Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/490ae5-32dd-4457-9407-0e00152dd9e1/1/ylnY6CiuS3KDVmNp8O_YOWwe8Pg.roa
File: ylnY6CiuS3KDVmNp8O_YOWwe8Pg.roa (raw, json)
Hash identifier: 2eDOXPdPk66339XVl41owwXvtgC1lEqXwr6JZ4e1W/0=
Subject key identifier: CA:59:D8:E8:28:AE:4B:72:83:56:63:69:F0:EF:D8:39:6C:1E:F0:F8
Certificate issuer: /CN=5f1cdada398240e67e4f826e8089d25b12490401
Certificate serial: 01857355FD7BA49E5846F8D79680A2949C8F
Authority key identifier: 5F:1C:DA:DA:39:82:40:E6:7E:4F:82:6E:80:89:D2:5B:12:49:04:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xxza2jmCQOZ-T4JugInSWxJJBAE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/490ae5-32dd-4457-9407-0e00152dd9e1/1/ylnY6CiuS3KDVmNp8O_YOWwe8Pg.roa
Signing time: Mon 02 Jan 2023 16:34:53 +0000
ROA not before: Mon 02 Jan 2023 16:34:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 58075
IP address blocks: 45.95.68.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:73:55:fd:7b:a4:9e:58:46:f8:d7:96:80:a2:94:9c:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f1cdada398240e67e4f826e8089d25b12490401
Validity
Not Before: Jan 2 16:34:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ca59d8e828ae4b7283566369f0efd8396c1ef0f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:34:be:31:9b:f8:68:19:66:0a:4e:15:48:32:
06:10:07:aa:43:ae:f9:99:4c:8e:bb:5e:8b:a7:a7:
d2:de:1b:f6:09:27:a5:6f:14:f9:5f:27:4f:55:c2:
74:5a:f0:a0:bd:00:2a:b9:48:28:0f:4b:26:4d:fa:
64:99:99:b3:64:01:29:c2:0b:f2:4f:07:8f:6e:71:
0f:1d:31:47:08:d8:44:64:31:37:19:56:e7:fb:24:
f6:6c:6e:a9:01:5c:08:5f:cc:37:02:35:82:9f:e8:
00:c4:50:2a:04:19:b0:a0:59:58:15:92:3b:db:43:
6e:59:29:52:f5:0f:00:8a:08:85:83:ff:fe:9f:fd:
e9:61:f9:f6:74:bb:00:a3:f8:93:41:95:fe:26:07:
4e:c1:0d:b3:41:77:be:24:5a:a2:6b:18:1a:a5:e3:
b0:c1:3f:be:98:8f:14:5c:84:36:ed:9c:1c:db:b2:
37:ec:9b:47:97:b1:28:07:df:73:18:a9:e3:91:37:
ac:b1:d7:68:9a:ab:a7:69:20:56:74:c5:ca:44:dd:
8c:52:4c:3c:9b:01:e9:08:7a:3e:09:73:f7:05:64:
c1:09:a7:29:c4:7a:08:e1:09:41:f9:72:72:9b:8a:
d0:3d:8b:17:69:fe:fd:1d:97:93:00:33:a0:96:59:
26:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:59:D8:E8:28:AE:4B:72:83:56:63:69:F0:EF:D8:39:6C:1E:F0:F8
X509v3 Authority Key Identifier:
keyid:5F:1C:DA:DA:39:82:40:E6:7E:4F:82:6E:80:89:D2:5B:12:49:04:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xxza2jmCQOZ-T4JugInSWxJJBAE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/490ae5-32dd-4457-9407-0e00152dd9e1/1/ylnY6CiuS3KDVmNp8O_YOWwe8Pg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/490ae5-32dd-4457-9407-0e00152dd9e1/1/Xxza2jmCQOZ-T4JugInSWxJJBAE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.95.68.0/22
Signature Algorithm: sha256WithRSAEncryption
80:e6:cb:85:ab:81:6b:af:89:9f:a8:40:ba:a7:c2:d7:8e:55:
02:79:ec:af:71:10:09:a7:77:fc:b1:ae:a2:f0:dd:c5:c1:80:
07:55:73:c9:af:33:2a:14:e5:12:be:a3:26:49:77:75:21:6c:
b6:18:d2:21:d0:78:02:f6:97:b0:9d:71:80:e1:34:68:c1:57:
18:ec:ba:bc:be:43:b6:ac:eb:db:10:6f:db:11:a3:96:55:ae:
8e:aa:46:16:9c:74:db:bf:15:96:de:09:8a:7f:93:33:c7:e2:
84:aa:44:c9:45:02:43:41:b7:a1:53:00:5b:e0:d1:96:a1:23:
2a:04:77:0a:9c:c4:f4:4c:cf:93:f6:6c:1b:e9:9e:7c:90:33:
b1:b2:3b:73:f1:6b:d8:0d:1f:f5:c0:23:52:de:93:6f:89:22:
97:8e:78:c5:fd:4f:28:77:62:80:a3:74:95:21:b1:b2:3a:84:
96:79:8d:d2:72:2a:9d:f1:36:75:c9:02:bb:04:a9:b3:dc:6a:
48:2b:3d:78:11:7a:14:b5:2b:bd:22:30:47:71:35:2c:1e:2f:
5f:ab:69:37:3a:71:6f:c4:70:f8:ce:39:34:9e:00:46:1c:8d:
44:ee:37:d0:4e:5e:67:38:de:28:e5:96:fb:1d:4c:44:ff:41:
1f:2e:cd:a6
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVzVf17pJ5YRvjXloCilJyPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVmMWNkYWRhMzk4MjQwZTY3ZTRmODI2ZTgwODlkMjViMTI0
OTA0MDEwHhcNMjMwMTAyMTYzNDUzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjYTU5ZDhlODI4YWU0YjcyODM1NjYzNjlmMGVmZDgzOTZjMWVmMGY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArTS+MZv4aBlmCk4VSDIGEAeqQ675
mUyOu16Lp6fS3hv2CSelbxT5XydPVcJ0WvCgvQAquUgoD0smTfpkmZmzZAEpwgvy
TwePbnEPHTFHCNhEZDE3GVbn+yT2bG6pAVwIX8w3AjWCn+gAxFAqBBmwoFlYFZI7
20NuWSlS9Q8AigiFg//+n/3pYfn2dLsAo/iTQZX+JgdOwQ2zQXe+JFqiaxgapeOw
wT++mI8UXIQ27Zwc27I37JtHl7EoB99zGKnjkTessddomqunaSBWdMXKRN2MUkw8
mwHpCHo+CXP3BWTBCacpxHoI4QlB+XJym4rQPYsXaf79HZeTADOgllkm9wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMpZ2Ogorktyg1ZjafDv2DlsHvD4MB8GA1UdIwQY
MBaAFF8c2to5gkDmfk+CboCJ0lsSSQQBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWHh6YTJqbUNRT1otVDRKdWdJblNXeEpKQkFFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC80OTBhZTUtMzJkZC00NDU3LTk0MDct
MGUwMDE1MmRkOWUxLzEveWxuWTZDaXVTM0tEVm1OcDhPX1lPV3dlOFBnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NC80OTBhZTUtMzJkZC00NDU3LTk0MDctMGUwMDE1MmRkOWUx
LzEvWHh6YTJqbUNRT1otVDRKdWdJblNXeEpKQkFFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLV9EMA0G
CSqGSIb3DQEBCwUAA4IBAQCA5suFq4Frr4mfqEC6p8LXjlUCeeyvcRAJp3f8sa6i
8N3FwYAHVXPJrzMqFOUSvqMmSXd1IWy2GNIh0HgC9pewnXGA4TRowVcY7Lq8vkO2
rOvbEG/bEaOWVa6OqkYWnHTbvxWW3gmKf5Mzx+KEqkTJRQJDQbehUwBb4NGWoSMq
BHcKnMT0TM+T9mwb6Z58kDOxsjtz8WvYDR/1wCNS3pNviSKXjnjF/U8od2KAo3SV
IbGyOoSWeY3Sciqd8TZ1yQK7BKmz3GpIKz14EXoUtSu9IjBHcTUsHi9fq2k3OnFv
xHD4zjk0ngBGHI1E7jfQTl5nON4o5Zb7HUxE/0EfLs2m
-----END CERTIFICATE-----
Generated at Mon Feb 17 08:12:59 2025 by rpki-client