Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/YcxBF3KGoUlE0DDmelmxpZsOj9Q.roa
File: YcxBF3KGoUlE0DDmelmxpZsOj9Q.roa (raw, json)
Hash identifier: OujtxknqyAvQtUTJ4KzSvB/2+Y+z5s6z6GPqxGntXD4=
Subject key identifier: 61:CC:41:17:72:86:A1:49:44:D0:30:E6:7A:59:B1:A5:9B:0E:8F:D4
Certificate issuer: /CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Certificate serial: 019422FC142B64C670A3436C9359BB9EF9AA
Authority key identifier: 8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/YcxBF3KGoUlE0DDmelmxpZsOj9Q.roa
Signing time: Wed 01 Jan 2025 17:48:53 +0000
ROA not before: Wed 01 Jan 2025 17:48:53 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 201813
IP address blocks: 45.67.196.0/22 maxlen: 22
185.147.48.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fc:14:2b:64:c6:70:a3:43:6c:93:59:bb:9e:f9:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Validity
Not Before: Jan 1 17:48:53 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=61cc41177286a14944d030e67a59b1a59b0e8fd4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:77:bb:10:d7:bb:70:06:64:24:8c:41:86:22:
22:0d:2d:04:f6:21:37:8f:27:4b:19:cd:18:e6:df:
d7:fc:e6:c3:95:41:a1:40:de:ed:0a:9d:06:98:5a:
b1:cc:f0:36:72:32:fd:f9:0e:da:9d:81:3d:a8:5a:
f2:f4:b4:ec:23:62:8a:d5:73:f1:3f:c9:cc:aa:50:
10:fe:bd:a1:81:f9:de:9b:d5:c8:64:ca:9e:40:2e:
88:75:73:59:ab:37:92:c2:30:93:27:0a:17:0e:99:
fa:6a:69:54:d3:d1:c0:20:fa:cd:d3:16:40:ba:44:
20:26:c9:7c:9f:e1:1c:b4:ff:d6:cf:37:79:60:17:
42:b0:83:a1:4d:a7:8f:d7:ae:6d:f0:ff:43:cb:6b:
90:a9:6f:ae:b8:02:25:1d:2c:57:5e:2b:72:4b:59:
b0:f0:bc:8a:af:c7:ad:82:dd:de:f6:a1:2d:b5:72:
9b:d8:d9:24:a2:34:51:ac:90:5b:71:db:7d:01:3b:
0e:61:e2:06:74:fc:90:c6:48:80:00:31:63:31:dc:
4f:7a:be:90:06:dc:56:50:d2:0c:2e:53:78:3e:7f:
57:58:fe:91:c8:55:45:ba:45:a6:f9:f9:87:56:c7:
46:88:f1:03:f2:b3:35:85:a1:31:d6:e9:73:25:e7:
dd:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:CC:41:17:72:86:A1:49:44:D0:30:E6:7A:59:B1:A5:9B:0E:8F:D4
X509v3 Authority Key Identifier:
keyid:8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/YcxBF3KGoUlE0DDmelmxpZsOj9Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.67.196.0/22
185.147.48.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:e7:29:d5:dd:71:f4:8c:20:68:a7:d2:07:88:bd:6f:38:b0:
45:1f:21:7f:e6:32:3b:15:d3:5f:70:36:cd:0a:0c:4a:d2:cb:
7d:87:e8:64:38:a8:81:d3:ac:68:7d:4a:23:ba:59:15:1f:95:
81:dd:f7:9f:75:a1:5b:57:cb:ed:c1:98:f5:52:84:c4:e0:8a:
4e:f8:ad:cc:4a:22:77:a2:53:89:fe:e0:1d:f4:f0:21:51:c5:
37:14:fc:56:7d:6e:50:50:d4:0c:18:b0:e6:13:aa:a9:ec:1c:
fa:a9:0f:fd:78:66:2f:cc:25:a2:f9:46:28:89:1b:91:d5:a4:
4d:c4:45:a6:d2:41:8c:98:9e:79:10:8d:c1:a3:b9:b8:19:5b:
7b:cf:d3:6d:f7:24:38:9f:37:a6:af:32:0e:4b:c0:e0:ff:b1:
19:e6:63:3d:45:9f:1c:1c:ec:82:17:13:06:94:b2:b9:a4:96:
b4:f6:bb:7b:c0:a0:c7:6e:8a:fb:80:5b:64:66:7c:46:ac:7a:
21:76:a0:f5:cc:1e:89:b4:2e:c0:74:26:b2:35:d2:be:04:5d:
b8:1d:13:ea:fe:8c:0d:52:b4:0a:76:7c:55:be:0f:02:54:ed:
7d:88:3a:03:96:57:72:5f:ac:6a:35:18:34:8a:0c:cd:f7:8d:
b5:d7:b1:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 12:45:43 2025 by rpki-client