Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/42ec68-d433-4000-906c-c3eae6b0fb9c/1/YErVt-7gu1jQqcup8-GVaaYjMj4.roa
File: YErVt-7gu1jQqcup8-GVaaYjMj4.roa (raw, json)
Hash identifier: nT1lcrWfw1dtZ1xk/0YupjRA64MYT4KdIF9Y0byNnSM=
Subject key identifier: 60:4A:D5:B7:EE:E0:BB:58:D0:A9:CB:A9:F3:E1:95:69:A6:23:32:3E
Certificate issuer: /CN=9980c70f76f0b5f5c8457a0337ad5d63122cf7e6
Certificate serial: 0194228E1F331D32799F087DF8DCD112C62C
Authority key identifier: 99:80:C7:0F:76:F0:B5:F5:C8:45:7A:03:37:AD:5D:63:12:2C:F7:E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mYDHD3bwtfXIRXoDN61dYxIs9-Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/42ec68-d433-4000-906c-c3eae6b0fb9c/1/YErVt-7gu1jQqcup8-GVaaYjMj4.roa
Signing time: Wed 01 Jan 2025 15:48:46 +0000
ROA not before: Wed 01 Jan 2025 15:48:46 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43008
IP address blocks: 91.194.30.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8e:1f:33:1d:32:79:9f:08:7d:f8:dc:d1:12:c6:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9980c70f76f0b5f5c8457a0337ad5d63122cf7e6
Validity
Not Before: Jan 1 15:48:46 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=604ad5b7eee0bb58d0a9cba9f3e19569a623323e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:1a:3c:92:46:f7:52:f7:8c:39:d8:e7:94:a9:
cc:2e:fb:0e:3d:0e:3a:ce:8f:ff:87:4b:46:76:6a:
1f:e1:9f:ad:70:88:cd:34:2b:73:cf:63:b3:b7:63:
9d:bc:e4:06:f5:96:f7:25:bd:15:69:1b:24:2e:05:
c3:8e:21:5f:fe:9e:f7:91:09:ee:3a:93:a2:1b:8b:
0d:a9:76:6c:3b:eb:51:5f:9f:0c:69:b7:cd:d8:27:
85:e0:37:06:17:a6:73:08:63:8f:df:dc:c5:30:b4:
44:d5:a5:45:70:0b:b0:5e:37:fc:e3:04:25:5d:2c:
b2:cd:6f:2d:aa:cf:47:e4:3b:d6:b4:c4:cd:64:48:
01:6f:ee:9f:78:5c:6d:b6:8d:d7:16:09:fc:0d:78:
22:fe:84:6b:d4:94:5d:bf:73:5e:cb:e3:48:1e:24:
bd:49:a5:f4:3d:c6:09:d0:e9:ec:31:9f:70:37:c5:
20:44:61:00:82:0f:78:b8:69:e2:ca:49:cf:0f:e7:
bd:89:6c:a9:b2:e6:ae:b9:67:fc:72:34:88:79:c6:
4b:d3:c9:0b:6f:f5:88:91:bf:33:29:79:c4:e9:3c:
e2:e1:f9:ed:25:8a:f6:07:8d:6f:7c:44:e4:04:16:
98:5c:70:ca:40:5b:79:2e:2e:96:5b:29:ba:f4:65:
4d:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:4A:D5:B7:EE:E0:BB:58:D0:A9:CB:A9:F3:E1:95:69:A6:23:32:3E
X509v3 Authority Key Identifier:
keyid:99:80:C7:0F:76:F0:B5:F5:C8:45:7A:03:37:AD:5D:63:12:2C:F7:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mYDHD3bwtfXIRXoDN61dYxIs9-Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/42ec68-d433-4000-906c-c3eae6b0fb9c/1/YErVt-7gu1jQqcup8-GVaaYjMj4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/42ec68-d433-4000-906c-c3eae6b0fb9c/1/mYDHD3bwtfXIRXoDN61dYxIs9-Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.194.30.0/24
Signature Algorithm: sha256WithRSAEncryption
b6:dd:94:e4:a3:56:cc:e6:85:30:ff:a1:26:ee:f2:46:55:e9:
64:53:46:30:05:03:1e:c3:6d:c3:c0:5f:71:dd:84:ae:05:aa:
bc:29:91:6d:50:da:75:58:fe:9b:a7:13:ba:fb:33:32:e1:90:
74:b8:5e:42:79:73:0d:a2:3f:c3:ef:b9:77:a9:8c:08:6f:ae:
dc:12:a5:43:86:76:86:2f:94:d8:f5:12:6b:65:12:6b:41:07:
76:42:58:1c:41:a4:e2:76:3b:88:71:fc:66:d3:7c:27:da:5d:
0c:d2:d6:3e:34:7b:aa:4c:81:ca:c4:4c:15:f1:a0:75:de:58:
62:ca:27:58:f1:5a:e8:4c:03:b7:1e:f3:48:00:62:50:41:3d:
c6:28:bf:5b:3b:ce:de:e5:c0:c8:6a:d0:be:64:55:0e:3f:3f:
12:2d:f3:24:e3:b6:e8:d6:06:43:37:67:91:e0:c3:f1:6a:1a:
4f:17:c7:f1:d2:6a:81:ef:14:83:99:46:63:97:86:6d:78:92:
c8:b0:c7:63:36:27:43:ae:06:61:d8:e0:e4:66:fa:0e:11:53:
94:de:e8:ca:d4:98:ae:8e:82:6f:0a:03:32:62:29:7d:5f:84:
92:d3:9b:fe:34:4e:ea:61:be:4e:4c:c4:84:cd:8d:e4:46:68:
4c:9e:e0:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:57:05 2025 by rpki-client