Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/238486-3e8d-4bc3-a19d-0a768b24125a/1/y3LlHCcHKFo-BQ_p86jxyc013sQ.roa
File: y3LlHCcHKFo-BQ_p86jxyc013sQ.roa (raw, json)
Hash identifier: 70W6ragDKntXJcQVl89iuaUr+4h8ye/EbsXthKhbWqg=
Subject key identifier: CB:72:E5:1C:27:07:28:5A:3E:05:0F:E9:F3:A8:F1:C9:CD:35:DE:C4
Certificate issuer: /CN=b0a13336c38eeba10cbac9c28caf1efcf44ac863
Certificate serial: 019424B39257DC3321BFDAFCBC58EC5CB9DF
Authority key identifier: B0:A1:33:36:C3:8E:EB:A1:0C:BA:C9:C2:8C:AF:1E:FC:F4:4A:C8:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sKEzNsOO66EMusnCjK8e_PRKyGM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/238486-3e8d-4bc3-a19d-0a768b24125a/1/y3LlHCcHKFo-BQ_p86jxyc013sQ.roa
Signing time: Thu 02 Jan 2025 01:48:55 +0000
ROA not before: Thu 02 Jan 2025 01:48:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 197883
IP address blocks: 83.97.74.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:92:57:dc:33:21:bf:da:fc:bc:58:ec:5c:b9:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0a13336c38eeba10cbac9c28caf1efcf44ac863
Validity
Not Before: Jan 2 01:48:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cb72e51c2707285a3e050fe9f3a8f1c9cd35dec4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:8f:87:f9:f3:25:c8:b2:23:67:09:12:24:c4:
93:56:20:d0:25:36:1b:d4:50:a4:91:92:28:61:56:
19:1b:e2:a8:c1:5f:6a:e6:e1:1e:73:c6:45:ad:c4:
db:d3:ec:9e:8b:2d:a4:00:8a:33:80:f1:a7:fe:95:
64:0f:73:ed:8d:0b:72:02:20:25:cd:dd:5b:7f:5b:
98:56:96:d5:43:19:fb:36:ba:17:aa:1c:3d:e8:8f:
dd:3c:cc:11:a4:7d:a0:1a:28:d6:4f:a0:80:8b:94:
8f:40:ee:4f:5c:05:0b:9d:32:b0:db:1a:5f:a6:58:
7c:af:c9:f4:8b:7c:3b:6b:6f:78:05:51:7e:74:25:
c9:86:e4:49:47:3e:f4:7d:6b:69:32:64:e6:a0:f7:
54:53:47:2f:54:ca:ae:21:84:e7:f0:f8:95:34:1e:
4b:b2:db:e5:2b:bf:7a:9e:b7:8e:e1:44:e4:49:43:
bd:7a:bc:e3:62:d9:10:25:a7:12:d8:0a:41:d7:7a:
8d:37:11:46:e0:1e:5f:76:22:2b:f5:ed:8d:f9:f4:
b5:43:9b:e0:1a:33:94:cb:1d:f9:96:f4:c9:43:be:
46:16:02:5f:41:36:2f:bc:86:49:d3:11:03:e7:dd:
a7:f3:d0:3d:17:a0:74:74:3c:50:0f:b5:64:09:ff:
5a:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:72:E5:1C:27:07:28:5A:3E:05:0F:E9:F3:A8:F1:C9:CD:35:DE:C4
X509v3 Authority Key Identifier:
keyid:B0:A1:33:36:C3:8E:EB:A1:0C:BA:C9:C2:8C:AF:1E:FC:F4:4A:C8:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sKEzNsOO66EMusnCjK8e_PRKyGM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/238486-3e8d-4bc3-a19d-0a768b24125a/1/y3LlHCcHKFo-BQ_p86jxyc013sQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/238486-3e8d-4bc3-a19d-0a768b24125a/1/sKEzNsOO66EMusnCjK8e_PRKyGM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.97.74.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:3b:96:f4:a1:f3:46:ca:0f:fc:d6:3d:b9:1c:88:02:86:1c:
21:ab:87:2b:27:f8:9c:71:de:21:22:af:11:86:2b:e6:ff:81:
ee:8a:1f:bd:03:aa:41:0f:a2:5e:5b:e0:a3:88:f9:19:5e:ed:
93:9e:c0:2b:e2:07:5f:3f:ba:82:a6:bb:22:98:16:aa:b1:3a:
9c:03:43:38:d1:cc:ac:26:f6:3f:45:74:98:43:6f:ba:6f:a4:
5c:15:b2:82:d3:bb:e7:18:f9:3f:1f:e6:4a:d6:72:43:4e:cf:
8f:35:67:64:e5:80:fe:be:ba:b5:52:82:cc:db:d7:4b:16:9c:
0e:e8:47:57:8e:08:a5:9d:91:42:d1:15:c1:38:17:ca:02:3f:
38:08:57:d4:ae:8c:fe:fa:89:c4:9e:04:f3:cf:3e:70:e1:20:
00:8b:d5:2b:e9:b3:a1:cd:4d:fe:c6:87:90:c7:9e:59:e0:a9:
ea:a1:7a:cf:88:81:68:f0:e2:a0:2d:be:5a:d8:ef:4d:0a:96:
28:9a:8f:a5:68:96:b2:bd:6f:e4:80:3d:28:4f:75:bd:a3:d0:
da:b3:6c:46:db:02:c2:a1:0b:ec:8a:cf:0e:78:0b:00:02:28:
58:03:3b:3f:e4:de:26:32:5f:51:b9:f8:58:4d:a1:84:bf:3f:
48:b5:e1:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:16:21 2025 by rpki-client