Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/5759f6-93e2-4029-a49f-35ba267ded3b/1/yohJslaqJeqxG9ZdmhfVBivAGaE.roa
File: yohJslaqJeqxG9ZdmhfVBivAGaE.roa (raw, json)
Hash identifier: SxCXBWVxQCB+hqHsFFhyla2B81f/O/PjbQmRobaYZP8=
Subject key identifier: CA:88:49:B2:56:AA:25:EA:B1:1B:D6:5D:9A:17:D5:06:2B:C0:19:A1
Certificate issuer: /CN=0e75fb4f52a829d136e29a9a025c636d19ae328e
Certificate serial: 019424449DC8DAE58795077CB87EF6E3DD50
Authority key identifier: 0E:75:FB:4F:52:A8:29:D1:36:E2:9A:9A:02:5C:63:6D:19:AE:32:8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DnX7T1KoKdE24pqaAlxjbRmuMo4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/5759f6-93e2-4029-a49f-35ba267ded3b/1/yohJslaqJeqxG9ZdmhfVBivAGaE.roa
Signing time: Wed 01 Jan 2025 23:47:44 +0000
ROA not before: Wed 01 Jan 2025 23:47:44 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209176
IP address blocks: 83.139.3.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:44:9d:c8:da:e5:87:95:07:7c:b8:7e:f6:e3:dd:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e75fb4f52a829d136e29a9a025c636d19ae328e
Validity
Not Before: Jan 1 23:47:44 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ca8849b256aa25eab11bd65d9a17d5062bc019a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:fe:f6:86:ad:aa:de:cf:f7:cc:9b:01:b4:3b:
8a:43:f9:ae:30:7e:d9:47:e6:44:1e:e5:82:a3:0d:
fa:60:43:09:ac:b2:d8:f4:96:dc:0c:16:bd:f5:1e:
b7:8a:3b:6b:e4:9f:dc:e3:1a:75:4d:ad:2c:8d:82:
d9:3b:22:87:15:85:e7:09:81:4e:3f:1b:76:9e:cf:
aa:20:28:be:02:01:b0:ee:ba:78:76:b9:eb:83:c9:
13:5b:c2:9a:95:80:ae:9e:a9:e9:7f:fc:bd:7b:7f:
98:45:d9:36:81:1a:2b:bb:00:d7:bb:7e:21:6b:52:
b0:a1:4d:bc:f7:f2:58:49:12:71:99:a9:c7:03:13:
7f:73:af:d4:aa:fb:f5:98:94:c2:24:0a:b6:59:c1:
a4:20:54:22:54:27:fd:12:d9:a8:41:10:8d:7d:55:
7a:db:9e:1c:4e:e0:a2:20:98:71:93:fb:6a:29:6f:
e9:1a:f3:cc:ef:c2:6c:40:2b:74:f3:dc:eb:07:d8:
39:c2:48:44:16:e1:5c:99:75:99:5e:cb:a5:a9:3c:
62:8a:96:c9:9d:a5:04:e3:0b:cb:c1:d3:37:18:98:
9c:29:80:8b:1b:78:f1:90:76:13:c4:a0:a2:78:9a:
4c:a5:38:be:4f:5f:bc:31:14:6f:9f:0a:21:c2:f9:
f4:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:88:49:B2:56:AA:25:EA:B1:1B:D6:5D:9A:17:D5:06:2B:C0:19:A1
X509v3 Authority Key Identifier:
keyid:0E:75:FB:4F:52:A8:29:D1:36:E2:9A:9A:02:5C:63:6D:19:AE:32:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DnX7T1KoKdE24pqaAlxjbRmuMo4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/5759f6-93e2-4029-a49f-35ba267ded3b/1/yohJslaqJeqxG9ZdmhfVBivAGaE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/5759f6-93e2-4029-a49f-35ba267ded3b/1/DnX7T1KoKdE24pqaAlxjbRmuMo4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.139.3.0/24
Signature Algorithm: sha256WithRSAEncryption
48:6c:c9:62:04:19:79:4f:03:4e:0b:5b:8f:79:ad:bd:27:2d:
c2:74:53:2b:10:90:3c:a7:d2:82:13:ec:73:e2:38:80:35:aa:
5d:22:da:2e:da:11:e6:54:bb:89:08:af:a2:08:83:05:da:a5:
42:4a:0d:89:f3:68:b8:0e:90:1b:c2:b8:ba:c5:d7:c1:4a:61:
41:50:02:3d:2b:df:28:d4:42:9c:64:75:72:a8:9c:bd:29:5f:
38:36:82:6c:a0:e2:7b:b5:99:b9:5e:39:cb:a8:de:ad:99:b3:
09:07:90:c6:fe:21:41:dd:cc:bc:9d:ec:0e:57:de:e6:59:22:
08:9f:72:0f:c4:84:ae:e1:91:73:c4:29:40:f7:5d:76:9f:c6:
5a:d3:07:8a:e6:db:b3:04:75:5e:89:33:96:9d:26:8e:c6:23:
02:84:8f:03:65:3e:dc:45:23:46:fa:3a:57:3e:4b:c7:2e:c1:
36:03:30:e2:83:97:3e:c5:b6:04:ab:f8:f2:34:42:6b:d9:76:
26:99:a7:37:0a:85:57:81:4f:5a:a3:36:b1:5e:59:be:89:93:
dd:a6:35:fb:b8:95:e3:09:40:ec:b1:59:a6:1f:85:47:6c:3b:
67:ee:27:86:ec:f6:e1:6c:50:d1:45:d3:67:5f:36:a4:79:02:
bd:c1:f6:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:28:54 2025 by rpki-client