Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/dbb043-377b-4c4b-a0a2-7e8c5526de7e/1/ynxlTzW2Z7OOg39MYnktecMbQ34.roa
File: ynxlTzW2Z7OOg39MYnktecMbQ34.roa (raw, json)
Hash identifier: /1enFWpBnhSEiy75MLooqHcnc9RoQMKxSSL0rlifuAg=
Subject key identifier: CA:7C:65:4F:35:B6:67:B3:8E:83:7F:4C:62:79:2D:79:C3:1B:43:7E
Certificate issuer: /CN=df78ec6b0b969aa2228f125edaa419bacdbbf25b
Certificate serial: 0194258F08103B29754CC19F89667E7AE9FE
Authority key identifier: DF:78:EC:6B:0B:96:9A:A2:22:8F:12:5E:DA:A4:19:BA:CD:BB:F2:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/33jsawuWmqIijxJe2qQZus278ls.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/dbb043-377b-4c4b-a0a2-7e8c5526de7e/1/ynxlTzW2Z7OOg39MYnktecMbQ34.roa
Signing time: Thu 02 Jan 2025 05:48:38 +0000
ROA not before: Thu 02 Jan 2025 05:48:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16509
IP address blocks: 45.154.18.0/24 maxlen: 24
45.154.19.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:08:10:3b:29:75:4c:c1:9f:89:66:7e:7a:e9:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df78ec6b0b969aa2228f125edaa419bacdbbf25b
Validity
Not Before: Jan 2 05:48:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ca7c654f35b667b38e837f4c62792d79c31b437e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:b3:84:f4:a0:e1:e9:eb:51:07:14:51:95:8e:
47:36:9e:5b:e8:4f:86:f4:37:5b:ba:81:c5:67:ff:
3c:99:cc:9b:9d:a6:ee:86:28:e1:de:ab:12:de:ff:
79:9c:67:c7:6e:48:92:39:12:a4:79:a7:a7:59:2c:
72:29:c5:bf:17:ff:02:f0:2a:97:c3:30:8e:64:14:
05:f0:e2:71:9b:78:ae:44:b5:fb:54:f9:91:48:54:
d0:6e:b9:ee:9b:fe:93:3d:dc:3d:a6:01:0c:9d:19:
18:a1:d5:bb:03:b5:bc:80:c7:99:ca:89:3a:ab:95:
2b:2d:4e:b7:3c:85:ad:94:0c:43:60:62:75:61:b3:
71:a1:84:b3:ee:0b:40:9e:6f:80:43:ab:39:b2:b4:
b7:83:90:c1:8c:55:5c:68:3c:7a:9b:a9:06:a8:24:
ca:d2:88:b9:35:7b:86:2b:e5:76:7a:1b:4b:ad:bf:
17:76:8e:f1:6f:6c:8f:ea:d2:6a:98:65:41:c6:b3:
05:00:f0:f1:1c:e2:29:0c:88:e9:27:ba:89:d0:b4:
d0:4d:78:02:3e:1b:a7:15:b1:34:f9:2b:34:a8:3d:
6b:c0:6a:50:05:be:05:02:a5:d8:01:0f:5c:d3:12:
cb:93:a9:3d:8b:04:8d:ad:87:bb:bb:c6:26:da:28:
d4:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:7C:65:4F:35:B6:67:B3:8E:83:7F:4C:62:79:2D:79:C3:1B:43:7E
X509v3 Authority Key Identifier:
keyid:DF:78:EC:6B:0B:96:9A:A2:22:8F:12:5E:DA:A4:19:BA:CD:BB:F2:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/33jsawuWmqIijxJe2qQZus278ls.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/dbb043-377b-4c4b-a0a2-7e8c5526de7e/1/ynxlTzW2Z7OOg39MYnktecMbQ34.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/dbb043-377b-4c4b-a0a2-7e8c5526de7e/1/33jsawuWmqIijxJe2qQZus278ls.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.154.18.0/23
Signature Algorithm: sha256WithRSAEncryption
0c:87:8c:78:ef:f1:21:8a:f9:20:bd:f6:1a:ec:0f:2f:50:9c:
e9:c6:17:74:d5:22:c5:cc:bc:e2:cb:16:19:61:7a:34:d3:d7:
aa:f7:96:42:b7:e7:f0:3c:82:10:6b:8e:5d:39:cb:ab:1b:d2:
59:a8:e2:3d:e4:44:37:3c:fd:da:18:fa:f7:59:8f:b2:e1:ff:
94:89:33:cd:37:7a:0d:73:4e:8c:0e:8e:0a:fb:11:56:f4:ab:
9a:a7:5b:0d:5c:0a:52:d9:32:18:ce:97:59:fa:57:a8:6d:30:
9c:15:8b:9c:2d:73:26:aa:8d:63:60:51:bc:b2:8d:9d:5f:d5:
4a:91:0b:0d:e6:24:05:e7:de:38:c1:dc:e9:55:b8:8a:a9:55:
f9:e2:ff:2c:e0:98:c5:15:19:67:04:13:33:01:de:b3:92:55:
e1:c3:d8:2d:93:81:34:db:54:39:fb:ab:ca:54:d2:6e:b5:cb:
c7:74:b4:6c:c0:86:e2:b1:7d:51:58:5b:11:0c:2a:82:2f:64:
52:ee:a5:bf:e5:fb:f1:a2:11:17:8f:a3:44:d6:4d:e1:a9:ec:
50:35:34:5b:92:ef:9f:5d:21:d5:0c:93:8d:8f:c4:2f:3c:fa:
63:42:c2:e0:41:fe:42:37:5d:54:7c:14:bc:be:fc:39:46:3f:
15:98:2a:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:16:44 2025 by rpki-client