Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/88e353-3013-4b7d-a8d6-6c6ed71e25da/1/YujGDuMaT3wV3-fbkaIp5s8_44w.roa
File: YujGDuMaT3wV3-fbkaIp5s8_44w.roa (raw, json)
Hash identifier: tPCAjBnqzoCJL01R6LFoTp+whEK9Rdgrf/7rln2jsO0=
Subject key identifier: 62:E8:C6:0E:E3:1A:4F:7C:15:DF:E7:DB:91:A2:29:E6:CF:3F:E3:8C
Certificate issuer: /CN=b11863e1705accc128f12d16476fa4fe1eb0d7d3
Certificate serial: 0188C2DB7A32B355BB994FC21EDFBA7FB47F
Authority key identifier: B1:18:63:E1:70:5A:CC:C1:28:F1:2D:16:47:6F:A4:FE:1E:B0:D7:D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sRhj4XBazMEo8S0WR2-k_h6w19M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/88e353-3013-4b7d-a8d6-6c6ed71e25da/1/YujGDuMaT3wV3-fbkaIp5s8_44w.roa
Signing time: Fri 16 Jun 2023 06:19:03 +0000
ROA not before: Fri 16 Jun 2023 06:19:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 176.118.34.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:c2:db:7a:32:b3:55:bb:99:4f:c2:1e:df:ba:7f:b4:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b11863e1705accc128f12d16476fa4fe1eb0d7d3
Validity
Not Before: Jun 16 06:19:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=62e8c60ee31a4f7c15dfe7db91a229e6cf3fe38c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:04:31:66:05:48:17:75:1b:1b:88:08:3e:e7:
fc:0f:2a:86:bc:67:38:ef:ba:42:06:9c:25:b3:5b:
58:16:b8:41:e7:06:8f:7d:3c:cf:d7:e9:9d:38:20:
f9:79:5f:74:36:7f:7d:4f:cf:e7:5c:f4:1d:33:4d:
eb:19:d1:5f:d9:19:f9:a2:5e:61:28:01:37:47:d2:
26:43:8a:0c:22:0e:db:9a:db:50:38:3f:7f:8f:bc:
8d:f9:1a:c9:96:9a:38:fd:7c:86:32:58:d0:a9:7b:
0a:8f:f4:4e:a0:1c:66:3a:eb:25:58:05:2a:36:d5:
4f:8a:98:d8:55:ab:18:eb:bc:5b:3c:e8:8b:62:48:
e2:77:d4:c9:8a:c1:91:e7:89:ff:dc:7b:e4:ca:d8:
0f:69:6c:9c:ee:91:3a:8e:94:11:9f:e8:43:3f:4d:
fb:57:a4:b5:0e:69:e8:29:ac:45:e4:90:9b:6f:c4:
82:89:bc:c3:32:90:da:08:ca:70:3a:6c:3d:27:20:
a8:ba:b0:ce:36:86:0a:45:ca:f1:32:7a:89:63:1c:
78:a5:86:c3:2a:43:8e:b6:c8:cc:29:d5:b0:04:0e:
07:1d:2d:ef:5f:6e:38:59:18:19:c5:72:4e:a1:df:
29:a7:c4:8e:c3:60:24:d3:a8:32:ad:1a:56:66:e9:
a7:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:E8:C6:0E:E3:1A:4F:7C:15:DF:E7:DB:91:A2:29:E6:CF:3F:E3:8C
X509v3 Authority Key Identifier:
keyid:B1:18:63:E1:70:5A:CC:C1:28:F1:2D:16:47:6F:A4:FE:1E:B0:D7:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sRhj4XBazMEo8S0WR2-k_h6w19M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/88e353-3013-4b7d-a8d6-6c6ed71e25da/1/YujGDuMaT3wV3-fbkaIp5s8_44w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/88e353-3013-4b7d-a8d6-6c6ed71e25da/1/sRhj4XBazMEo8S0WR2-k_h6w19M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.118.34.0/24
Signature Algorithm: sha256WithRSAEncryption
51:b8:67:8a:2b:70:d6:11:16:99:15:41:d5:36:95:89:5b:1b:
df:de:c8:7b:5b:38:37:a4:d4:e7:88:a9:61:d1:7f:2f:91:fc:
68:d9:02:3d:37:15:a8:c6:77:4e:08:05:27:4f:c5:29:70:29:
9e:87:9a:2d:37:4d:f6:ac:07:1e:89:99:67:da:7b:ad:df:67:
01:2d:db:bf:bf:96:19:a8:de:9a:2f:b5:c3:94:42:36:2b:0f:
95:08:48:09:d7:d7:62:72:66:f9:89:70:90:47:b8:cb:00:88:
bd:05:78:4c:00:9b:6f:52:88:e5:c6:37:94:00:61:67:12:b3:
5d:f5:b2:72:a9:52:b3:61:79:61:ab:ff:74:02:c9:bd:50:74:
d1:1c:2d:ac:83:25:3f:a7:8d:7f:6f:b7:47:2b:02:be:62:96:
b0:1c:84:79:b5:bb:88:92:d9:4f:51:1a:65:82:36:b1:2c:9c:
30:cc:35:91:08:78:3c:94:de:22:e3:f2:7b:f7:fd:ec:57:86:
d6:85:15:ee:55:2f:04:10:dc:87:e6:06:03:93:98:fc:ec:b8:
68:66:60:02:6d:1d:cd:b4:44:84:0f:38:ee:23:0c:2a:1c:69:
3f:5c:42:8e:d4:d1:e4:ad:c5:e4:b3:70:fa:01:d1:b9:16:cc:
af:da:03:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 23:57:56 2025 by rpki-client