Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/6c5cd2-1920-4564-bc2c-94177f8d877c/1/yLRog1k-iJohsHlS9HFe5cUcYWg.roa
File: yLRog1k-iJohsHlS9HFe5cUcYWg.roa (raw, json)
Hash identifier: ZlXdhSl4IFvEbzgGzHY+LvPAZzUFdSUq8xFm3+GUTOI=
Subject key identifier: C8:B4:68:83:59:3E:88:9A:21:B0:79:52:F4:71:5E:E5:C5:1C:61:68
Certificate issuer: /CN=6a937d95aebbbe62b90f24dea4d663170a6659ec
Certificate serial: 019420D5BF3AF5FBAA728C3F4391B043648A
Authority key identifier: 6A:93:7D:95:AE:BB:BE:62:B9:0F:24:DE:A4:D6:63:17:0A:66:59:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/apN9la67vmK5DyTepNZjFwpmWew.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/6c5cd2-1920-4564-bc2c-94177f8d877c/1/yLRog1k-iJohsHlS9HFe5cUcYWg.roa
Signing time: Wed 01 Jan 2025 07:47:46 +0000
ROA not before: Wed 01 Jan 2025 07:47:46 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 29210
IP address blocks: 195.69.120.0/22 maxlen: 22
195.69.120.0/24 maxlen: 24
195.69.121.0/24 maxlen: 24
195.69.122.0/24 maxlen: 24
195.69.123.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d5:bf:3a:f5:fb:aa:72:8c:3f:43:91:b0:43:64:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a937d95aebbbe62b90f24dea4d663170a6659ec
Validity
Not Before: Jan 1 07:47:46 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c8b46883593e889a21b07952f4715ee5c51c6168
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:ed:e7:7b:b1:f2:17:9e:df:eb:4e:e2:c0:97:
87:6c:e1:4d:3b:2f:f9:f9:d6:fa:03:a9:20:fe:89:
7f:ba:92:66:3e:10:6c:59:7e:a0:2b:cf:5b:46:76:
d6:b6:37:82:43:a2:2b:35:a3:43:fb:32:a4:e5:b2:
88:8d:d0:05:51:5a:3e:2c:f4:f0:47:0a:1f:0e:8a:
e0:b7:6d:11:1c:0a:44:cf:8e:a0:31:ca:97:a2:b9:
c7:4a:84:01:ad:6d:ce:96:f2:7b:ef:ab:7f:d3:22:
9d:cc:de:49:3d:2f:6e:6b:66:8e:b4:90:a2:2b:0e:
e2:04:8e:a0:22:41:b2:4d:19:55:b6:ce:0d:ac:ee:
dc:3c:1c:44:07:7d:8f:0a:c7:cc:16:7a:fd:1e:d4:
57:5b:18:3e:d7:fe:0f:28:9e:99:e9:79:93:94:43:
be:cc:ed:7b:bb:bb:6c:0c:97:29:00:da:0a:1a:c5:
93:98:e4:b9:c7:0e:18:1c:d0:0e:38:cf:90:33:ba:
04:62:86:a0:6f:50:73:9a:a8:70:a6:64:a9:a8:98:
4b:39:22:42:9e:bf:c7:ae:76:aa:1b:92:a7:a9:a1:
59:22:47:eb:3d:cb:24:2d:7f:ab:31:e8:e8:85:a1:
4e:4c:8a:8b:87:7c:8f:19:68:80:c9:36:b5:40:08:
0a:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:B4:68:83:59:3E:88:9A:21:B0:79:52:F4:71:5E:E5:C5:1C:61:68
X509v3 Authority Key Identifier:
keyid:6A:93:7D:95:AE:BB:BE:62:B9:0F:24:DE:A4:D6:63:17:0A:66:59:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/apN9la67vmK5DyTepNZjFwpmWew.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/6c5cd2-1920-4564-bc2c-94177f8d877c/1/yLRog1k-iJohsHlS9HFe5cUcYWg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/6c5cd2-1920-4564-bc2c-94177f8d877c/1/apN9la67vmK5DyTepNZjFwpmWew.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.69.120.0/22
Signature Algorithm: sha256WithRSAEncryption
1a:2e:8d:f0:8b:da:3d:45:fe:02:66:6a:ae:f3:2f:76:5d:da:
25:46:bb:06:be:99:f6:09:25:5f:fb:2e:e1:d7:fc:9f:fb:0d:
4e:86:ed:32:05:78:b9:f2:98:38:bc:e4:a1:0a:3e:6f:d8:00:
74:80:9b:39:bf:d1:81:59:fe:0b:0d:ca:a9:aa:54:7a:40:fe:
83:aa:85:79:32:51:73:cb:7c:9a:c3:cf:d7:fa:4c:b9:91:d2:
f8:88:e7:46:ff:ac:25:27:10:0f:50:26:18:ab:3e:0c:4a:db:
b2:30:fe:91:7e:d8:4c:93:34:4a:07:29:ff:76:33:e1:95:2a:
7f:a7:bf:e7:95:24:38:00:22:ce:42:70:1f:52:61:8d:c7:19:
a6:03:0f:e5:91:e6:02:22:52:76:1b:65:67:fe:23:03:56:c0:
2d:64:88:b6:43:42:e9:b4:53:3f:b0:4e:07:5a:77:45:ce:4e:
82:bf:d6:b7:0d:c9:ee:1d:73:cd:16:57:70:53:44:78:30:f6:
87:1a:7a:de:7e:e4:bf:67:13:74:69:01:95:b4:64:23:f6:76:
41:ab:df:23:2e:0d:2c:8d:66:5c:07:ad:fa:73:20:1f:39:79:
e8:2e:f4:55:ab:cc:eb:df:56:a9:4c:37:b7:90:4c:cf:08:c3:
af:a4:9b:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:33:59 2025 by rpki-client