Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/YYexSVez3qLSwsT4IqANbD6NeqQ.roa
File: YYexSVez3qLSwsT4IqANbD6NeqQ.roa (raw, json)
Hash identifier: SGuxwNSiRxuab0LIqAeC3D14Z42zsDshXgPKx8yM/N4=
Subject key identifier: 61:87:B1:49:57:B3:DE:A2:D2:C2:C4:F8:22:A0:0D:6C:3E:8D:7A:A4
Certificate issuer: /CN=1e9fdc7fb39ebbbed4ee54f703d3ac6153ddee69
Certificate serial: 019421B1AAB6840068EBF11D00EAB870E7AD
Authority key identifier: 1E:9F:DC:7F:B3:9E:BB:BE:D4:EE:54:F7:03:D3:AC:61:53:DD:EE:69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/YYexSVez3qLSwsT4IqANbD6NeqQ.roa
Signing time: Wed 01 Jan 2025 11:47:59 +0000
ROA not before: Wed 01 Jan 2025 11:47:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 30058
IP address blocks: 45.93.62.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b1:aa:b6:84:00:68:eb:f1:1d:00:ea:b8:70:e7:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e9fdc7fb39ebbbed4ee54f703d3ac6153ddee69
Validity
Not Before: Jan 1 11:47:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6187b14957b3dea2d2c2c4f822a00d6c3e8d7aa4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:11:54:8f:5d:69:45:23:8e:83:c1:81:76:f0:
20:18:59:fc:51:8c:d7:1a:f5:48:92:99:c9:4e:36:
f9:2e:db:a5:bd:21:40:5b:91:ff:cd:98:6e:e9:c5:
e2:ce:9b:99:56:ca:57:b6:9b:1d:60:d6:de:7c:b6:
61:a5:90:09:a4:d9:ba:a7:6f:ee:09:fb:c8:96:9a:
74:c7:38:49:e8:8a:e1:5b:c6:c3:f6:cb:42:59:54:
a2:e7:ce:d8:bc:ca:6b:5a:b6:ae:0b:38:86:97:0b:
1b:0c:a3:04:0b:80:02:80:aa:58:0f:0d:c5:ba:7e:
b0:66:66:30:de:34:e7:60:d9:85:b4:6b:c6:3e:66:
cf:29:db:ce:12:4c:df:cd:ea:ae:b5:4f:9c:36:b0:
4f:51:37:7e:7e:f8:e6:4b:37:4d:fc:b2:06:83:8a:
e8:45:b2:22:95:6e:f4:2f:75:91:27:91:98:58:bd:
8f:d2:f9:53:cf:89:20:48:04:7e:b3:99:68:07:b1:
b7:95:a6:f1:6a:00:db:8e:9e:53:b0:40:f5:e7:ca:
e7:a8:51:a6:9a:d8:e2:16:2a:4c:44:b9:70:08:42:
db:99:e4:37:84:51:f6:61:b3:79:52:7e:5f:3e:df:
8d:7f:12:30:3e:ea:aa:51:3f:d7:57:73:b5:bd:a2:
a3:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:87:B1:49:57:B3:DE:A2:D2:C2:C4:F8:22:A0:0D:6C:3E:8D:7A:A4
X509v3 Authority Key Identifier:
keyid:1E:9F:DC:7F:B3:9E:BB:BE:D4:EE:54:F7:03:D3:AC:61:53:DD:EE:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/YYexSVez3qLSwsT4IqANbD6NeqQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.93.62.0/24
Signature Algorithm: sha256WithRSAEncryption
a9:23:02:f8:e7:d9:d1:c5:37:88:5e:64:eb:3a:6d:d0:b2:4f:
c3:4d:e5:d1:90:77:40:6c:4b:dd:78:54:e5:90:4d:03:a9:94:
8e:97:1f:64:1f:17:16:fc:d8:e0:31:77:18:bc:54:74:89:17:
49:a6:b5:fc:bf:b5:5b:72:a1:17:9e:63:6d:ae:21:f9:94:6e:
83:6f:62:9e:a1:60:54:ac:16:59:42:0e:69:4d:4f:d3:e9:b6:
86:56:7b:0a:c2:f1:ae:6a:b6:e2:63:0e:30:a3:4e:f2:f6:6f:
5c:35:a8:a4:fa:f7:a5:7f:a0:a0:74:cc:04:3a:b8:90:ea:c4:
90:83:f0:b2:41:4b:aa:a9:c1:51:83:f0:2d:66:ab:b9:0a:cb:
31:34:f5:4a:4d:b6:8e:d8:50:e0:96:fe:2f:b9:57:a7:af:89:
a4:9e:7b:51:29:2f:84:6c:1a:34:5c:6c:0a:44:09:5d:12:b6:
94:de:35:64:a6:03:f4:c4:fc:ef:6d:4c:3d:9c:c4:95:1b:74:
75:89:3b:dc:7a:1d:0c:9b:41:50:e5:52:7f:9a:9b:67:ff:b5:
73:5f:6a:49:14:ea:ee:6d:a6:9e:fb:c0:61:df:22:52:07:28:
be:99:f9:41:6d:bf:d3:98:49:68:63:03:2a:7b:31:dd:1c:c1:
38:bd:df:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:41:43 2025 by rpki-client