Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/6f6826-1aad-4c3c-bd91-cca37e2f2729/1/YpJ4HYND8zUWDrh84VOwJrCjN64.roa
File: YpJ4HYND8zUWDrh84VOwJrCjN64.roa (raw, json)
Hash identifier: YH9M+YVc2VsTqAzLHq7oW1kqlXcbhCJ/cLoedv2bt3c=
Subject key identifier: 62:92:78:1D:83:43:F3:35:16:0E:B8:7C:E1:53:B0:26:B0:A3:37:AE
Certificate issuer: /CN=f826ffe96cdc41efaa8bfb3125862d6594be9827
Certificate serial: 0194228E3DF9B35DA6ECE16FC10564A0AD53
Authority key identifier: F8:26:FF:E9:6C:DC:41:EF:AA:8B:FB:31:25:86:2D:65:94:BE:98:27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-Cb_6WzcQe-qi_sxJYYtZZS-mCc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/6f6826-1aad-4c3c-bd91-cca37e2f2729/1/YpJ4HYND8zUWDrh84VOwJrCjN64.roa
Signing time: Wed 01 Jan 2025 15:48:54 +0000
ROA not before: Wed 01 Jan 2025 15:48:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207592
IP address blocks: 134.76.0.0/16 maxlen: 16
134.76.175.0/24 maxlen: 24
195.12.38.0/24 maxlen: 24
2a06:93c0::/29 maxlen: 29
2a06:93c0::/48 maxlen: 48
2a06:93c0:1::/48 maxlen: 48
2a06:93c0:2::/48 maxlen: 48
2a06:93c0:3::/48 maxlen: 48
2a06:93c1:129::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8e:3d:f9:b3:5d:a6:ec:e1:6f:c1:05:64:a0:ad:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f826ffe96cdc41efaa8bfb3125862d6594be9827
Validity
Not Before: Jan 1 15:48:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6292781d8343f335160eb87ce153b026b0a337ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:8a:b2:af:4e:bd:6a:f5:0f:3f:40:46:a6:40:
69:61:c1:e1:57:a4:c0:37:7a:bc:5b:fa:c3:c9:a5:
83:52:5c:d6:69:2d:8c:8c:b0:20:55:d0:c8:82:f4:
7b:4c:03:0e:5f:e1:dc:d8:77:07:b0:18:0f:19:47:
d2:91:23:d1:20:4d:4f:69:0f:c3:ca:ba:79:37:93:
b4:5e:33:60:72:31:23:f5:2b:25:5b:d3:be:34:87:
57:51:3b:06:c6:69:19:f7:99:08:e5:30:f0:d9:d5:
fc:0f:fa:3f:0e:94:cd:1f:b1:1d:11:a8:e8:c0:35:
61:48:17:2e:29:0f:59:31:04:65:ec:59:47:04:8a:
81:d2:2f:d4:88:87:30:d4:75:58:43:27:55:62:6b:
62:ef:dd:2f:f9:0a:c6:c5:7e:09:f4:52:d9:9e:2b:
39:ec:ee:d4:bd:30:01:92:e8:34:82:60:99:fe:27:
a8:23:81:0c:d4:cf:e4:9c:68:1a:b7:9f:85:dc:b5:
5b:ea:c0:4d:92:98:51:e6:5c:18:8c:0b:34:8d:98:
1a:2e:0e:0d:f1:ce:eb:d1:bb:2b:f1:f7:93:a8:49:
39:55:73:34:91:a2:97:c0:54:8c:04:81:ed:43:bb:
32:92:92:35:0d:fc:b8:f9:7c:c0:b4:a1:a0:8c:44:
5b:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:92:78:1D:83:43:F3:35:16:0E:B8:7C:E1:53:B0:26:B0:A3:37:AE
X509v3 Authority Key Identifier:
keyid:F8:26:FF:E9:6C:DC:41:EF:AA:8B:FB:31:25:86:2D:65:94:BE:98:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-Cb_6WzcQe-qi_sxJYYtZZS-mCc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/6f6826-1aad-4c3c-bd91-cca37e2f2729/1/YpJ4HYND8zUWDrh84VOwJrCjN64.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/6f6826-1aad-4c3c-bd91-cca37e2f2729/1/1-Cb_6WzcQe-qi_sxJYYtZZS-mCc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
134.76.0.0/16
195.12.38.0/24
IPv6:
2a06:93c0::/29
Signature Algorithm: sha256WithRSAEncryption
26:5d:cd:7d:4d:3d:a1:f3:ba:30:8a:3f:b4:43:f5:5e:9a:04:
e9:b9:4e:a9:02:68:2c:79:46:e4:90:fd:16:75:6c:8f:49:93:
bc:e8:27:7c:8b:bc:29:e0:1a:3f:f1:c9:5b:58:bc:f9:41:92:
eb:1b:7e:fd:6a:5f:68:e5:d7:ef:e2:05:e2:83:3a:e6:4c:7c:
4a:8c:95:b5:e6:a6:5d:1b:07:f5:69:af:97:fe:84:4c:fa:5d:
08:17:29:2c:7c:92:6b:38:ad:5f:0d:cd:a9:91:8a:6f:c1:c5:
95:5c:4e:9c:92:a7:f6:b3:2d:eb:e2:6d:ea:d3:64:bc:a4:f9:
3e:32:4e:eb:cb:33:bd:63:21:81:e1:c9:23:b5:e3:e9:61:c3:
05:41:d8:98:07:33:0d:43:e5:61:86:00:44:41:dc:23:9a:fc:
38:f8:8c:28:81:65:08:be:dc:ac:bd:5d:7b:38:6e:cd:39:64:
c5:68:e9:b1:ce:53:fb:29:32:c8:a9:15:7d:48:a8:c3:e3:a2:
84:17:61:d4:c5:6e:d8:53:b2:90:13:07:b5:86:b0:79:ef:76:
09:bc:4a:a4:73:6a:2c:a6:3f:8e:4e:70:69:40:32:d5:ee:61:
8b:a1:aa:60:a0:58:1d:ee:7e:59:f2:d0:c1:f7:fa:f1:d2:f3:
0a:27:d0:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:07:54 2025 by rpki-client