Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/bda245-576b-4940-a9f5-92798dacaf75/1/Y6QTaw-FjofB_OhkxIXlcm9P4-I.roa
File: Y6QTaw-FjofB_OhkxIXlcm9P4-I.roa (raw, json)
Hash identifier: 4Yb+dRFpkkMPfeWzASwoM5NrRtcERhjg7Yl8jCZxXRE=
Subject key identifier: 63:A4:13:6B:0F:85:8E:87:C1:FC:E8:64:C4:85:E5:72:6F:4F:E3:E2
Certificate issuer: /CN=432075596545093c06a6fcf8fab57b192e7790aa
Certificate serial: 01942827243C252ADE77A614693F21EEDBDE
Authority key identifier: 43:20:75:59:65:45:09:3C:06:A6:FC:F8:FA:B5:7B:19:2E:77:90:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QyB1WWVFCTwGpvz4-rV7GS53kKo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/bda245-576b-4940-a9f5-92798dacaf75/1/Y6QTaw-FjofB_OhkxIXlcm9P4-I.roa
Signing time: Thu 02 Jan 2025 17:54:01 +0000
ROA not before: Thu 02 Jan 2025 17:54:01 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 1930
IP address blocks: 192.132.55.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:27:24:3c:25:2a:de:77:a6:14:69:3f:21:ee:db:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=432075596545093c06a6fcf8fab57b192e7790aa
Validity
Not Before: Jan 2 17:54:01 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=63a4136b0f858e87c1fce864c485e5726f4fe3e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:11:ce:6e:99:e8:0a:04:55:c5:b7:13:50:56:
be:2c:e8:4b:98:7a:df:8d:fb:f3:7b:65:4d:64:b9:
ce:54:ea:1f:48:a3:74:a2:12:95:8d:ee:c2:ea:51:
89:36:c8:ba:92:f6:72:d8:f9:c7:cb:19:e5:cd:5d:
36:69:7c:19:c0:8c:60:79:9c:b8:5d:32:18:22:ac:
82:eb:0c:a9:9a:bc:a3:9b:8f:6b:a9:78:f2:38:f3:
64:42:b5:97:3f:3e:7f:46:26:ee:26:37:da:40:20:
56:34:b7:cb:3a:f5:90:1d:1c:76:5f:6b:09:3e:15:
ff:03:8b:63:fb:6f:88:1e:ba:b6:d6:07:85:a1:47:
70:30:19:dd:6f:36:49:35:62:15:18:a7:59:25:c3:
68:ce:e6:e5:f3:00:7e:ac:5a:62:85:52:ba:f2:47:
d6:6b:6c:4a:ef:af:07:04:38:ce:a4:c2:8c:cf:c2:
8d:14:54:20:16:63:c3:22:39:76:c7:27:2b:de:63:
67:06:d0:73:dc:a0:3a:51:e1:76:1d:85:2e:58:77:
a9:0d:14:ba:7f:e3:e6:8d:dd:a0:e4:9d:47:29:af:
d3:81:f7:bf:7b:3d:54:2f:1b:a0:64:03:0d:8f:e6:
17:52:19:23:37:bb:83:08:29:d9:a9:6c:ab:ff:a2:
6e:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:A4:13:6B:0F:85:8E:87:C1:FC:E8:64:C4:85:E5:72:6F:4F:E3:E2
X509v3 Authority Key Identifier:
keyid:43:20:75:59:65:45:09:3C:06:A6:FC:F8:FA:B5:7B:19:2E:77:90:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QyB1WWVFCTwGpvz4-rV7GS53kKo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/bda245-576b-4940-a9f5-92798dacaf75/1/Y6QTaw-FjofB_OhkxIXlcm9P4-I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/bda245-576b-4940-a9f5-92798dacaf75/1/QyB1WWVFCTwGpvz4-rV7GS53kKo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.132.55.0/24
Signature Algorithm: sha256WithRSAEncryption
63:e4:f5:04:f0:61:c1:11:ca:81:9b:ec:0b:50:43:3e:af:d7:
a3:f8:46:8d:95:09:09:13:f8:e6:2b:b8:83:0d:44:2b:46:67:
2f:61:7b:1c:9e:e6:ef:5b:46:6f:f5:52:d7:34:43:e5:f2:4b:
9d:20:1d:3c:cd:fc:e1:75:42:2c:4e:0c:96:3a:92:60:1c:ba:
90:d4:01:c3:d1:05:40:07:17:34:53:ac:9b:5e:8a:39:99:fa:
de:28:f8:be:c5:c0:a0:a5:2d:8d:30:ee:82:c2:65:a7:34:69:
e4:6e:92:46:f0:4e:f0:57:e5:1a:a6:0e:ff:e3:3c:02:59:83:
77:19:c2:91:71:23:51:11:3b:d0:73:69:fd:de:ae:d6:95:da:
88:ca:b0:35:d8:6d:ab:a3:4e:ea:95:5e:45:0a:51:28:2c:d2:
de:8c:6a:b5:8c:1e:2f:e9:ec:10:14:24:58:06:87:af:57:59:
81:69:9b:bc:dd:7d:67:d3:bf:0b:69:74:64:c5:71:16:cb:3b:
ee:8a:e9:75:54:8c:74:5e:60:17:28:0c:03:da:ee:af:42:c6:
86:4b:04:e9:1a:fd:14:0d:f3:46:0d:ca:9f:22:6e:be:40:d3:
69:a4:98:ae:09:2a:2d:09:26:e3:6e:e1:8f:89:af:ba:9d:00:
aa:8b:ff:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:59:07 2025 by rpki-client