Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/7656db-94a5-45be-9435-7061356bef1b/1/YCQuqCy9NuRyU0S6FabSa0c6NJs.roa
File: YCQuqCy9NuRyU0S6FabSa0c6NJs.roa (raw, json)
Hash identifier: z0MGBwlcQwzapOIPDSPyZ4kB4JdwESi59TmNtwz3tdw=
Subject key identifier: 60:24:2E:A8:2C:BD:36:E4:72:53:44:BA:15:A6:D2:6B:47:3A:34:9B
Certificate issuer: /CN=a1d71853324eb060fbafc988233860499c96c53a
Certificate serial: 019425213C26F678864265FEEEC251E54AD4
Authority key identifier: A1:D7:18:53:32:4E:B0:60:FB:AF:C9:88:23:38:60:49:9C:96:C5:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/odcYUzJOsGD7r8mIIzhgSZyWxTo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/7656db-94a5-45be-9435-7061356bef1b/1/YCQuqCy9NuRyU0S6FabSa0c6NJs.roa
Signing time: Thu 02 Jan 2025 03:48:42 +0000
ROA not before: Thu 02 Jan 2025 03:48:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 7018
IP address blocks: 45.148.135.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:3c:26:f6:78:86:42:65:fe:ee:c2:51:e5:4a:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1d71853324eb060fbafc988233860499c96c53a
Validity
Not Before: Jan 2 03:48:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=60242ea82cbd36e4725344ba15a6d26b473a349b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:89:8e:9e:b4:a2:10:b3:4b:fe:fd:4d:0d:af:
11:e6:08:6d:3a:01:a0:28:3c:27:93:91:be:ec:ac:
bd:2c:32:b4:4e:3c:c4:42:c4:a2:1d:9f:5f:db:e9:
fb:f6:24:ae:be:24:a4:93:ec:70:bb:2a:94:6e:a5:
10:54:3b:b5:52:6c:5a:de:bb:11:ef:6e:80:99:e2:
f1:ea:c4:8d:fb:7b:9d:df:72:65:8e:1c:05:bc:68:
a2:9f:3b:93:8d:1f:a6:a2:95:e5:e4:a1:7e:cd:82:
aa:da:a5:57:ac:f7:37:71:75:8e:ca:5f:ed:36:3c:
ed:bc:68:88:53:4e:65:01:21:a0:f3:16:6a:19:73:
5b:a3:5d:39:72:e2:28:cc:78:7d:0d:bb:58:24:e8:
64:11:9d:a0:f1:ac:7e:98:e8:43:fc:4b:76:ea:53:
e3:be:a9:69:2d:39:77:ef:f2:79:6d:77:91:e9:b8:
36:31:68:53:0e:db:9e:0f:58:1d:01:82:0d:81:4f:
8d:d1:ed:c4:4e:f9:f7:65:28:72:9a:31:c9:71:66:
21:3a:0f:dc:a4:78:31:73:82:d9:0f:c3:0a:00:d1:
73:a9:37:bc:1e:7f:16:d0:a9:12:c2:71:d5:c5:d2:
27:41:da:a5:2b:2d:d3:41:66:7f:84:79:22:d4:6d:
3e:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:24:2E:A8:2C:BD:36:E4:72:53:44:BA:15:A6:D2:6B:47:3A:34:9B
X509v3 Authority Key Identifier:
keyid:A1:D7:18:53:32:4E:B0:60:FB:AF:C9:88:23:38:60:49:9C:96:C5:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/odcYUzJOsGD7r8mIIzhgSZyWxTo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/7656db-94a5-45be-9435-7061356bef1b/1/YCQuqCy9NuRyU0S6FabSa0c6NJs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/7656db-94a5-45be-9435-7061356bef1b/1/odcYUzJOsGD7r8mIIzhgSZyWxTo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.148.135.0/24
Signature Algorithm: sha256WithRSAEncryption
90:f3:1f:12:2b:d3:1c:25:51:0f:59:e9:63:c2:87:7f:b0:f1:
7d:7c:ac:19:17:01:12:57:09:fe:43:80:08:c8:a7:3a:2b:97:
de:ab:fc:5b:a6:54:13:ec:35:49:a9:74:89:de:fc:1e:34:40:
83:a0:43:24:a4:26:ad:20:4c:9e:ce:2b:9f:7e:6d:ce:52:7f:
de:2e:8c:11:03:64:8a:bf:6c:8e:a5:ea:7e:59:67:fa:29:e6:
4d:e6:61:44:2a:f3:30:96:3d:66:3d:d3:c0:68:fd:d4:90:cc:
fd:9b:e1:8d:66:27:73:68:55:69:31:78:71:bb:d4:3e:86:c7:
48:37:27:83:39:c4:2d:2e:d5:73:13:20:10:1f:58:f5:aa:2f:
90:16:60:be:73:9e:4b:ba:39:26:f9:33:7c:7c:a8:e6:81:6a:
58:ff:65:fa:82:d9:45:41:fd:cf:95:2c:50:99:b7:21:5e:7d:
c6:39:5f:5b:13:07:01:36:7d:92:a0:af:8b:d5:67:3c:f7:5c:
a5:bd:07:29:72:f2:7d:f8:ef:6e:97:94:10:a8:27:f5:21:31:
71:79:a6:30:93:5a:da:c3:a0:56:9e:b6:4d:23:b8:07:92:dd:
02:ce:ba:11:aa:df:82:c0:f0:21:e1:5e:82:03:59:c6:5d:52:
9d:f4:25:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 21:51:40 2025 by rpki-client