Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/yz8F_cLEIxhy320o4i3Qy9VUAwI.roa
File: yz8F_cLEIxhy320o4i3Qy9VUAwI.roa (raw, json)
Hash identifier: JbyLIf0rxHmCrsfEOjWfr+xNv1kHC2Q8PIF29MI6jlI=
Subject key identifier: CB:3F:05:FD:C2:C4:23:18:72:DF:6D:28:E2:2D:D0:CB:D5:54:03:02
Certificate issuer: /CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Certificate serial: 019427487CCA0A98A7834048B269AFC4E6B1
Authority key identifier: 1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/yz8F_cLEIxhy320o4i3Qy9VUAwI.roa
Signing time: Thu 02 Jan 2025 13:50:49 +0000
ROA not before: Thu 02 Jan 2025 13:50:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 20473
IP address blocks: 45.131.110.0/24 maxlen: 24
45.147.5.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:7c:ca:0a:98:a7:83:40:48:b2:69:af:c4:e6:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Validity
Not Before: Jan 2 13:50:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cb3f05fdc2c4231872df6d28e22dd0cbd5540302
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:21:61:e9:de:76:8f:c1:10:f4:dc:95:79:b4:
16:2f:3f:ef:20:ef:4e:92:c7:e0:04:a0:ab:c1:86:
47:fb:9a:82:59:d7:fc:dd:4b:d1:f9:f9:5e:4e:db:
f1:bc:ec:3f:3c:9c:c8:f0:f8:9d:87:47:05:d0:9c:
e2:3c:cc:99:6a:7e:5f:5d:15:da:66:cd:43:dc:7b:
3b:80:ed:62:aa:dc:0a:6e:89:b4:6e:db:77:a0:c6:
a0:3a:81:fa:f2:d5:e8:1e:85:3d:0a:d9:c8:a2:0c:
17:06:a0:9e:c8:f5:6c:86:19:73:38:9c:18:b2:cc:
32:39:73:b9:23:d3:ef:60:c1:26:de:b4:65:8a:df:
9f:5b:b3:b9:1e:4c:f9:01:20:31:4f:d3:b5:b8:3f:
74:4f:5b:12:08:78:bf:27:fb:40:b5:7e:e9:89:e6:
ad:99:bc:8f:66:0a:59:d9:8d:6c:6f:bc:66:c6:d0:
42:a3:68:d4:70:2f:08:55:8f:5c:db:e9:20:58:2e:
3d:c7:a4:34:e0:87:04:b6:aa:04:bc:53:3a:95:a6:
08:5c:c0:4c:f5:b5:5d:0d:b8:31:f0:5b:e4:2e:5a:
f6:bd:13:01:88:5d:15:8a:b4:52:3f:ec:0d:36:22:
82:0f:41:48:a1:c7:88:0b:8f:4f:fd:8d:37:06:c9:
be:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:3F:05:FD:C2:C4:23:18:72:DF:6D:28:E2:2D:D0:CB:D5:54:03:02
X509v3 Authority Key Identifier:
keyid:1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/yz8F_cLEIxhy320o4i3Qy9VUAwI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.131.110.0/24
45.147.5.0/24
Signature Algorithm: sha256WithRSAEncryption
77:49:71:bd:5a:cf:6e:16:5a:28:87:99:5b:dd:ba:f4:e2:ab:
cf:0d:a1:2f:85:65:02:40:09:34:5c:c6:13:4a:3b:bd:eb:8d:
b8:5c:0b:60:61:db:8d:2f:e1:b6:8f:50:f7:5e:50:a6:6f:07:
64:af:86:c7:da:e3:44:d9:4a:9c:9c:37:42:f5:b0:e0:3e:c6:
ae:8c:82:fe:72:b1:bf:e0:82:99:f7:9c:dc:79:b2:05:89:ca:
86:78:c5:b4:5b:3b:92:a5:2b:14:80:5c:b1:1f:87:cf:77:77:
16:91:2d:74:45:d1:b4:b8:ee:d4:3e:98:02:4b:a6:38:e3:6a:
25:8e:e7:68:46:be:84:e0:1d:35:84:4e:64:42:0f:1a:ae:33:
9c:76:bf:e9:fd:90:d2:cf:de:11:93:0b:74:fc:e8:c1:a3:4b:
35:aa:a1:49:9c:a0:e4:50:19:45:ac:d9:4f:17:f2:d0:90:e7:
54:69:e3:13:43:39:b6:c4:c4:cf:08:2c:27:2d:64:40:43:68:
c0:c7:e8:aa:bf:c5:55:90:7a:b4:6c:b5:4d:4c:bc:43:90:cd:
8c:29:4d:fa:67:6f:78:ca:72:75:5f:53:13:f9:86:0b:63:fb:
95:34:a9:10:a0:98:44:a2:63:44:ba:15:ac:99:7c:ba:1b:d6:
6c:6a:50:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 00:31:36 2025 by rpki-client