Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/5c6c21-f8c8-4640-a12f-08c0b5e7a5ad/1/YvdWiNBDeawAyp4kpfnnjEd-LBc.roa
File: YvdWiNBDeawAyp4kpfnnjEd-LBc.roa (raw, json)
Hash identifier: rjf+FN3a2nzXw7XU0huLEr95kEm2ZVAmB48WsEZ8l20=
Subject key identifier: 62:F7:56:88:D0:43:79:AC:00:CA:9E:24:A5:F9:E7:8C:47:7E:2C:17
Certificate issuer: /CN=5b8afd86d17516ec67af610d2d3041d06c1cd480
Certificate serial: 018CC86F64AEA731FFD023879FBB9BB3FA3E
Authority key identifier: 5B:8A:FD:86:D1:75:16:EC:67:AF:61:0D:2D:30:41:D0:6C:1C:D4:80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W4r9htF1Fuxnr2ENLTBB0Gwc1IA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/5c6c21-f8c8-4640-a12f-08c0b5e7a5ad/1/YvdWiNBDeawAyp4kpfnnjEd-LBc.roa
Signing time: Tue 02 Jan 2024 04:29:52 +0000
ROA not before: Tue 02 Jan 2024 04:29:52 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 39855
IP address blocks: 45.91.150.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:6f:64:ae:a7:31:ff:d0:23:87:9f:bb:9b:b3:fa:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b8afd86d17516ec67af610d2d3041d06c1cd480
Validity
Not Before: Jan 2 04:29:52 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=62f75688d04379ac00ca9e24a5f9e78c477e2c17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:5d:ee:6c:7c:26:a2:40:f1:f3:a0:2b:ca:b3:
fe:c1:9b:12:e9:a5:47:c5:e5:b4:40:8e:8d:2c:5d:
66:9d:1b:77:4a:ed:e9:5c:40:28:b1:3b:e3:4f:ca:
2a:39:66:49:ac:32:bf:38:1a:e3:60:c8:fe:46:4b:
e6:34:a6:10:99:3d:63:44:34:af:f7:be:68:74:80:
2f:c8:de:d8:8c:c5:80:ad:b3:40:a3:13:09:bc:f5:
a5:5b:1e:1a:eb:86:d3:a3:73:33:6c:1f:72:43:63:
13:6f:99:b9:20:6e:50:f7:a1:7f:49:6a:d5:80:38:
f8:5e:0f:41:95:02:80:3d:84:7a:8f:c7:7c:24:32:
86:7d:d0:90:03:1a:86:6e:1f:9f:f3:27:33:2e:d2:
63:ae:67:1e:6f:ea:0b:8a:13:23:4a:eb:8c:56:d2:
70:d4:03:bf:ab:13:51:af:fb:f8:6b:c8:4d:25:38:
12:7f:a8:da:12:4c:80:12:67:18:74:72:26:95:28:
48:bb:b9:6e:27:3d:40:9f:66:d1:04:69:69:9e:ea:
51:ec:7c:66:6d:86:9d:93:bd:b7:86:d1:34:8c:27:
e8:5d:5c:08:43:30:3b:7e:33:1f:31:db:45:e6:f9:
70:c2:16:e3:95:85:fd:12:bf:31:da:6c:43:51:55:
f2:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:F7:56:88:D0:43:79:AC:00:CA:9E:24:A5:F9:E7:8C:47:7E:2C:17
X509v3 Authority Key Identifier:
keyid:5B:8A:FD:86:D1:75:16:EC:67:AF:61:0D:2D:30:41:D0:6C:1C:D4:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W4r9htF1Fuxnr2ENLTBB0Gwc1IA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/5c6c21-f8c8-4640-a12f-08c0b5e7a5ad/1/YvdWiNBDeawAyp4kpfnnjEd-LBc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/5c6c21-f8c8-4640-a12f-08c0b5e7a5ad/1/W4r9htF1Fuxnr2ENLTBB0Gwc1IA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.91.150.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:38:17:68:27:23:97:ef:18:92:b5:71:93:80:c0:c4:1c:24:
45:94:ad:d9:42:8f:45:a1:70:f0:a3:dd:8e:1c:24:88:6a:c2:
50:b6:3d:82:35:52:16:b6:de:4c:dd:bc:b0:75:20:c1:09:fd:
45:ef:1b:cc:50:91:3c:d6:4f:86:25:a6:5a:47:21:ed:2e:7f:
03:cb:ec:0f:d7:f9:78:97:fa:32:5d:d5:d8:0c:15:44:93:0e:
ef:e2:bb:b5:b8:a1:5d:5f:32:15:6b:b2:34:e5:f7:8f:8d:1a:
dc:bf:2f:e9:20:f3:d5:e6:8d:95:58:39:a8:1e:04:53:6f:11:
41:db:da:28:57:74:db:91:74:63:9d:c2:68:23:1e:5b:a6:d4:
97:0c:09:96:d3:93:92:85:a1:00:12:e2:6a:a7:84:32:2d:31:
0c:90:fc:8a:63:39:bb:e7:7d:f9:c3:41:2c:0f:f7:51:e9:20:
b2:19:0d:bd:09:a2:7a:50:82:fd:1d:a2:21:f9:38:4a:c5:96:
a0:b6:0d:3a:39:28:04:5d:d2:be:ed:28:97:6a:4b:53:41:3c:
4b:05:4e:f7:e5:ed:b0:2f:60:31:01:af:19:1c:88:60:e0:59:
4e:5d:e4:92:cb:67:db:8b:87:bf:b1:de:61:2d:81:4d:dd:96:
69:c6:92:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:57:16 2025 by rpki-client