Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/345608-0ff2-495a-8a0d-e100cf25ffac/1/YTsCwiPDN82_sjZMgY0BndfsfK0.roa
File: YTsCwiPDN82_sjZMgY0BndfsfK0.roa (raw, json)
Hash identifier: w1qRsICUX22kWUMryumIr8DSW+HTb5FJ90XT42eW34A=
Subject key identifier: 61:3B:02:C2:23:C3:37:CD:BF:B2:36:4C:81:8D:01:9D:D7:EC:7C:AD
Certificate issuer: /CN=ed613a33ba72e21789a14931d116242e01e0f536
Certificate serial: 018570305A12CCB95B7FE575D3827AE14411
Authority key identifier: ED:61:3A:33:BA:72:E2:17:89:A1:49:31:D1:16:24:2E:01:E0:F5:36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7WE6M7py4heJoUkx0RYkLgHg9TY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/345608-0ff2-495a-8a0d-e100cf25ffac/1/YTsCwiPDN82_sjZMgY0BndfsfK0.roa
Signing time: Mon 02 Jan 2023 01:54:54 +0000
ROA not before: Mon 02 Jan 2023 01:54:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200845
IP address blocks: 176.121.64.0/24 maxlen: 24
176.121.64.0/21 maxlen: 21
176.121.71.0/24 maxlen: 24
176.121.70.0/24 maxlen: 24
176.121.69.0/24 maxlen: 24
176.121.68.0/24 maxlen: 24
176.121.67.0/24 maxlen: 24
176.121.66.0/24 maxlen: 24
176.121.65.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:30:5a:12:cc:b9:5b:7f:e5:75:d3:82:7a:e1:44:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed613a33ba72e21789a14931d116242e01e0f536
Validity
Not Before: Jan 2 01:54:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=613b02c223c337cdbfb2364c818d019dd7ec7cad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:a4:3c:00:16:ad:cd:9e:77:62:ea:60:fc:08:
84:e8:9e:5c:b4:ba:1a:66:a3:22:ac:0a:20:99:39:
e4:ac:52:b1:70:11:4a:f1:80:9b:0d:e4:93:ff:83:
f6:a1:cd:82:69:e7:c4:39:4b:96:62:28:31:12:dd:
50:83:ae:fa:76:b5:e2:33:c4:f0:cf:61:69:ed:ae:
17:53:7b:b2:73:ba:9c:d5:0a:dc:b0:7c:6e:54:ea:
8a:44:b5:3e:87:23:55:a8:a4:19:d2:26:6e:9d:e4:
f0:a5:42:9e:00:91:fb:e0:27:b0:aa:8f:35:25:2f:
84:2e:16:36:c3:94:3c:0b:8b:36:8e:dc:62:7e:b7:
a1:85:19:51:fd:ff:50:f1:7c:c3:3d:1f:ea:af:f0:
2c:9c:e9:eb:23:68:9a:31:40:0c:0b:67:4b:eb:4d:
03:7f:8b:45:d7:c3:27:5a:99:f4:0f:0c:fc:f5:b2:
00:c2:45:bc:4b:74:00:71:bb:bb:07:b3:69:64:df:
e0:ec:c0:d5:77:48:9e:be:a4:58:0f:0f:bf:b8:6b:
7e:10:d4:1d:38:85:30:f3:b7:e3:82:61:95:07:dc:
27:80:ea:46:e0:d3:91:5c:3f:b0:6e:38:39:df:7f:
b6:b7:28:df:fa:50:e4:50:e1:6f:36:06:06:de:3c:
73:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:3B:02:C2:23:C3:37:CD:BF:B2:36:4C:81:8D:01:9D:D7:EC:7C:AD
X509v3 Authority Key Identifier:
keyid:ED:61:3A:33:BA:72:E2:17:89:A1:49:31:D1:16:24:2E:01:E0:F5:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7WE6M7py4heJoUkx0RYkLgHg9TY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/345608-0ff2-495a-8a0d-e100cf25ffac/1/YTsCwiPDN82_sjZMgY0BndfsfK0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/345608-0ff2-495a-8a0d-e100cf25ffac/1/7WE6M7py4heJoUkx0RYkLgHg9TY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.121.64.0/21
Signature Algorithm: sha256WithRSAEncryption
bf:7a:e0:2b:40:17:96:7f:33:82:df:0a:92:7a:12:4d:cb:ac:
1b:6a:13:73:fc:bb:ee:af:13:e9:3e:bf:99:99:d1:23:e6:b2:
fe:e6:a7:3e:5e:5d:79:d0:89:52:93:8f:d0:79:d5:cc:cd:ee:
db:72:0d:53:75:44:f9:0f:f7:8d:1e:e3:63:0b:19:95:35:10:
c6:5a:b4:26:0c:a4:ee:01:b2:b5:3b:53:59:fb:7a:0c:ef:0a:
9e:26:95:cb:c7:75:b4:de:08:1e:36:49:8e:ea:77:b1:fc:f0:
85:35:5e:f4:76:52:be:a1:2c:5a:be:04:2f:c7:ad:d5:4e:2d:
78:90:4c:74:ed:9a:6d:42:d9:90:fb:0f:6e:5f:44:58:1f:6a:
25:9a:41:de:4d:a1:f7:3f:90:97:f9:06:c1:71:73:04:f1:cf:
79:28:d9:ce:a7:aa:3c:03:6e:c9:58:67:b4:ba:20:7d:50:25:
9c:1b:a5:1f:9d:d7:26:ec:91:73:d3:25:37:30:b8:c2:90:38:
30:f8:f1:c3:7c:fb:59:b7:11:5b:05:4c:83:28:44:c5:87:ce:
76:0a:1d:0d:00:e8:b5:d4:14:f0:01:c2:fe:1f:12:b7:10:10:
7c:9b:7c:a6:90:90:85:3b:9c:45:00:f2:6d:8c:90:17:49:e8:
59:da:11:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:43:29 2025 by rpki-client