Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/c0def6-bc0a-4221-9791-2d8019017849/1/Ye0egtqoH6uMAlA-InFGtPoYhOI.roa
File: Ye0egtqoH6uMAlA-InFGtPoYhOI.roa (raw, json)
Hash identifier: zCIyCUBIV+P7SfqRZSH5RkFwyM3/tcMjHBwHN8QTJs8=
Subject key identifier: 61:ED:1E:82:DA:A8:1F:AB:8C:02:50:3E:22:71:46:B4:FA:18:84:E2
Certificate issuer: /CN=c339d11e7d4992f9afb30431e36042aafdde5c0a
Certificate serial: 0194266BA6F56B02F62901B428A6F6F6557E
Authority key identifier: C3:39:D1:1E:7D:49:92:F9:AF:B3:04:31:E3:60:42:AA:FD:DE:5C:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wznRHn1JkvmvswQx42BCqv3eXAo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/c0def6-bc0a-4221-9791-2d8019017849/1/Ye0egtqoH6uMAlA-InFGtPoYhOI.roa
Signing time: Thu 02 Jan 2025 09:49:36 +0000
ROA not before: Thu 02 Jan 2025 09:49:36 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210973
IP address blocks: 149.62.35.0/24 maxlen: 24
2a10:fd00::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:a6:f5:6b:02:f6:29:01:b4:28:a6:f6:f6:55:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c339d11e7d4992f9afb30431e36042aafdde5c0a
Validity
Not Before: Jan 2 09:49:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=61ed1e82daa81fab8c02503e227146b4fa1884e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:76:f5:fb:6e:66:70:a0:f0:05:4f:c9:fb:f7:
59:0b:fd:ed:72:eb:69:8a:a4:ef:6d:7d:84:69:31:
7d:12:4c:d4:85:e4:b6:05:ff:35:f9:4d:07:cd:c6:
66:5f:68:3c:88:7b:2a:f5:cd:74:44:c8:0e:1f:4f:
99:e9:bf:e6:29:be:06:cd:dd:d3:0f:9a:c1:cc:ed:
8e:59:4c:78:60:dc:c3:9a:14:f2:b3:da:99:ba:96:
12:14:77:74:69:2a:1c:78:43:f7:6b:de:df:d8:a7:
e9:80:50:fb:30:04:69:9a:79:7d:c2:d4:ae:cd:79:
3c:ee:41:f4:d6:7a:64:18:4f:ae:ad:8c:d8:a2:d5:
df:9a:14:80:0f:3a:de:9f:04:67:1d:9d:7f:e4:f2:
17:43:f0:be:ed:33:38:87:19:76:26:ea:32:7e:0a:
ea:5e:2e:4f:e3:32:cb:88:91:6b:d3:58:7d:02:06:
32:88:3f:d2:de:ed:9e:69:4c:b6:a8:69:81:1a:46:
16:43:20:47:ff:06:0f:53:ab:27:21:58:68:e4:bb:
64:6a:0e:ec:d0:8f:22:1c:65:c8:81:81:f8:91:13:
a4:c8:97:5c:d4:b3:fd:b2:2c:13:e6:cb:8a:93:90:
b2:d0:4a:ec:13:e3:5d:96:49:2f:c4:4d:8f:59:45:
0b:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:ED:1E:82:DA:A8:1F:AB:8C:02:50:3E:22:71:46:B4:FA:18:84:E2
X509v3 Authority Key Identifier:
keyid:C3:39:D1:1E:7D:49:92:F9:AF:B3:04:31:E3:60:42:AA:FD:DE:5C:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wznRHn1JkvmvswQx42BCqv3eXAo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/c0def6-bc0a-4221-9791-2d8019017849/1/Ye0egtqoH6uMAlA-InFGtPoYhOI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/c0def6-bc0a-4221-9791-2d8019017849/1/wznRHn1JkvmvswQx42BCqv3eXAo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
149.62.35.0/24
IPv6:
2a10:fd00::/32
Signature Algorithm: sha256WithRSAEncryption
93:b5:01:f4:8f:d3:ec:cc:b5:61:78:56:97:c7:72:08:a4:1e:
66:b4:cf:00:19:e1:6c:1b:02:3a:b5:08:c2:b0:e9:9a:17:26:
41:da:57:6b:a2:91:2f:30:64:f8:77:f2:38:42:63:f5:1a:f2:
bf:bc:eb:7e:cd:ab:29:c0:0e:4e:b3:8f:bd:53:ed:a2:30:64:
0e:b2:7e:d8:03:23:1c:bf:9b:e3:36:1b:73:a5:8b:84:ec:b5:
ee:e0:2c:84:cc:e9:ab:c2:5a:1b:db:bb:01:e2:e4:d2:87:74:
5a:cc:ea:88:af:78:78:55:d5:27:a4:cd:27:7e:fc:72:03:52:
03:fb:dc:8e:ee:1d:8a:cf:5d:cc:d7:19:3b:8a:3e:d9:28:c0:
2e:b2:b4:5d:8d:9d:24:c6:0c:24:e8:3f:d2:d5:8d:43:c3:79:
23:e4:69:49:4a:af:e9:8d:c0:06:77:42:58:77:f7:de:75:bf:
5a:c2:ed:83:f3:7c:be:9d:4e:9f:de:e2:10:97:14:07:c9:f7:
26:3e:49:2f:6d:3d:1b:51:b8:40:4d:3c:0f:e9:cd:e2:60:9a:
01:df:dd:34:ae:a5:a3:e3:c9:67:13:9e:42:09:bd:23:23:86:
77:da:1e:8d:6f:cc:5a:00:e8:26:16:1b:73:48:07:14:ef:6e:
00:95:1f:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 01:54:31 2025 by rpki-client