Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/1636f8-5026-404e-a1ae-2509743ad29e/1/YEwBGJwVFMVG4n9Uv5C8kaKbP_Y.roa
File: YEwBGJwVFMVG4n9Uv5C8kaKbP_Y.roa (raw, json)
Hash identifier: 71JCVJhZ0PYDS413IRMGeXcUCfZfAR4EomHNNgUpftE=
Subject key identifier: 60:4C:01:18:9C:15:14:C5:46:E2:7F:54:BF:90:BC:91:A2:9B:3F:F6
Certificate issuer: /CN=43dfc066ce7cd3e382574a68667973b0b468df3c
Certificate serial: 019426D91F16F3BCFEFB611DCBA10C73D381
Authority key identifier: 43:DF:C0:66:CE:7C:D3:E3:82:57:4A:68:66:79:73:B0:B4:68:DF:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q9_AZs580-OCV0poZnlzsLRo3zw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/1636f8-5026-404e-a1ae-2509743ad29e/1/YEwBGJwVFMVG4n9Uv5C8kaKbP_Y.roa
Signing time: Thu 02 Jan 2025 11:49:10 +0000
ROA not before: Thu 02 Jan 2025 11:49:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 197564
IP address blocks: 45.155.96.0/22 maxlen: 22
45.155.99.0/24 maxlen: 24
91.226.36.0/23 maxlen: 23
213.108.24.0/24 maxlen: 24
213.108.25.0/24 maxlen: 24
2001:67c:124c::/48 maxlen: 48
2a10:ba00:bee0::/48 maxlen: 48
2a10:ba00:bee1::/48 maxlen: 48
2a10:ba00:bee2::/48 maxlen: 48
2a10:ba00:bee3::/48 maxlen: 48
2a10:ba00:bee4::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:1f:16:f3:bc:fe:fb:61:1d:cb:a1:0c:73:d3:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43dfc066ce7cd3e382574a68667973b0b468df3c
Validity
Not Before: Jan 2 11:49:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=604c01189c1514c546e27f54bf90bc91a29b3ff6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:e6:dc:63:4a:fe:b5:ae:24:8d:3a:8a:16:e0:
0b:ab:15:e0:8d:02:88:6a:af:7a:97:d9:46:c5:97:
8b:26:61:ed:86:28:bd:ae:bc:e9:99:73:a6:86:be:
92:42:52:cd:ce:a5:da:3c:0c:83:4f:0e:1a:71:09:
93:b7:cb:54:6d:ac:bd:66:be:5b:c9:fc:b2:94:a8:
72:b4:5d:21:8a:8d:1e:9f:c9:64:ff:80:52:4d:c2:
46:bc:da:aa:33:b5:a3:f4:9f:ec:6d:a7:e3:fa:62:
82:b7:2b:31:59:34:27:b2:cf:73:a6:03:8b:6f:9d:
1b:c3:84:7b:68:5f:3a:d3:5d:91:12:84:63:69:4d:
38:4e:ce:c4:30:34:98:d8:bc:10:07:e7:da:53:b9:
e9:43:8e:43:75:14:df:44:c6:00:76:18:be:08:6c:
cb:09:c0:dd:30:d9:92:52:50:0c:62:52:8f:01:fd:
4d:59:e9:f3:5c:9a:d0:2e:c3:dc:5b:14:a5:bc:a0:
d8:08:d0:40:d6:28:cf:1c:cc:08:b6:43:ff:e8:af:
83:24:20:39:64:87:76:f3:41:44:f2:37:6d:b1:ec:
7d:a4:3b:a1:0a:c8:31:f0:f0:27:01:ef:35:e2:b8:
8b:88:47:87:84:3a:26:95:e4:c8:10:e8:1b:79:69:
36:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:4C:01:18:9C:15:14:C5:46:E2:7F:54:BF:90:BC:91:A2:9B:3F:F6
X509v3 Authority Key Identifier:
keyid:43:DF:C0:66:CE:7C:D3:E3:82:57:4A:68:66:79:73:B0:B4:68:DF:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q9_AZs580-OCV0poZnlzsLRo3zw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/1636f8-5026-404e-a1ae-2509743ad29e/1/YEwBGJwVFMVG4n9Uv5C8kaKbP_Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/1636f8-5026-404e-a1ae-2509743ad29e/1/Q9_AZs580-OCV0poZnlzsLRo3zw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.155.96.0/22
91.226.36.0/23
213.108.24.0/23
IPv6:
2001:67c:124c::/48
2a10:ba00:bee0::-2a10:ba00:bee4:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
73:05:bd:d3:66:d4:d6:d2:02:47:c0:b3:aa:9a:b3:22:ac:c9:
a5:1f:cf:50:68:ad:8f:4f:66:51:90:3a:02:60:f0:cf:d7:10:
90:23:6e:66:54:de:bf:f6:bd:b4:5c:cd:2d:b6:2c:7c:a5:8c:
24:1a:00:5f:e8:ef:ca:61:d7:71:c6:a3:fc:f7:98:c8:fa:c0:
8c:67:85:ae:1c:01:ee:00:c1:33:39:9c:0d:25:65:22:62:8e:
f5:6e:bf:bf:fc:7e:ae:2d:be:22:12:b7:a4:b7:74:e7:79:9a:
f4:0a:7b:b0:37:d7:39:42:ef:d4:a5:f8:9c:c5:d9:67:b2:79:
11:f9:c4:9b:d5:cf:66:89:a7:a5:47:e1:a2:6e:6b:75:d0:bf:
0b:16:22:14:ec:9b:26:bb:8c:f5:89:a3:53:df:7e:9e:d5:18:
a1:aa:ae:63:b5:73:72:36:9b:94:a7:7d:36:7e:59:c3:c2:33:
08:5a:7b:a0:5f:cd:b0:4f:25:21:f3:f6:7d:de:af:82:95:e6:
29:71:87:2d:19:10:23:19:f7:19:05:d5:44:36:74:7a:34:24:
8c:fd:56:bc:0b:e4:f2:cc:6f:09:03:b4:ea:20:d2:e8:3a:73:
65:3d:1f:ed:b5:00:18:50:b5:00:27:01:da:c2:b1:40:4f:80:
f2:4c:94:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 23:32:37 2025 by rpki-client