Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/1cc1fa-28dd-44d4-98a0-33e61bd912ea/1/yZau-DwfbVfRH1H5nBnznu-Gh04.roa
File: yZau-DwfbVfRH1H5nBnznu-Gh04.roa (raw, json)
Hash identifier: u7wjmjDpMKVCur/XQ8T5dAncaG/iDqX0/1UwHJhY4Us=
Subject key identifier: C9:96:AE:F8:3C:1F:6D:57:D1:1F:51:F9:9C:19:F3:9E:EF:86:87:4E
Certificate issuer: /CN=33b1b31396083ce9ed51e462898e294ed8215ae7
Certificate serial: 019424459FC8EEC635B5BEC61049F057DA55
Authority key identifier: 33:B1:B3:13:96:08:3C:E9:ED:51:E4:62:89:8E:29:4E:D8:21:5A:E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M7GzE5YIPOntUeRiiY4pTtghWuc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/1cc1fa-28dd-44d4-98a0-33e61bd912ea/1/yZau-DwfbVfRH1H5nBnznu-Gh04.roa
Signing time: Wed 01 Jan 2025 23:48:50 +0000
ROA not before: Wed 01 Jan 2025 23:48:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 5392
IP address blocks: 195.36.0.0/18 maxlen: 18
2a00:1988::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:45:9f:c8:ee:c6:35:b5:be:c6:10:49:f0:57:da:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33b1b31396083ce9ed51e462898e294ed8215ae7
Validity
Not Before: Jan 1 23:48:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c996aef83c1f6d57d11f51f99c19f39eef86874e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:04:12:5f:35:55:51:37:fe:20:b6:2f:b4:53:
86:e9:00:fc:a6:94:af:4c:e9:41:06:ae:b7:d7:71:
6d:e1:ad:e4:70:75:ce:7a:e7:07:2b:35:73:2b:21:
22:3a:14:63:ce:b4:bc:e9:d2:cb:40:1e:35:5f:67:
89:29:7c:83:b3:94:fa:5c:55:d3:e3:1a:0b:d8:06:
60:2d:35:e9:c7:e2:c1:33:32:94:d5:2d:51:d4:11:
ba:56:05:77:08:cd:45:bd:40:24:c3:32:3f:3b:2d:
31:10:e7:fb:0b:9e:49:c6:a9:ef:ae:af:57:c8:fe:
ba:1e:e9:9a:48:c9:30:ad:c3:67:f7:1d:af:ef:77:
99:83:18:38:a7:af:fb:d9:09:b9:81:50:45:5c:c0:
0e:54:d7:e7:4c:97:af:99:1e:49:e9:4b:55:ff:91:
eb:a5:4e:7f:5b:a5:9d:ed:15:50:66:23:36:5a:8f:
58:8f:bb:19:49:f7:ed:33:0d:18:4a:7a:67:5e:8b:
43:11:f2:db:42:fc:6b:af:32:0d:ba:d4:bc:c7:b0:
af:fd:1f:fc:51:80:50:2c:b0:e4:d1:cc:5d:17:08:
82:62:93:e7:5f:9d:2f:88:be:00:bb:01:d2:66:3f:
0e:e0:d4:d8:d6:a3:07:72:eb:5b:1b:7c:cc:ac:48:
f0:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:96:AE:F8:3C:1F:6D:57:D1:1F:51:F9:9C:19:F3:9E:EF:86:87:4E
X509v3 Authority Key Identifier:
keyid:33:B1:B3:13:96:08:3C:E9:ED:51:E4:62:89:8E:29:4E:D8:21:5A:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M7GzE5YIPOntUeRiiY4pTtghWuc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/1cc1fa-28dd-44d4-98a0-33e61bd912ea/1/yZau-DwfbVfRH1H5nBnznu-Gh04.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/1cc1fa-28dd-44d4-98a0-33e61bd912ea/1/M7GzE5YIPOntUeRiiY4pTtghWuc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.36.0.0/18
IPv6:
2a00:1988::/32
Signature Algorithm: sha256WithRSAEncryption
8b:f0:42:c5:5d:92:0b:ee:c9:87:8e:86:7a:9f:5c:fe:80:f3:
0b:fc:bd:37:99:b7:36:68:7a:d1:f9:ee:db:a2:87:eb:30:e4:
76:16:ac:9d:eb:bd:bb:17:9e:9f:90:ca:0a:15:cf:55:ca:d9:
4c:9d:da:aa:46:08:25:4f:bf:0b:ff:08:4a:d5:28:cc:77:39:
1c:80:5f:32:c2:a1:de:dd:e5:d0:fa:8c:ae:35:c2:a5:0c:8d:
90:65:83:12:cc:cd:3e:ce:d2:91:15:80:40:db:3c:c0:f9:20:
bf:4b:3b:3c:63:a7:c3:c5:76:b1:6d:f8:b8:20:46:62:8d:fc:
f5:a6:7a:f2:e2:ba:71:c7:d3:41:cf:2d:59:37:be:fb:58:ab:
d9:2c:86:55:76:1a:66:5c:21:5c:c9:8b:6a:d7:26:02:32:ff:
db:9b:c9:75:44:5d:07:63:35:c6:47:6a:58:1f:ca:7e:3f:b5:
d5:77:da:74:b4:d8:d4:ee:67:4a:6e:2b:ba:1e:a0:d3:21:de:
88:60:66:90:e0:ad:2e:4a:a5:38:c7:84:ba:bf:f1:8d:1f:b0:
e3:7f:42:cd:e2:04:41:00:8f:fa:a5:0b:ac:9b:74:fa:48:99:
5e:2f:fa:79:45:bb:f0:9a:27:80:49:37:53:e0:3d:15:2c:a3:
59:b7:e5:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:48:59 2025 by rpki-client