Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/dd672d-e980-4dca-9195-859dbca38714/1/Yi8LhGXH_nRs0tEcTr_lCHwmcpA.roa
File: Yi8LhGXH_nRs0tEcTr_lCHwmcpA.roa (raw, json)
Hash identifier: oMJi8GS/Dld+gizK0j1juoqyLq72TaRv/Im2Ftty3+c=
Subject key identifier: 62:2F:0B:84:65:C7:FE:74:6C:D2:D1:1C:4E:BF:E5:08:7C:26:72:90
Certificate issuer: /CN=ad442bdda2a35320a96d806bf168d5b84a76d426
Certificate serial: 0194221FC2BE6B45AC2A14F400548B01EE83
Authority key identifier: AD:44:2B:DD:A2:A3:53:20:A9:6D:80:6B:F1:68:D5:B8:4A:76:D4:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rUQr3aKjUyCpbYBr8WjVuEp21CY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/dd672d-e980-4dca-9195-859dbca38714/1/Yi8LhGXH_nRs0tEcTr_lCHwmcpA.roa
Signing time: Wed 01 Jan 2025 13:48:14 +0000
ROA not before: Wed 01 Jan 2025 13:48:14 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60395
IP address blocks: 195.10.222.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:c2:be:6b:45:ac:2a:14:f4:00:54:8b:01:ee:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad442bdda2a35320a96d806bf168d5b84a76d426
Validity
Not Before: Jan 1 13:48:14 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=622f0b8465c7fe746cd2d11c4ebfe5087c267290
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:c0:22:cc:94:13:da:17:bd:8a:e6:51:f6:8a:
57:11:a8:47:75:82:ed:b9:86:86:01:ae:53:45:64:
3b:8a:4e:3b:65:cf:45:3b:8e:49:c4:07:97:66:31:
1e:44:78:73:08:d7:e4:63:79:9e:e6:af:80:92:3a:
da:4f:a0:38:aa:56:69:d5:c8:2f:67:41:65:4c:60:
8e:87:b1:ff:7f:58:b0:9f:87:c0:fa:0f:39:8f:a8:
fd:6a:5c:f8:27:e5:55:39:8f:46:c0:2e:86:a6:83:
29:70:b3:de:7d:2b:41:94:85:56:dc:45:1e:50:e9:
a1:c9:92:ca:60:38:d6:57:8c:97:12:62:bb:93:59:
d6:98:fe:aa:ef:10:85:e0:83:f7:47:b9:45:de:d4:
fa:2b:2a:6b:29:0d:e9:00:75:a8:50:d3:01:14:13:
84:47:46:cd:10:45:38:83:fd:0c:22:d1:e2:23:cd:
8f:b6:02:89:45:ca:c5:90:eb:a5:69:37:5f:53:99:
7e:be:88:3d:b6:73:0a:c0:bc:34:75:57:9d:ca:2c:
9f:48:2e:e3:bb:58:6d:14:5e:bd:ec:7a:82:a5:fb:
99:d4:2f:93:0f:aa:84:95:c4:4f:5b:59:07:9f:91:
84:8b:97:35:af:34:17:c5:3e:5c:43:ff:aa:a2:ee:
c5:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:2F:0B:84:65:C7:FE:74:6C:D2:D1:1C:4E:BF:E5:08:7C:26:72:90
X509v3 Authority Key Identifier:
keyid:AD:44:2B:DD:A2:A3:53:20:A9:6D:80:6B:F1:68:D5:B8:4A:76:D4:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rUQr3aKjUyCpbYBr8WjVuEp21CY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/dd672d-e980-4dca-9195-859dbca38714/1/Yi8LhGXH_nRs0tEcTr_lCHwmcpA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/dd672d-e980-4dca-9195-859dbca38714/1/rUQr3aKjUyCpbYBr8WjVuEp21CY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.10.222.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:4e:af:9e:92:f9:c8:43:4f:d7:7b:f8:e2:60:50:63:b4:ec:
7a:65:c1:82:87:c3:a5:35:9a:bf:fd:d0:25:2e:ca:dd:e9:31:
bc:fd:10:53:8c:8b:fd:a6:e8:e7:d1:36:39:4c:c3:66:52:a5:
97:ec:78:4e:1b:d2:6f:d8:cc:5d:cd:2f:cf:5c:26:57:74:3a:
7b:52:4c:0b:a8:8c:b8:d2:5d:78:25:e9:77:fc:2b:e7:2c:0d:
e2:cf:a5:50:0e:e3:78:aa:1c:c3:c6:78:76:9f:08:d6:a0:67:
4f:0b:1c:6a:5e:55:7a:5d:31:72:f8:c9:0b:a0:01:97:47:c2:
6b:21:72:66:20:c2:c8:38:3a:52:0e:8c:41:e2:cd:33:3d:cd:
6d:b7:df:4e:a9:f5:7c:e2:2a:3c:9f:f5:07:88:5c:5b:23:53:
37:a1:41:f9:b5:80:45:c9:98:c0:07:58:47:bd:c0:c0:fa:70:
22:d6:e6:98:a9:ca:f2:53:1e:70:7c:9f:10:81:f9:8f:7d:de:
e5:fc:0d:5c:30:ea:0c:6a:df:30:b0:fd:56:2a:42:8c:41:fb:
84:5e:e3:f3:3a:6e:5c:78:aa:be:f8:d6:56:b2:26:47:b5:6b:
77:b9:d5:69:d4:73:5d:49:df:3f:3f:a1:2d:71:b2:e0:ef:cf:
ff:27:aa:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:27:41 2025 by rpki-client