46:e7:3c:19:73:ff:1d:21:
d5:09:fd:17:2f:49:97:0a:cf:49:b9:e2:cb:f2:49:6d:4c:e5:
11:09:16:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:01:26 2025 by rpki-client