Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/1776cb-1c78-4dcc-b43b-36d7b4f84e5c/1/Y5V8eP_AgzuwiFE2HrYGmskh04c.roa
File: Y5V8eP_AgzuwiFE2HrYGmskh04c.roa (raw, json)
Hash identifier: SlwWJVVTaYw9Z8mUHoA0C0IZ8H875se5L3mE0H1vEwY=
Subject key identifier: 63:95:7C:78:FF:C0:83:3B:B0:88:51:36:1E:B6:06:9A:C9:21:D3:87
Certificate issuer: /CN=7cfc92b0a75b89ad2e3c57f7cba0e478684219ce
Certificate serial: 019473E1EBBE00E7AE64AA3DF6453B79288C
Authority key identifier: 7C:FC:92:B0:A7:5B:89:AD:2E:3C:57:F7:CB:A0:E4:78:68:42:19:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fPySsKdbia0uPFf3y6DkeGhCGc4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/1776cb-1c78-4dcc-b43b-36d7b4f84e5c/1/Y5V8eP_AgzuwiFE2HrYGmskh04c.roa
Signing time: Fri 17 Jan 2025 10:49:33 +0000
ROA not before: Fri 17 Jan 2025 10:49:33 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 201966
IP address blocks: 94.229.83.0/24 maxlen: 24
94.229.84.0/23 maxlen: 23
2a05:2c7:c000::/34 maxlen: 34
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:73:e1:eb:be:00:e7:ae:64:aa:3d:f6:45:3b:79:28:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7cfc92b0a75b89ad2e3c57f7cba0e478684219ce
Validity
Not Before: Jan 17 10:49:33 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=63957c78ffc0833bb08851361eb6069ac921d387
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:c0:96:34:3d:16:10:ce:04:c0:fb:20:50:8d:
95:3b:4f:f2:78:88:fa:a4:99:32:f6:6e:b5:e9:cd:
7d:44:23:2a:03:d0:fc:61:cd:c7:74:31:b3:38:3d:
8d:03:90:50:4d:08:d6:af:69:fb:e5:a0:dc:4e:ab:
14:28:ff:ae:1b:c5:f9:b2:de:c9:23:84:08:5b:d8:
4c:2c:b0:6a:9d:01:32:97:be:94:4c:c8:46:9b:aa:
fe:f4:d2:48:af:dd:8a:3c:5e:67:9d:8b:c8:25:b3:
ed:f8:1d:da:39:b2:0a:03:72:63:98:2a:ff:7d:e4:
6e:6d:01:66:30:82:3e:84:ad:39:62:4d:a1:5d:a6:
bc:f5:cf:92:c4:a3:71:8c:38:ed:b6:5c:c9:fd:6a:
cd:49:91:7c:9f:59:b9:cf:d7:d7:12:33:f3:78:fb:
d5:40:86:42:35:61:f8:84:41:c7:7d:c6:a9:47:04:
19:c7:99:6f:d3:ca:37:63:09:b4:97:72:17:f7:41:
05:0c:2e:50:d3:24:f7:ca:da:2e:4f:47:41:7e:63:
df:2f:10:d1:77:b1:af:06:f2:e1:b2:f0:87:39:bf:
6e:2d:d7:74:45:2f:27:75:cc:78:b4:c2:cb:3c:75:
31:98:43:0a:8c:61:7f:7d:a8:7f:16:59:12:79:b1:
56:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:95:7C:78:FF:C0:83:3B:B0:88:51:36:1E:B6:06:9A:C9:21:D3:87
X509v3 Authority Key Identifier:
keyid:7C:FC:92:B0:A7:5B:89:AD:2E:3C:57:F7:CB:A0:E4:78:68:42:19:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fPySsKdbia0uPFf3y6DkeGhCGc4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/1776cb-1c78-4dcc-b43b-36d7b4f84e5c/1/Y5V8eP_AgzuwiFE2HrYGmskh04c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/1776cb-1c78-4dcc-b43b-36d7b4f84e5c/1/fPySsKdbia0uPFf3y6DkeGhCGc4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.229.83.0-94.229.85.255
IPv6:
2a05:2c7:c000::/34
Signature Algorithm: sha256WithRSAEncryption
09:fc:08:6d:16:be:d6:4c:f7:63:5a:c1:db:b3:14:b5:18:1c:
42:c0:0c:b8:20:0f:02:da:1e:04:79:d7:74:94:81:2c:04:0f:
f2:ff:a9:a8:86:db:de:1f:27:84:02:2b:50:cd:93:bd:0d:e2:
78:cf:3f:c1:e2:46:de:92:eb:b4:21:4f:04:08:93:9d:9c:b0:
ea:66:3a:bd:aa:ac:aa:94:60:fe:12:0e:25:c5:57:34:c2:0f:
f1:6f:e2:c8:e0:ed:56:20:e2:8d:35:77:03:02:5d:61:be:eb:
c4:38:43:53:35:5d:44:a4:02:c9:a4:8e:a2:c6:04:97:79:91:
62:1a:ad:da:b9:58:75:e7:0b:27:f3:a8:89:7f:31:3b:aa:8e:
eb:47:69:0d:d4:fb:6d:02:15:a1:02:1b:fc:a6:46:86:fb:3a:
82:c0:95:bf:26:d3:8f:a4:7f:85:55:58:71:fb:c7:c1:99:1a:
9c:94:79:4f:08:70:57:67:72:91:3b:61:c2:b1:20:59:45:30:
2b:3f:61:79:03:5b:6a:29:86:8c:09:ba:65:48:e1:62:c9:3b:
ce:ca:26:0b:e4:ae:c7:97:66:7d:fb:36:4c:e9:c6:86:99:a9:
b3:9b:d3:a9:b5:6f:18:5d:1d:40:b7:fd:11:01:53:39:ed:47:
0c:44:65:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:59:44 2025 by rpki-client