Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/f5f918-494d-4f95-ac71-8172a18dda10/1/ylRk5kEpqXJTr7CZjo83RR2zO4s.roa
File: ylRk5kEpqXJTr7CZjo83RR2zO4s.roa (raw, json)
Hash identifier: t97wySJNQFUTXiOSgzAMwr3btygtANKW48z3JbQ0uSY=
Subject key identifier: CA:54:64:E6:41:29:A9:72:53:AF:B0:99:8E:8F:37:45:1D:B3:3B:8B
Certificate issuer: /CN=a37c433d6176d6abc2db03e7410632cd27229b93
Certificate serial: 9FA111
Authority key identifier: A3:7C:43:3D:61:76:D6:AB:C2:DB:03:E7:41:06:32:CD:27:22:9B:93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o3xDPWF21qvC2wPnQQYyzScim5M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/f5f918-494d-4f95-ac71-8172a18dda10/1/ylRk5kEpqXJTr7CZjo83RR2zO4s.roa
Signing time: Sat 01 Jan 2022 02:57:50 +0000
ROA not before: Sat 01 Jan 2022 02:57:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 15511
IP address blocks: 45.159.184.0/24 maxlen: 24
45.159.186.0/24 maxlen: 24
45.159.185.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10461457 (0x9fa111)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a37c433d6176d6abc2db03e7410632cd27229b93
Validity
Not Before: Jan 1 02:57:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ca5464e64129a97253afb0998e8f37451db33b8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:3c:36:60:93:66:ee:9a:a9:22:1b:1e:61:79:
b2:ce:c8:e8:05:72:af:d2:74:1f:35:43:2e:d0:49:
2d:22:c3:78:0b:ce:1f:ee:35:8b:34:7e:64:9b:cc:
1b:55:87:8c:dd:d1:6b:37:ee:f3:e1:b1:56:a5:6f:
c6:0e:8b:6b:ba:82:01:1d:39:d3:a8:05:95:db:2c:
17:29:76:ba:12:0b:c4:5d:da:a8:dc:67:31:78:6c:
48:e3:cc:b7:f0:c4:36:21:23:c0:34:84:ad:3d:2c:
f5:a2:2a:b3:d7:42:9d:fd:7c:1c:90:e0:be:c7:4a:
9a:f5:41:56:b7:ac:0b:2b:87:da:35:c8:84:8f:01:
56:e0:50:ce:d2:b8:df:c9:96:a7:dc:4b:fb:e3:8f:
86:8b:3d:f9:f6:42:6e:99:df:1c:a8:b2:b8:b9:6c:
df:83:78:0b:65:76:05:20:36:f7:fb:e6:35:49:61:
34:d8:31:99:78:6c:85:40:e0:79:6f:70:db:13:e0:
e7:57:d5:c4:e1:82:91:e8:6b:1a:5f:fd:c0:10:2b:
cc:dd:19:e1:49:52:8b:a9:10:a0:40:1c:20:2d:3d:
c9:ab:1d:cc:72:0e:cd:80:29:1b:5b:56:a4:6c:3c:
47:5f:ec:cb:93:6a:c7:28:90:37:f2:89:d9:29:ce:
45:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:54:64:E6:41:29:A9:72:53:AF:B0:99:8E:8F:37:45:1D:B3:3B:8B
X509v3 Authority Key Identifier:
keyid:A3:7C:43:3D:61:76:D6:AB:C2:DB:03:E7:41:06:32:CD:27:22:9B:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o3xDPWF21qvC2wPnQQYyzScim5M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/f5f918-494d-4f95-ac71-8172a18dda10/1/ylRk5kEpqXJTr7CZjo83RR2zO4s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/f5f918-494d-4f95-ac71-8172a18dda10/1/o3xDPWF21qvC2wPnQQYyzScim5M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.159.184.0-45.159.186.255
Signature Algorithm: sha256WithRSAEncryption
30:7f:8c:a2:f6:aa:8e:38:de:b2:17:bd:d8:ca:6b:fc:5a:e9:
42:b5:0e:1b:38:57:c7:e3:78:a2:9a:08:ac:3e:a1:07:f3:97:
3b:75:06:18:c5:33:57:2a:a0:86:b4:85:47:11:69:da:f9:20:
fa:b8:45:f2:46:ba:0b:65:40:9f:fd:a6:d6:e0:62:c8:65:3e:
d3:f5:46:08:82:79:04:f6:98:37:c8:84:26:3f:9f:03:e2:24:
4f:b0:de:ba:a1:48:b9:32:07:29:11:9d:95:19:25:b5:73:3e:
31:fd:5b:20:1b:2e:2b:57:cf:f0:77:97:86:ea:83:54:78:45:
13:b8:4a:29:96:ff:f3:93:5a:70:f0:b2:25:ca:3c:95:1e:c3:
99:65:bc:c3:db:85:11:ec:df:20:49:69:41:3b:3a:88:fa:1b:
7d:59:ab:c0:04:58:b2:ec:08:f6:f9:14:c7:73:30:d9:50:ad:
6b:a1:fd:1a:53:f9:cc:7a:26:10:25:f1:30:03:fa:ca:34:92:
74:95:11:ba:d0:92:79:8a:ac:c4:99:f2:57:6f:a3:24:c8:b7:
62:12:c1:12:df:26:3d:17:6b:8e:76:76:22:f6:1b:ce:03:bb:
2d:c3:ed:a4:9a:c6:c8:41:69:9b:e6:ad:8b:06:02:1a:be:08:
01:dc:2b:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:56:16 2025 by rpki-client