Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/027aae-4922-42a9-a4c9-38f80d6961ec/1/YnxGCtZHjBins_u7hbvZvkt5GP0.roa
File: YnxGCtZHjBins_u7hbvZvkt5GP0.roa (raw, json)
Hash identifier: h0irCh3dXAANqMbOKNJ1CMyoogPZbPx+cpJ+hvCcEkU=
Subject key identifier: 62:7C:46:0A:D6:47:8C:18:A7:B3:FB:BB:85:BB:D9:BE:4B:79:18:FD
Certificate issuer: /CN=ce704858b643266f7c7107721c98f2ba93dd5265
Certificate serial: 01942823C5ADDA0FF1F29A613134310F77A5
Authority key identifier: CE:70:48:58:B6:43:26:6F:7C:71:07:72:1C:98:F2:BA:93:DD:52:65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/znBIWLZDJm98cQdyHJjyupPdUmU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/027aae-4922-42a9-a4c9-38f80d6961ec/1/YnxGCtZHjBins_u7hbvZvkt5GP0.roa
Signing time: Thu 02 Jan 2025 17:50:20 +0000
ROA not before: Thu 02 Jan 2025 17:50:20 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 396982
IP address blocks: 185.200.14.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:23:c5:ad:da:0f:f1:f2:9a:61:31:34:31:0f:77:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce704858b643266f7c7107721c98f2ba93dd5265
Validity
Not Before: Jan 2 17:50:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=627c460ad6478c18a7b3fbbb85bbd9be4b7918fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:01:e2:52:5c:f1:e1:58:11:65:7e:37:37:7b:
b5:17:ae:d6:5b:02:c3:52:e6:d6:f9:6a:6d:51:3e:
3c:9b:04:c7:e9:5b:a1:fc:7c:21:29:2e:3c:bb:4f:
27:5c:95:c3:4c:4c:d0:11:33:48:6f:83:02:0a:e4:
d6:a7:de:6c:02:e3:f2:88:87:e1:71:be:9b:7f:99:
d6:7c:f9:d4:44:d9:d4:71:92:00:a7:4b:d7:bc:b9:
11:70:d8:cf:1a:ce:ff:1e:73:c0:3c:5e:4c:24:d7:
9e:c1:b0:bf:82:4d:97:bb:b9:ec:64:d2:9b:ce:43:
d8:0b:ec:90:bb:4c:d9:80:ca:fc:3a:d9:51:e4:61:
da:c7:f9:dd:f7:65:a9:41:4d:88:ae:fc:d5:e3:a6:
c6:f9:73:bd:c0:c3:58:50:69:66:6a:7c:3b:b9:dd:
13:0e:05:25:5c:b1:a0:e8:40:53:6e:ce:87:86:86:
7b:a9:46:73:33:7e:df:df:79:87:ab:46:c4:d0:c1:
f0:29:8e:0c:82:ff:23:9c:05:83:91:2f:73:a5:77:
24:f4:e5:69:52:6a:da:71:71:9e:ca:49:7a:58:62:
9f:ba:c6:56:4a:b8:49:5a:53:90:01:68:e8:8a:60:
3e:80:5c:07:22:42:51:f3:c5:d7:3e:24:29:8a:61:
9e:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:7C:46:0A:D6:47:8C:18:A7:B3:FB:BB:85:BB:D9:BE:4B:79:18:FD
X509v3 Authority Key Identifier:
keyid:CE:70:48:58:B6:43:26:6F:7C:71:07:72:1C:98:F2:BA:93:DD:52:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/znBIWLZDJm98cQdyHJjyupPdUmU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/027aae-4922-42a9-a4c9-38f80d6961ec/1/YnxGCtZHjBins_u7hbvZvkt5GP0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/027aae-4922-42a9-a4c9-38f80d6961ec/1/znBIWLZDJm98cQdyHJjyupPdUmU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.200.14.0/24
Signature Algorithm: sha256WithRSAEncryption
23:95:5d:ea:4b:7c:f8:cf:ec:1a:d0:d3:9c:8a:0f:82:d1:2e:
b4:a1:4e:48:66:87:fe:cb:16:69:59:ac:ec:d6:c3:f3:f1:43:
3c:fd:02:9a:c4:2b:58:75:44:71:87:09:88:22:dc:31:a8:5b:
cc:cb:1e:cc:c7:6d:96:98:82:ff:57:8b:c4:07:e3:20:23:13:
5a:4c:4f:e1:e5:8d:87:3d:f5:a6:db:f2:2e:09:bb:52:00:b2:
36:df:7b:a1:83:46:5e:95:94:97:2b:9d:b8:b3:d2:ff:c3:83:
9c:7e:fd:8d:2a:be:69:4b:db:c9:38:6a:73:60:38:b4:4c:80:
91:3f:94:3c:22:64:8a:66:c2:c9:dd:ae:20:db:7e:4d:89:78:
e3:6e:14:46:f7:b4:b1:eb:96:f8:06:1f:ad:be:ed:a1:14:f6:
7d:ee:a0:60:be:54:23:80:0d:66:5d:0e:0f:e8:60:43:e1:15:
19:95:ff:5f:27:8e:56:6c:7b:da:89:5c:94:dc:f2:9d:11:96:
35:7a:60:3c:bf:57:4a:ab:e2:e5:67:be:85:6a:aa:df:53:11:
09:ac:b3:d1:48:76:99:9f:e7:45:a2:7a:2d:ee:5b:87:f2:7d:
83:55:0f:89:30:c5:b2:7a:f8:21:99:52:2b:b2:27:8d:7f:68:
4d:11:52:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:22:13 2025 by rpki-client