Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/0f95a4-9785-456a-999b-0b22c780cb8d/1/YinwcUCMN5iX2SngTOV2ZfybKwU.roa
File: YinwcUCMN5iX2SngTOV2ZfybKwU.roa (raw, json)
Hash identifier: +mTSnJqnngKSlVHPqWCyOg6XfxueZRJLUHxxB0Ei12M=
Subject key identifier: 62:29:F0:71:40:8C:37:98:97:D9:29:E0:4C:E5:76:65:FC:9B:2B:05
Certificate issuer: /CN=5c5cc07cfa4f0d65e68a95019c256fd7edb66f44
Certificate serial: 018CC56E0F40A19950DB73B26526234CA17A
Authority key identifier: 5C:5C:C0:7C:FA:4F:0D:65:E6:8A:95:01:9C:25:6F:D7:ED:B6:6F:44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XFzAfPpPDWXmipUBnCVv1-22b0Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/0f95a4-9785-456a-999b-0b22c780cb8d/1/YinwcUCMN5iX2SngTOV2ZfybKwU.roa
Signing time: Mon 01 Jan 2024 14:29:33 +0000
ROA not before: Mon 01 Jan 2024 14:29:33 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 202496
IP address blocks: 5.42.208.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:0f:40:a1:99:50:db:73:b2:65:26:23:4c:a1:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c5cc07cfa4f0d65e68a95019c256fd7edb66f44
Validity
Not Before: Jan 1 14:29:33 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6229f071408c379897d929e04ce57665fc9b2b05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:7b:0b:31:55:d5:f3:1a:b6:86:4a:f6:60:bc:
3c:ff:de:53:cf:81:76:b6:02:9f:3f:2e:e5:c8:7f:
f5:4d:35:8f:86:f8:9c:c9:4b:74:41:f5:46:3b:39:
26:ef:a6:72:8c:8d:8c:1c:88:b0:2c:65:db:2c:94:
cc:95:be:e2:fe:72:79:54:ff:80:4e:46:59:3c:42:
a5:3d:8a:d5:15:45:a2:0b:86:a0:04:99:ac:4b:d2:
d3:41:b2:92:c1:8c:2a:64:70:d9:97:d3:7b:e9:17:
a0:aa:c5:9b:68:db:3f:7d:b2:fe:5a:6b:3a:65:d4:
0f:2a:12:0c:99:59:3e:d2:ee:1c:d8:94:54:c6:04:
98:f1:fa:2d:33:eb:25:30:2f:0c:0e:5d:d2:5a:5c:
a3:e0:26:dd:f2:85:71:0f:c2:15:81:e8:e6:e2:e6:
78:40:eb:9c:bc:3a:5d:71:16:80:d6:63:f0:bb:2f:
40:f8:6e:34:fa:6d:4a:83:d1:5e:2c:04:1e:33:e3:
43:d2:0f:6b:e6:cf:c3:e7:bd:ce:63:06:7a:65:eb:
57:ed:d3:57:05:c5:31:6e:b1:76:f1:bc:a6:0d:a8:
95:0c:88:cc:2d:5b:7f:14:a1:87:a7:98:57:4f:b9:
97:74:7d:bf:4c:98:ce:c1:b2:6b:c7:5e:d3:c7:a9:
d6:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:29:F0:71:40:8C:37:98:97:D9:29:E0:4C:E5:76:65:FC:9B:2B:05
X509v3 Authority Key Identifier:
keyid:5C:5C:C0:7C:FA:4F:0D:65:E6:8A:95:01:9C:25:6F:D7:ED:B6:6F:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XFzAfPpPDWXmipUBnCVv1-22b0Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/0f95a4-9785-456a-999b-0b22c780cb8d/1/YinwcUCMN5iX2SngTOV2ZfybKwU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/0f95a4-9785-456a-999b-0b22c780cb8d/1/XFzAfPpPDWXmipUBnCVv1-22b0Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.42.208.0/24
Signature Algorithm: sha256WithRSAEncryption
29:ca:9f:4e:73:6d:12:ef:9d:a8:69:d7:65:90:66:80:4a:67:
f3:fe:03:eb:f2:4a:44:b0:e7:81:fc:e6:55:ea:f1:15:db:05:
c8:56:44:5f:47:f5:fe:7e:19:f3:38:56:2a:ee:e3:de:91:a8:
84:c8:11:56:76:04:2c:7d:de:b8:e5:87:54:10:cb:b4:2f:6f:
5e:4b:26:5f:b4:92:76:71:31:e5:13:cb:8d:82:52:d8:a2:de:
74:96:0d:eb:76:e0:4b:70:46:8e:c9:fa:34:df:16:1c:d6:4a:
da:09:36:f8:dd:53:af:99:28:a6:71:4d:ad:a0:5b:84:d7:88:
56:10:55:c8:fc:89:f6:36:8b:06:94:1a:d0:c7:71:da:6d:1b:
53:09:0b:a4:a5:94:e5:e1:11:33:3a:72:77:a8:2a:51:f0:bc:
cb:6d:41:de:aa:b9:a4:ce:06:e3:23:65:75:39:1c:01:6d:61:
0a:b3:8b:41:31:9a:c2:64:7e:fa:5c:7f:dd:bd:d3:d0:bc:7b:
a7:02:c2:51:88:c5:44:90:7e:e9:b6:76:04:46:40:83:06:9c:
5b:c8:f1:16:25:dc:6a:e1:83:29:f3:0e:cc:5b:c9:59:0d:01:
11:c9:79:5c:ed:da:63:0c:50:cb:25:fd:df:07:38:54:21:94:
7f:78:41:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 00:02:25 2025 by rpki-client