Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/ywFfsakzP6gwg7h7Z-Y4enCkXVs.roa
File: ywFfsakzP6gwg7h7Z-Y4enCkXVs.roa (raw, json)
Hash identifier: zQ4r7S3Ps9QMhK/S8Db/JFo0flSN41hhML8fbJu8SJA=
Subject key identifier: CB:01:5F:B1:A9:33:3F:A8:30:83:B8:7B:67:E6:38:7A:70:A4:5D:5B
Certificate issuer: /CN=92bf6464ce6e19a4dcf8a32b27a2f1cbe1551055
Certificate serial: 019422FC370072150BA35D3044C18E433C54
Authority key identifier: 92:BF:64:64:CE:6E:19:A4:DC:F8:A3:2B:27:A2:F1:CB:E1:55:10:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/ywFfsakzP6gwg7h7Z-Y4enCkXVs.roa
Signing time: Wed 01 Jan 2025 17:49:02 +0000
ROA not before: Wed 01 Jan 2025 17:49:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208555
IP address blocks: 5.56.132.0/24 maxlen: 24
79.143.84.0/24 maxlen: 24
87.236.209.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fc:37:00:72:15:0b:a3:5d:30:44:c1:8e:43:3c:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92bf6464ce6e19a4dcf8a32b27a2f1cbe1551055
Validity
Not Before: Jan 1 17:49:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cb015fb1a9333fa83083b87b67e6387a70a45d5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:bf:26:7e:fb:17:b7:c3:45:36:7c:0d:a4:05:
40:58:74:da:56:68:ff:e5:40:67:be:98:4a:79:f7:
ee:36:30:fe:b1:4e:76:e1:76:99:ab:6b:64:54:7d:
39:84:df:20:d9:f1:8f:37:1a:a1:33:7a:1a:83:55:
99:77:5a:b5:ab:62:18:76:2f:33:b3:ea:64:2b:36:
e4:01:cc:7c:c9:4b:d4:03:62:e7:79:20:e0:a8:a0:
f3:8e:cb:f5:76:bd:47:1c:e0:3c:3b:6c:c8:fa:c6:
89:28:49:cb:53:bb:6d:a7:4e:14:98:44:66:11:cc:
89:dd:8d:21:4d:42:8b:d8:2d:51:b4:97:6c:7b:fe:
8e:7c:a3:47:8e:57:97:c9:4f:50:2f:a0:63:40:aa:
11:58:84:38:a2:99:a5:17:2e:90:9c:dc:3f:a2:f9:
f0:3a:03:44:9d:ea:f2:b4:ea:7d:cb:f3:d4:0c:22:
0d:69:0f:68:9a:12:06:70:d0:c0:76:83:e3:dd:8f:
a2:5e:f2:b2:b6:4e:ef:2a:cc:5a:d1:4f:60:57:f6:
0a:dd:80:8c:ce:96:59:fc:d7:84:87:90:47:cc:37:
8f:d0:1d:48:24:0a:3a:88:cf:a1:b5:c3:13:6c:71:
01:d5:9b:42:4e:14:7a:17:1e:24:a2:4b:31:41:29:
2b:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:01:5F:B1:A9:33:3F:A8:30:83:B8:7B:67:E6:38:7A:70:A4:5D:5B
X509v3 Authority Key Identifier:
keyid:92:BF:64:64:CE:6E:19:A4:DC:F8:A3:2B:27:A2:F1:CB:E1:55:10:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/ywFfsakzP6gwg7h7Z-Y4enCkXVs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.56.132.0/24
79.143.84.0/24
87.236.209.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:26:55:2d:6f:3a:c3:6f:ad:fd:70:72:a2:25:0b:7e:de:04:
d1:41:72:9f:de:9c:05:dc:5d:dd:85:91:da:c5:dd:97:23:c6:
d8:68:4d:ce:93:ad:af:41:6a:d7:46:73:fc:1e:c7:11:6c:d9:
c5:49:de:74:fd:cf:ab:32:f5:bf:89:f6:bf:dd:2a:92:ea:15:
b6:13:17:a3:e7:aa:c9:15:ce:ec:3a:57:08:61:d7:3a:7e:9e:
6b:33:78:da:6a:21:a9:e0:df:5f:94:f1:73:96:ce:af:d5:2e:
e9:69:65:2d:c4:20:d7:31:45:ce:26:33:55:19:28:7a:93:24:
90:ed:2a:20:b4:bd:60:4c:95:10:8f:30:d2:2d:4e:eb:9e:5e:
02:e5:25:1e:1f:f0:51:23:61:ee:e2:ea:ed:8b:81:3d:cc:13:
c0:cd:de:48:01:cb:3f:19:25:e8:a8:5f:48:69:4d:1b:2e:e4:
31:1d:95:75:d3:14:ca:13:ad:98:85:dc:a4:9a:05:15:bc:67:
cf:15:5f:d4:1c:15:60:63:19:a9:8d:b3:6b:73:6b:96:50:7b:
10:e5:fd:2d:1f:ea:65:2f:9b:ca:93:f0:20:c4:10:b5:47:86:
a9:82:30:2c:80:3a:a5:8a:b7:30:94:91:5c:31:f8:fc:77:39:
38:2b:ff:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 14:05:28 2025 by rpki-client