Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/c93a66-c7c7-4c33-a725-18d1a406aaed/1/YdvdhoRpy_JXRjRWmkCEQY06GUI.roa
File: YdvdhoRpy_JXRjRWmkCEQY06GUI.roa (raw, json)
Hash identifier: TbsRq0lwWgkwqZTblVQ4eG6aMqkkSiOMP5tHnWR2zXI=
Subject key identifier: 61:DB:DD:86:84:69:CB:F2:57:46:34:56:9A:40:84:41:8D:3A:19:42
Certificate issuer: /CN=af734108705a95796e8577125dd300c751dfd9a8
Certificate serial: 0194206811C21514C0720C85B9E2F59F0F29
Authority key identifier: AF:73:41:08:70:5A:95:79:6E:85:77:12:5D:D3:00:C7:51:DF:D9:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r3NBCHBalXluhXcSXdMAx1Hf2ag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/c93a66-c7c7-4c33-a725-18d1a406aaed/1/YdvdhoRpy_JXRjRWmkCEQY06GUI.roa
Signing time: Wed 01 Jan 2025 05:47:58 +0000
ROA not before: Wed 01 Jan 2025 05:47:58 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48944
IP address blocks: 195.238.231.0/24 maxlen: 24
2a05:63c0::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:68:11:c2:15:14:c0:72:0c:85:b9:e2:f5:9f:0f:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af734108705a95796e8577125dd300c751dfd9a8
Validity
Not Before: Jan 1 05:47:58 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=61dbdd868469cbf2574634569a4084418d3a1942
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:ae:27:31:67:b0:fe:64:9b:0e:3e:b1:74:d8:
95:29:c3:6f:67:1d:7a:69:ae:d5:f9:af:44:35:e5:
b0:77:f3:71:e4:8d:ac:d3:eb:8a:4e:e0:c2:3b:4b:
53:af:b1:9d:4f:3c:0c:94:4f:9b:ec:27:0d:a2:8d:
2d:08:4e:d0:9d:a8:94:7d:ee:8b:d5:20:9a:4c:96:
3f:b3:3b:19:fe:f8:bd:96:e0:6d:e9:82:09:c9:07:
b6:5c:f7:f8:08:c6:7c:d0:30:20:dd:73:03:2b:7d:
fb:ff:b5:97:28:f5:65:5d:28:04:83:49:46:db:e0:
f3:77:ad:aa:d2:ea:cb:4c:35:8f:a4:72:4b:90:0f:
b4:be:cc:ed:5f:ea:36:eb:23:28:71:e1:19:90:cc:
d0:69:86:12:26:7b:a5:b1:d7:6e:3b:15:de:ce:71:
de:c1:21:92:bc:30:26:03:30:c3:7a:64:29:d5:ce:
8d:20:9d:69:48:03:f3:0f:ca:cf:bf:f4:44:c5:ba:
5a:50:05:bd:6c:bb:6d:c0:a8:16:77:af:2e:10:66:
be:75:5e:b9:a4:ca:2b:9e:3f:e8:8c:09:55:4d:37:
a6:08:3a:6b:0d:f6:10:13:c7:26:97:36:28:ae:dc:
1a:43:9c:a1:9b:8c:ab:3a:79:b4:64:a0:12:f3:4a:
d8:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:DB:DD:86:84:69:CB:F2:57:46:34:56:9A:40:84:41:8D:3A:19:42
X509v3 Authority Key Identifier:
keyid:AF:73:41:08:70:5A:95:79:6E:85:77:12:5D:D3:00:C7:51:DF:D9:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r3NBCHBalXluhXcSXdMAx1Hf2ag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/c93a66-c7c7-4c33-a725-18d1a406aaed/1/YdvdhoRpy_JXRjRWmkCEQY06GUI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/c93a66-c7c7-4c33-a725-18d1a406aaed/1/r3NBCHBalXluhXcSXdMAx1Hf2ag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.238.231.0/24
IPv6:
2a05:63c0::/29
Signature Algorithm: sha256WithRSAEncryption
7e:d4:91:ce:99:be:3d:5a:d5:f4:cb:4a:91:8a:83:67:4c:e3:
ea:96:6f:9f:06:dc:b0:90:31:66:5c:0a:95:70:2a:fc:3a:d3:
07:9d:10:9f:ab:3d:84:1c:b8:29:33:95:47:cf:b9:90:45:f3:
67:ae:06:a3:92:38:74:e3:37:b4:9d:56:e6:1e:86:d6:60:9d:
1b:64:d5:33:7f:eb:ef:3c:9f:ed:df:04:30:b7:4b:12:f9:43:
d8:6a:c2:8c:6c:20:e2:13:c7:34:d0:d4:cc:24:20:7b:05:9a:
a6:25:a6:8d:fd:15:6a:46:b0:fb:af:72:09:92:f5:9e:5d:0b:
9e:1f:35:84:58:74:2f:af:ed:cc:3a:74:b2:b2:74:62:ff:7c:
5c:70:22:ad:99:97:ed:a5:73:72:24:ef:f8:20:12:fd:55:85:
9e:a7:b6:43:2c:02:9f:2f:d4:72:6c:46:2b:2a:a5:44:88:84:
ed:54:91:47:99:70:44:f3:1f:f1:bc:60:ad:da:12:d0:91:c2:
6a:ba:2d:6e:51:ac:fd:2b:4a:eb:44:59:4e:21:a4:39:b9:3b:
f9:4d:b5:3e:6a:73:f1:17:f2:f5:db:9a:a6:5b:04:06:10:e0:
42:ff:4f:5d:41:5c:7a:2d:52:b9:76:e7:03:78:bd:12:64:01:
25:bd:20:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:33:05 2025 by rpki-client