Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/ybY_u3UcfjTzRF7Lg69rgFhBEj8.roa
File: ybY_u3UcfjTzRF7Lg69rgFhBEj8.roa (raw, json)
Hash identifier: nu5/GLbVUR3XCx38teE1KgYIK7z4r/T9zMV4tmz1880=
Subject key identifier: C9:B6:3F:BB:75:1C:7E:34:F3:44:5E:CB:83:AF:6B:80:58:41:12:3F
Certificate issuer: /CN=2455d7fee4a499ecaf11d2d3da8e389de323412f
Certificate serial: 0195C91FF6049E9545905E237696849E9F6D
Authority key identifier: 24:55:D7:FE:E4:A4:99:EC:AF:11:D2:D3:DA:8E:38:9D:E3:23:41:2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JFXX_uSkmeyvEdLT2o44neMjQS8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/ybY_u3UcfjTzRF7Lg69rgFhBEj8.roa
Signing time: Mon 24 Mar 2025 17:07:49 +0000
ROA not before: Mon 24 Mar 2025 17:07:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9009
IP address blocks: 45.94.52.0/24 maxlen: 24
212.30.44.0/22 maxlen: 22
212.30.48.0/22 maxlen: 22
212.30.56.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:c9:1f:f6:04:9e:95:45:90:5e:23:76:96:84:9e:9f:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2455d7fee4a499ecaf11d2d3da8e389de323412f
Validity
Not Before: Mar 24 17:07:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c9b63fbb751c7e34f3445ecb83af6b805841123f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:6f:3e:56:45:fa:ca:54:c3:37:c8:62:d6:c7:
12:44:f4:30:07:d6:11:1c:0c:24:20:9a:74:a1:9b:
8a:e9:e7:8f:75:da:20:bc:0d:32:6b:04:b0:32:32:
00:f2:4a:d6:ba:df:1b:48:62:93:4c:1c:db:e2:1e:
96:01:fa:d1:f8:a2:cc:10:c7:be:07:0b:5c:c6:0a:
79:16:ce:e7:34:b5:eb:a3:7a:49:8e:87:59:3c:c2:
61:49:36:be:29:7d:1e:16:0e:6a:50:6f:e9:ab:58:
6e:70:3d:7c:5e:21:54:18:b0:19:40:bf:ee:1d:1e:
ce:2f:20:9b:ea:4b:4c:fb:b6:fb:b7:43:2c:5e:18:
b5:d5:0e:e5:68:e5:8c:95:2c:8f:73:fe:ac:08:bd:
00:84:d4:c0:96:5a:42:b9:46:4e:a4:2e:d0:04:2a:
0c:9c:ee:ed:21:5d:f1:a9:ac:ad:6a:b8:f9:10:32:
70:70:6d:81:1c:cd:8e:87:e5:3e:53:91:f8:16:fc:
ce:df:cc:50:cd:79:c7:01:6f:e5:2f:e7:d2:ca:d0:
6b:a8:61:55:e2:b0:3e:59:9a:dc:bf:51:46:2e:de:
ff:be:9e:24:50:2a:93:80:9f:19:41:db:90:03:45:
f9:c7:82:a9:96:7c:59:62:3d:c4:1a:b2:1d:9e:6e:
00:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:B6:3F:BB:75:1C:7E:34:F3:44:5E:CB:83:AF:6B:80:58:41:12:3F
X509v3 Authority Key Identifier:
keyid:24:55:D7:FE:E4:A4:99:EC:AF:11:D2:D3:DA:8E:38:9D:E3:23:41:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JFXX_uSkmeyvEdLT2o44neMjQS8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/ybY_u3UcfjTzRF7Lg69rgFhBEj8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/JFXX_uSkmeyvEdLT2o44neMjQS8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.94.52.0/24
212.30.44.0-212.30.51.255
212.30.56.0/22
Signature Algorithm: sha256WithRSAEncryption
92:86:bf:81:20:0c:43:ea:9e:df:b9:26:a8:8e:97:d1:db:7c:
16:24:18:64:79:40:c3:14:91:1b:b3:d5:6c:26:64:27:b2:eb:
b0:7c:ab:03:5f:a5:1a:66:0a:48:e8:75:51:94:5b:41:16:a2:
57:30:24:3b:c8:fa:83:57:83:6d:ef:3a:69:31:ce:99:e7:29:
9b:bb:4a:25:28:77:77:7a:c0:b0:8d:23:27:86:0c:ed:88:c1:
0a:80:55:ff:e0:cd:da:d3:e9:80:9c:9b:36:d9:d8:86:d9:69:
79:b5:8f:c9:8a:e8:ee:93:e0:d1:42:c0:67:e7:7c:61:27:b8:
37:4f:61:01:5d:a3:5e:f1:15:23:4c:19:92:29:ad:67:39:c8:
56:35:f8:53:b7:d8:73:bb:7f:c7:b2:a0:06:84:5c:ba:18:0d:
81:1c:2c:00:0b:51:c7:e7:f3:89:1e:95:18:86:26:82:d5:33:
ea:fb:32:2d:80:d3:c9:c2:0f:4d:02:a2:0a:74:07:7d:84:ca:
b0:b4:72:c0:cd:07:a0:10:2f:21:b1:a6:4e:35:5a:74:99:19:
21:5d:03:e5:64:2a:f5:a8:b0:40:63:c8:b9:86:98:b4:24:60:
09:2f:60:c2:fb:22:52:5e:92:bc:fb:d7:83:0e:94:6e:5f:a2:
27:2f:97:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 07:57:27 2025 by rpki-client