Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/3453b2-9773-455e-8b08-d92dae861a7d/1/yYaisXyChRiN2DpvBoKyqem_xcE.roa
File: yYaisXyChRiN2DpvBoKyqem_xcE.roa (raw, json)
Hash identifier: 2YMiZxn9BzAJh7sY9ViGLpVIJNMsE1y+h4ErGfBrx8g=
Subject key identifier: C9:86:A2:B1:7C:82:85:18:8D:D8:3A:6F:06:82:B2:A9:E9:BF:C5:C1
Certificate issuer: /CN=622f517b08182c6eda1b3f988ee01816ee264dc0
Certificate serial: 019423D7376924AC67BD53801E7951F54221
Authority key identifier: 62:2F:51:7B:08:18:2C:6E:DA:1B:3F:98:8E:E0:18:16:EE:26:4D:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yi9RewgYLG7aGz-YjuAYFu4mTcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/3453b2-9773-455e-8b08-d92dae861a7d/1/yYaisXyChRiN2DpvBoKyqem_xcE.roa
Signing time: Wed 01 Jan 2025 21:48:14 +0000
ROA not before: Wed 01 Jan 2025 21:48:14 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 59775
IP address blocks: 78.108.220.0/24 maxlen: 26
78.108.221.0/24 maxlen: 26
185.56.112.0/22 maxlen: 26
2a02:5260::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:37:69:24:ac:67:bd:53:80:1e:79:51:f5:42:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=622f517b08182c6eda1b3f988ee01816ee264dc0
Validity
Not Before: Jan 1 21:48:14 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c986a2b17c8285188dd83a6f0682b2a9e9bfc5c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:04:5c:f8:51:38:9f:28:84:58:b9:ea:a7:02:
52:72:ef:56:bf:19:58:d0:2d:63:52:03:7f:1d:f6:
0c:84:7d:20:18:68:f2:ed:93:83:f0:bb:5a:e5:43:
e1:6e:f7:bb:80:1b:95:df:44:db:59:2e:b5:cd:d5:
af:45:d8:2b:5b:d8:56:a8:f5:34:5f:8c:c0:fc:42:
4c:36:01:d5:ef:0b:2a:81:09:d2:a2:94:7d:8d:e7:
5b:15:28:93:3d:3b:16:c0:25:7a:d5:8b:d5:d6:42:
df:ea:7c:c3:9c:59:49:5e:2f:42:eb:0b:3f:0a:4c:
a8:9d:8c:8c:7d:c4:d0:c2:43:3b:c8:44:89:35:7c:
80:21:13:4a:dd:90:71:16:69:fd:1a:c6:4c:39:80:
a6:93:9b:65:f6:48:a3:dd:b9:aa:af:fd:cf:5b:2f:
eb:38:e1:a6:3b:41:95:f0:f6:e9:f5:8d:de:fc:06:
1d:e7:0f:2c:3a:ec:5f:67:51:3c:c5:20:b6:86:9f:
48:fc:c5:36:d1:9b:04:e1:4d:3d:fb:68:d2:92:36:
90:6f:05:28:d5:27:31:7e:f7:58:0b:b8:9e:e9:05:
48:f4:29:a5:42:aa:02:ff:d1:ae:9e:0c:02:03:9e:
03:ff:0a:1b:81:90:00:c9:e8:7b:16:0d:63:20:7b:
d4:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:86:A2:B1:7C:82:85:18:8D:D8:3A:6F:06:82:B2:A9:E9:BF:C5:C1
X509v3 Authority Key Identifier:
keyid:62:2F:51:7B:08:18:2C:6E:DA:1B:3F:98:8E:E0:18:16:EE:26:4D:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yi9RewgYLG7aGz-YjuAYFu4mTcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/3453b2-9773-455e-8b08-d92dae861a7d/1/yYaisXyChRiN2DpvBoKyqem_xcE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/3453b2-9773-455e-8b08-d92dae861a7d/1/Yi9RewgYLG7aGz-YjuAYFu4mTcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.108.220.0/23
185.56.112.0/22
IPv6:
2a02:5260::/29
Signature Algorithm: sha256WithRSAEncryption
46:76:bb:2e:a9:bd:0a:8b:48:9e:5b:dd:c7:26:6e:22:a3:2d:
d3:7f:f3:be:e3:e5:6f:80:3b:f2:96:21:ae:2a:3d:d6:f1:75:
39:a7:09:03:87:40:b5:9c:57:fa:b9:28:59:4e:6a:04:a8:a9:
43:15:bc:fb:0f:04:ec:67:df:27:c7:ac:82:e6:2b:f8:d2:ba:
c6:02:03:14:20:f2:f5:c4:31:72:e0:37:d4:8e:a5:83:34:d7:
2c:4d:86:8b:20:32:03:e0:eb:c9:70:04:a0:ac:94:6e:b8:3c:
92:b7:8f:1e:b7:a2:4d:23:b2:a2:e3:64:28:be:55:37:ef:d4:
63:ac:fc:d5:b3:a3:88:b9:34:ec:b1:af:98:37:22:ac:3e:db:
32:db:5a:89:e2:f2:16:1d:f9:ef:1f:88:07:92:5e:2a:71:eb:
9f:12:02:c0:63:6f:b8:cb:2f:f9:89:c8:f6:3b:25:6e:f9:1a:
02:a1:47:69:38:bf:33:84:8f:70:fb:1c:13:a5:ce:e9:4b:42:
46:27:55:b9:c9:b0:7f:2b:3e:73:c0:51:80:b9:da:61:54:33:
d0:99:ca:b8:9f:36:c0:1d:24:d4:31:e9:82:46:2e:2b:a9:75:
24:4f:4e:ee:2d:24:81:e2:3d:ec:a5:ce:09:90:bf:6f:c9:ff:
0f:40:c3:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:52:21 2025 by rpki-client