Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/7f765d-d07e-4a66-92a5-7a94c7c36217/1/Yn2x7t_9VSdIySXKRiBrfoAkd-g.roa
File: Yn2x7t_9VSdIySXKRiBrfoAkd-g.roa (raw, json)
Hash identifier: 5vsDapFH/y4LZ2Hh7KnRvs2tLQL4atDz8jjEX28Quz4=
Subject key identifier: 62:7D:B1:EE:DF:FD:55:27:48:C9:25:CA:46:20:6B:7E:80:24:77:E8
Certificate issuer: /CN=b3e60d38bb37794e72e87e6870d071f2a7dd3e57
Certificate serial: 0194258F48E47D9EF26C2A22D5755DCACFA2
Authority key identifier: B3:E6:0D:38:BB:37:79:4E:72:E8:7E:68:70:D0:71:F2:A7:DD:3E:57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s-YNOLs3eU5y6H5ocNBx8qfdPlc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/7f765d-d07e-4a66-92a5-7a94c7c36217/1/Yn2x7t_9VSdIySXKRiBrfoAkd-g.roa
Signing time: Thu 02 Jan 2025 05:48:54 +0000
ROA not before: Thu 02 Jan 2025 05:48:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 3257
IP address blocks: 158.146.137.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:48:e4:7d:9e:f2:6c:2a:22:d5:75:5d:ca:cf:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3e60d38bb37794e72e87e6870d071f2a7dd3e57
Validity
Not Before: Jan 2 05:48:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=627db1eedffd552748c925ca46206b7e802477e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:72:7a:a0:01:06:fe:8d:24:00:44:aa:29:13:
b9:d7:6d:75:8d:5b:6b:65:d3:c9:99:22:20:44:37:
ca:26:8e:e5:5f:cb:7d:33:6a:5d:46:56:54:8f:27:
ee:2c:06:d1:8b:41:92:86:61:27:d3:ce:ab:2e:df:
1d:5e:b2:e3:1f:f1:75:28:c3:60:3f:de:65:61:74:
dd:fd:de:30:cc:4e:35:12:01:da:1c:cd:aa:9b:2b:
11:d2:29:6c:fb:61:c7:46:59:49:6c:cd:4f:ee:a1:
f5:38:c1:27:59:5c:61:1a:d2:fe:84:39:0e:35:93:
48:e4:11:05:05:14:8c:af:9f:13:b8:5d:43:1c:b5:
a2:ba:93:28:11:53:49:44:20:e9:4e:ca:0a:c6:bf:
86:78:6c:a3:17:06:04:83:01:ac:de:16:9a:91:bb:
5e:ed:ca:bc:f3:9b:c0:82:bd:4b:51:ec:10:f3:66:
fe:7a:02:0b:9b:b5:96:c3:9f:7e:aa:6a:0a:42:64:
e6:e2:95:88:6b:2d:0e:69:c4:d3:cc:68:1d:ef:04:
8d:7d:59:a0:51:61:9f:54:3a:3a:e9:03:6c:6d:2d:
d4:17:03:43:bb:d9:71:fb:7f:e0:18:01:36:ba:2e:
e3:b8:1b:c8:5a:b4:1b:6c:58:29:7d:ff:f2:06:e1:
78:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:7D:B1:EE:DF:FD:55:27:48:C9:25:CA:46:20:6B:7E:80:24:77:E8
X509v3 Authority Key Identifier:
keyid:B3:E6:0D:38:BB:37:79:4E:72:E8:7E:68:70:D0:71:F2:A7:DD:3E:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s-YNOLs3eU5y6H5ocNBx8qfdPlc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/7f765d-d07e-4a66-92a5-7a94c7c36217/1/Yn2x7t_9VSdIySXKRiBrfoAkd-g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/7f765d-d07e-4a66-92a5-7a94c7c36217/1/s-YNOLs3eU5y6H5ocNBx8qfdPlc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
158.146.137.0/24
Signature Algorithm: sha256WithRSAEncryption
65:a9:ba:66:2c:d0:f8:75:fb:a4:51:65:c9:60:02:e8:21:2e:
1b:8e:7a:2b:fa:84:7e:23:cd:2a:22:51:4b:39:3a:02:a7:b6:
b9:d2:d3:ca:52:1d:68:88:97:f6:74:8b:f1:14:2e:a2:0f:59:
67:52:2d:70:f3:83:ac:06:a7:b2:e4:fc:19:be:53:51:ad:9d:
74:86:74:94:24:52:9b:cb:5e:77:32:78:2a:9d:28:eb:07:65:
84:6c:31:e7:26:e6:79:85:32:ba:05:5d:b3:ad:41:e0:70:bc:
42:01:f0:5f:fc:a5:52:13:70:ad:5c:d9:65:84:7a:26:9f:12:
eb:6c:73:ef:fa:20:df:33:8c:19:84:24:01:97:90:3c:c4:8d:
f1:4f:9a:fb:f3:e6:b7:d6:89:2a:87:eb:7e:1c:24:38:72:7e:
88:59:49:8b:83:cd:d3:1e:66:f2:52:9d:70:87:6b:09:5b:43:
d9:5f:a2:ee:3a:1e:9a:bf:2b:15:b1:c0:b3:c6:f7:2d:bc:47:
a3:1b:c1:70:37:f9:f3:4f:2c:ab:bf:59:c4:13:4f:b7:32:5e:
6f:cc:fe:0a:ba:8a:dd:ba:88:8e:d8:56:a9:d7:b0:ce:b3:42:
57:9f:43:5f:2d:c6:21:ba:1b:ec:8e:f2:82:61:7e:2e:e6:ca:
d0:16:21:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:52:33 2025 by rpki-client