Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/6725f8-9ab9-4102-83d3-bc49291b4aaa/1/Y6XguoASkuj117zapWikDdhsOwE.roa
File: Y6XguoASkuj117zapWikDdhsOwE.roa (raw, json)
Hash identifier: cYRIxVqFr0BZZuT1yz+/1pm1CRjn1QkJKZ6Frd8lRoI=
Subject key identifier: 63:A5:E0:BA:80:12:92:E8:F5:D7:BC:DA:A5:68:A4:0D:D8:6C:3B:01
Certificate issuer: /CN=b1e59db1bdaf213cad21025f778fac9618fd4e91
Certificate serial: 019423D6FFF4B116F1646F1DF48D6108F6C3
Authority key identifier: B1:E5:9D:B1:BD:AF:21:3C:AD:21:02:5F:77:8F:AC:96:18:FD:4E:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/seWdsb2vITytIQJfd4-slhj9TpE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/6725f8-9ab9-4102-83d3-bc49291b4aaa/1/Y6XguoASkuj117zapWikDdhsOwE.roa
Signing time: Wed 01 Jan 2025 21:48:00 +0000
ROA not before: Wed 01 Jan 2025 21:48:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 35444
IP address blocks: 194.35.250.0/24 maxlen: 24
194.35.251.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d6:ff:f4:b1:16:f1:64:6f:1d:f4:8d:61:08:f6:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1e59db1bdaf213cad21025f778fac9618fd4e91
Validity
Not Before: Jan 1 21:48:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=63a5e0ba801292e8f5d7bcdaa568a40dd86c3b01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:78:f4:c6:30:fc:09:e8:4f:61:39:08:e5:0a:
2d:bf:74:d6:ca:bb:2f:14:b4:55:3e:db:4a:9f:58:
f1:0f:9e:ba:e2:fc:b7:55:ce:93:f8:bc:79:e0:10:
0f:ac:37:3e:8e:ee:2a:7b:d1:63:55:c8:cd:f6:bf:
79:96:39:ca:95:ab:2d:25:fd:9c:b6:ef:6a:bb:b5:
c0:ec:7b:c2:51:e7:be:6e:bc:61:d7:46:6d:16:60:
b3:4d:e0:57:a2:e6:da:84:99:0e:6b:15:53:9a:2b:
88:e2:00:b1:04:b9:de:2e:39:d7:d4:e3:77:d7:c1:
6e:78:a3:32:37:eb:87:b2:8a:db:3a:1d:31:b3:ef:
ef:14:bb:a4:dc:58:a9:57:2d:41:39:3b:8c:a7:1e:
85:c4:d1:2c:a8:e6:6c:56:e0:61:e7:49:ff:14:a4:
9d:67:52:02:7f:45:d7:06:b3:57:e0:d1:99:6b:69:
df:e6:47:67:97:a8:d7:07:0a:34:c7:15:06:24:57:
5a:9f:b1:80:15:6a:84:4a:5a:79:80:6c:d1:af:aa:
18:01:c7:a7:eb:ce:24:96:12:e0:6d:c0:95:b8:4c:
56:18:cc:5d:11:da:25:da:64:1e:34:77:18:1e:75:
b3:40:b8:f2:d3:56:92:29:27:a4:44:1b:58:cf:8e:
b5:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:A5:E0:BA:80:12:92:E8:F5:D7:BC:DA:A5:68:A4:0D:D8:6C:3B:01
X509v3 Authority Key Identifier:
keyid:B1:E5:9D:B1:BD:AF:21:3C:AD:21:02:5F:77:8F:AC:96:18:FD:4E:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/seWdsb2vITytIQJfd4-slhj9TpE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/6725f8-9ab9-4102-83d3-bc49291b4aaa/1/Y6XguoASkuj117zapWikDdhsOwE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/6725f8-9ab9-4102-83d3-bc49291b4aaa/1/seWdsb2vITytIQJfd4-slhj9TpE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.35.250.0/23
Signature Algorithm: sha256WithRSAEncryption
21:86:37:b9:d7:2d:a6:51:64:79:30:4a:d6:7e:23:c7:64:85:
2b:4d:d3:9a:d2:8c:91:bf:62:e6:3a:2c:9b:38:03:e2:82:93:
ff:d5:93:27:c9:13:33:22:9e:72:d6:4b:c6:9a:49:5c:07:af:
b2:a0:e9:8a:94:68:23:4d:95:da:7b:10:18:9e:01:16:1a:d0:
7a:b5:0b:d9:f2:4d:5b:67:4b:27:6f:a5:ed:3d:41:72:20:64:
1c:5b:3c:dd:d4:18:cf:6d:e7:72:00:db:30:ca:ac:01:25:d7:
a1:44:f9:b5:a2:b7:d1:a7:b2:52:a0:fe:dd:d2:55:9d:7b:db:
a2:aa:2a:ad:85:16:09:1f:67:4a:47:bc:c7:ae:d3:ad:bc:5b:
e0:17:1e:04:89:39:aa:73:ba:2b:8a:24:94:e6:25:67:be:95:
1e:30:08:52:b2:da:50:ca:fe:71:ce:09:a6:63:ab:9f:17:49:
07:20:bb:ba:c0:46:72:58:cb:da:bb:01:33:e0:30:ef:e1:ee:
c9:ed:b9:a0:95:e3:7f:75:3a:7b:82:3d:27:4d:ce:7e:12:ed:
80:60:30:18:a0:2d:fd:57:1e:ea:d3:ca:74:8b:1e:78:21:49:
c1:b7:58:f5:d7:60:8a:e9:52:6e:82:24:4c:4c:3f:ae:14:47:
ef:50:8a:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 08:27:59 2025 by rpki-client