Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/40a1e5-7d2a-48d6-a50e-f96fb4ea7e70/1/YkA8Ssik5dMp6e7KGDWmp6DJ7AM.roa
File: YkA8Ssik5dMp6e7KGDWmp6DJ7AM.roa (raw, json)
Hash identifier: kaPK3T3qFTRqHUlFynSutBS2oYj5+768wNKSaLHwTTo=
Subject key identifier: 62:40:3C:4A:C8:A4:E5:D3:29:E9:EE:CA:18:35:A6:A7:A0:C9:EC:03
Certificate issuer: /CN=2c75f35d256cc4a5b88319bb7e4bbba329e49341
Certificate serial: 019425FD36AF7EBECFFDF1C1EAFA67022994
Authority key identifier: 2C:75:F3:5D:25:6C:C4:A5:B8:83:19:BB:7E:4B:BB:A3:29:E4:93:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LHXzXSVsxKW4gxm7fku7oynkk0E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/40a1e5-7d2a-48d6-a50e-f96fb4ea7e70/1/YkA8Ssik5dMp6e7KGDWmp6DJ7AM.roa
Signing time: Thu 02 Jan 2025 07:48:59 +0000
ROA not before: Thu 02 Jan 2025 07:48:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 197808
IP address blocks: 195.22.123.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:36:af:7e:be:cf:fd:f1:c1:ea:fa:67:02:29:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c75f35d256cc4a5b88319bb7e4bbba329e49341
Validity
Not Before: Jan 2 07:48:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=62403c4ac8a4e5d329e9eeca1835a6a7a0c9ec03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:57:bf:44:6d:ce:5a:cf:c3:c1:80:c3:0f:2d:
56:2c:18:cc:21:f1:4e:4e:48:37:0a:5e:8a:ce:7d:
53:d9:db:c3:59:c8:b8:af:d1:73:67:8e:a7:33:68:
8e:54:45:6e:d6:3e:ec:ac:7d:57:b3:35:74:d8:79:
90:66:e9:71:76:1c:b6:94:6b:58:6a:47:91:3a:56:
a4:cb:26:ee:20:2e:08:00:b9:1d:31:ad:6a:db:cf:
66:3b:c7:59:f4:a4:75:61:2b:f2:28:07:80:3b:6b:
eb:3f:bb:35:64:30:bf:dd:9a:3b:a8:e1:52:7f:32:
88:ba:17:ad:a1:a6:f7:a5:c8:a0:cb:fa:13:6b:76:
3d:13:5d:86:95:5e:1e:39:d6:ac:1b:db:07:f0:a2:
b5:10:09:bb:ab:f9:0b:5b:50:77:20:cc:99:2b:73:
55:85:bc:ac:fa:cc:d6:ba:54:94:53:03:6b:0b:12:
f3:5a:f6:d6:71:35:ed:45:6b:ad:29:36:11:05:7e:
68:67:80:6e:ca:44:53:a6:2a:45:ca:cc:c2:08:33:
45:d7:01:ee:7e:42:96:ed:b7:61:9d:cc:b0:ad:64:
9c:2a:66:08:cd:77:20:e2:1d:de:e7:9d:43:1a:62:
cf:b8:8e:a4:1c:aa:de:8a:00:99:1e:31:f6:f1:9a:
ff:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:40:3C:4A:C8:A4:E5:D3:29:E9:EE:CA:18:35:A6:A7:A0:C9:EC:03
X509v3 Authority Key Identifier:
keyid:2C:75:F3:5D:25:6C:C4:A5:B8:83:19:BB:7E:4B:BB:A3:29:E4:93:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LHXzXSVsxKW4gxm7fku7oynkk0E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/40a1e5-7d2a-48d6-a50e-f96fb4ea7e70/1/YkA8Ssik5dMp6e7KGDWmp6DJ7AM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/40a1e5-7d2a-48d6-a50e-f96fb4ea7e70/1/LHXzXSVsxKW4gxm7fku7oynkk0E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.22.123.0/24
Signature Algorithm: sha256WithRSAEncryption
74:da:57:88:be:db:e1:10:a2:cd:1d:83:7b:5c:40:1d:30:d1:
20:4c:fb:3d:1f:10:77:d5:94:1f:2a:f8:98:69:84:c2:c7:d4:
2f:81:9c:8b:d5:8e:88:ba:bd:c2:7b:50:44:b5:40:82:c2:79:
0c:3c:bd:a5:a2:17:9a:59:e9:77:70:d8:c2:8a:90:cd:97:19:
a4:be:e0:5a:f2:5d:ff:2d:1c:ba:e5:cf:06:e1:b4:24:0d:3a:
a9:78:02:ab:d7:0d:81:4b:f2:29:43:ba:19:4f:76:ee:f8:a6:
00:e4:80:cc:6a:02:58:e6:0f:38:39:d9:71:85:e7:53:ab:62:
64:db:52:94:13:c3:f9:e2:f7:5a:f0:2b:b8:a2:98:cd:22:af:
0b:bf:60:88:35:af:20:cd:df:04:bd:25:65:6a:90:bd:66:ea:
b9:be:b1:a9:5c:2e:1d:11:3c:1a:d2:ba:94:0b:cb:f5:e5:9e:
ce:00:7c:80:a8:fa:52:12:83:5d:e1:d6:b9:00:3e:fd:0e:e3:
fa:b3:8d:a6:3a:80:50:55:ec:b1:fb:fc:5d:c2:24:9a:6b:bd:
21:e4:3a:a6:6a:f7:8c:8d:cc:ab:a2:76:52:fc:92:8c:c5:ad:
74:98:f2:9a:d3:d0:27:e6:00:c6:a9:93:a4:54:38:08:eb:cf:
f3:5d:99:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:22 2025 by rpki-client on console.sobornost.net