Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/01f853-d445-4ace-a8d8-22701b4bb407/1/ycB49xsnsyW2NazexAj94eOOpiU.roa
File: ycB49xsnsyW2NazexAj94eOOpiU.roa (raw, json)
Hash identifier: 0SxWETuqO1X54Y+owdY6Hk8ZuhYAIFwbulLxl5y3zpU=
Subject key identifier: C9:C0:78:F7:1B:27:B3:25:B6:35:AC:DE:C4:08:FD:E1:E3:8E:A6:25
Certificate issuer: /CN=21814cf2ca3e1799349ccd4c7e6a76d63f834a3d
Certificate serial: 01877C4E565940D47CC97017FF809600731A
Authority key identifier: 21:81:4C:F2:CA:3E:17:99:34:9C:CD:4C:7E:6A:76:D6:3F:83:4A:3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYFM8so-F5k0nM1Mfmp21j-DSj0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/01f853-d445-4ace-a8d8-22701b4bb407/1/ycB49xsnsyW2NazexAj94eOOpiU.roa
Signing time: Thu 13 Apr 2023 20:28:41 +0000
ROA not before: Thu 13 Apr 2023 20:28:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 213.225.236.0/24 maxlen: 24
45.146.104.0/24 maxlen: 24
45.132.98.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:7c:4e:56:59:40:d4:7c:c9:70:17:ff:80:96:00:73:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21814cf2ca3e1799349ccd4c7e6a76d63f834a3d
Validity
Not Before: Apr 13 20:28:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c9c078f71b27b325b635acdec408fde1e38ea625
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:e4:05:7b:ca:a5:b8:5e:d0:ed:3a:83:d5:b8:
ec:d9:cc:a0:88:30:27:c7:57:ff:04:e7:e4:57:0f:
ce:22:b9:73:c8:15:5d:52:b2:08:ec:1d:b6:62:d1:
46:35:bc:84:d2:1d:e3:57:7e:91:45:02:94:0c:57:
f1:4f:9f:bd:c9:df:91:85:6a:87:00:d6:74:d7:60:
73:f8:66:c9:3f:6f:ea:d2:44:91:81:33:bc:fa:8c:
a7:bb:ee:21:41:2e:0f:85:c2:89:87:30:ea:76:e8:
b4:67:04:ef:c8:bc:80:0e:f8:c4:72:56:4e:f1:80:
b9:b2:09:de:b8:60:65:3d:8c:85:f5:27:a8:6e:63:
bb:a4:7b:aa:b1:93:a8:2f:fb:d1:d2:8a:f5:7c:5b:
61:a6:f4:08:5e:ed:79:9b:b4:33:fe:fc:11:47:d3:
ee:e4:2d:49:7f:21:bd:7a:7d:a8:ff:1f:5e:90:8b:
f7:ce:d2:a6:0b:27:98:cc:ed:07:37:be:37:0a:47:
ee:34:88:7b:01:13:1b:bd:24:9c:e3:82:b5:7c:71:
a8:2e:9b:c4:a9:11:8f:e2:67:ba:b6:73:4e:2b:87:
6c:fa:5a:0c:7c:62:2e:4c:f7:9f:e2:ab:be:35:3e:
c6:2b:50:a7:2f:6b:4d:fb:42:66:34:ab:a4:91:0a:
31:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:C0:78:F7:1B:27:B3:25:B6:35:AC:DE:C4:08:FD:E1:E3:8E:A6:25
X509v3 Authority Key Identifier:
keyid:21:81:4C:F2:CA:3E:17:99:34:9C:CD:4C:7E:6A:76:D6:3F:83:4A:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYFM8so-F5k0nM1Mfmp21j-DSj0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/01f853-d445-4ace-a8d8-22701b4bb407/1/ycB49xsnsyW2NazexAj94eOOpiU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/01f853-d445-4ace-a8d8-22701b4bb407/1/IYFM8so-F5k0nM1Mfmp21j-DSj0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.132.98.0/23
45.146.104.0/24
213.225.236.0/24
Signature Algorithm: sha256WithRSAEncryption
20:0b:04:77:a2:11:10:b6:58:a0:0a:8b:52:b2:66:0a:95:f2:
b6:f7:7a:ae:7d:81:7c:1b:af:54:83:50:82:a4:d4:d9:95:80:
41:14:29:5d:42:2c:62:fb:7c:f7:c3:17:91:c3:91:7b:d4:86:
63:4d:30:18:77:a5:c9:c8:c2:6d:a8:27:7c:1e:3f:b9:b5:95:
53:bd:6a:37:d7:97:be:8a:0b:0c:d0:a6:49:07:d3:7f:23:2e:
63:76:03:d5:51:e7:75:39:9f:65:1e:15:c1:bb:05:0c:fc:60:
fa:12:9f:df:81:f4:32:a0:64:20:d6:5c:7f:36:a1:7c:dc:4a:
2c:04:9f:b7:d0:a2:e7:0e:df:fd:96:6e:b7:1b:86:8e:46:d9:
f9:c6:a0:14:b5:0c:1b:fb:bd:e8:c6:e7:f7:59:86:f2:f1:46:
f8:7a:7b:a1:dd:58:30:09:4e:67:9b:95:47:cc:f9:3a:14:ab:
6d:f6:14:c8:4f:52:d8:3d:d6:f4:ef:40:08:4a:5c:d9:99:5c:
1b:db:d2:33:ba:74:94:9b:9c:37:c4:a7:ff:13:12:a8:c0:19:
24:77:67:f6:e8:b7:5c:7c:53:02:b0:54:6c:e0:ed:16:3e:d9:
82:30:97:eb:9b:f7:f3:20:b9:12:36:fb:4f:ab:99:e5:8f:66:
36:12:05:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:16:18 2025 by rpki-client