Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/Y9aUAEMZZ6zJUsbIX4u5MppJ_NM.roa
File: Y9aUAEMZZ6zJUsbIX4u5MppJ_NM.roa (raw, json)
Hash identifier: QX+7A5gGzqD+N7XCbRjIrIr9wiquDW6zEn6zQPR9V5g=
Subject key identifier: 63:D6:94:00:43:19:67:AC:C9:52:C6:C8:5F:8B:B9:32:9A:49:FC:D3
Certificate issuer: /CN=6222e1c2a5315334b66d80f78d5b50b42e480b9c
Certificate serial: 019420D5CB88257A2E58B00FF2AE9DED8748
Authority key identifier: 62:22:E1:C2:A5:31:53:34:B6:6D:80:F7:8D:5B:50:B4:2E:48:0B:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YiLhwqUxUzS2bYD3jVtQtC5IC5w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/Y9aUAEMZZ6zJUsbIX4u5MppJ_NM.roa
Signing time: Wed 01 Jan 2025 07:47:49 +0000
ROA not before: Wed 01 Jan 2025 07:47:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44648
IP address blocks: 45.146.228.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d5:cb:88:25:7a:2e:58:b0:0f:f2:ae:9d:ed:87:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6222e1c2a5315334b66d80f78d5b50b42e480b9c
Validity
Not Before: Jan 1 07:47:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=63d69400431967acc952c6c85f8bb9329a49fcd3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:3d:a6:f7:5c:7f:3b:95:14:64:35:52:af:29:
96:21:76:0f:26:52:13:db:fc:e5:a6:29:d9:e4:6f:
12:6a:cd:fd:02:ab:24:ed:d0:dc:62:9e:f6:df:46:
87:b1:f6:ff:0a:09:12:e8:5b:65:09:ce:4f:e0:b4:
59:75:88:bc:16:53:11:5b:23:d6:a2:cd:88:44:01:
bf:6b:70:d5:92:f8:4c:23:8f:81:f7:51:0e:e3:3e:
3a:eb:c0:c7:f6:1f:86:a5:b7:f9:ec:84:58:3c:4c:
09:fc:ec:6e:7f:62:ba:e9:35:78:dd:dc:ac:aa:a9:
14:22:b0:96:9d:26:d8:fc:69:f9:37:3d:0c:ec:0a:
f4:9c:f0:b3:be:9f:be:b8:8c:46:27:cd:d9:02:07:
f9:a1:85:62:77:d5:9b:8c:af:6b:9c:54:63:c0:db:
97:1a:01:b5:6a:9c:36:bd:86:1b:fa:ff:04:2d:0a:
01:0b:6b:65:b9:86:0f:84:cf:f2:87:ad:39:13:b7:
37:cd:09:ce:d3:04:94:72:c9:2e:f0:ce:76:01:4d:
cb:4c:7a:a5:3c:d1:85:53:6a:7c:b3:06:d5:b3:83:
16:98:8e:b5:56:f1:09:8c:08:b8:5d:58:67:f3:20:
68:03:05:fd:95:02:4e:93:20:6d:fc:d2:66:95:74:
55:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:D6:94:00:43:19:67:AC:C9:52:C6:C8:5F:8B:B9:32:9A:49:FC:D3
X509v3 Authority Key Identifier:
keyid:62:22:E1:C2:A5:31:53:34:B6:6D:80:F7:8D:5B:50:B4:2E:48:0B:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YiLhwqUxUzS2bYD3jVtQtC5IC5w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/Y9aUAEMZZ6zJUsbIX4u5MppJ_NM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/YiLhwqUxUzS2bYD3jVtQtC5IC5w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.146.228.0/24
Signature Algorithm: sha256WithRSAEncryption
57:46:e8:20:fd:5a:8c:62:a0:fa:1f:0f:fd:bf:f8:93:39:06:
9b:f0:d6:89:dd:0b:02:c2:32:ec:04:b2:90:c1:8a:c4:1b:e8:
c0:ca:e9:5a:01:63:cf:6e:fa:72:5e:94:0c:45:ff:ae:03:a0:
50:e4:13:a8:a3:93:4d:0e:53:96:3f:a1:a7:11:45:97:c2:a7:
39:c9:b2:9b:82:9f:89:02:f9:1f:05:43:a4:b8:23:16:01:ba:
69:9e:50:3a:ec:aa:06:fc:20:7e:61:5b:51:6d:3c:83:7f:9e:
fa:c7:e4:ca:1f:ef:cc:1b:ca:94:34:b2:fd:b8:6a:8e:53:b0:
6e:89:21:62:ba:87:eb:92:3c:d7:db:9b:bd:1c:89:79:c5:99:
a5:27:d4:f6:61:fa:d2:96:ed:11:a1:02:5d:58:24:32:98:06:
4c:ff:3b:2c:e6:1e:c1:20:7b:28:cc:5f:92:e3:f3:01:eb:90:
cc:8a:de:b5:c7:75:d5:6f:a3:fb:c2:d5:a7:68:96:90:97:be:
f4:95:37:b7:b5:81:3e:6a:f6:64:66:e9:b9:07:4a:4e:33:d1:
02:ec:c9:94:85:cc:28:82:94:ed:57:7f:88:7b:3d:e9:b4:12:
e6:d6:4d:11:b1:e1:3f:45:cf:c3:bb:f5:a4:62:b7:51:71:a5:
af:c5:e1:89
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQg1cuIJXouWLAP8q6d7YdIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYyMjJlMWMyYTUzMTUzMzRiNjZkODBmNzhkNWI1MGI0MmU0
ODBiOWMwHhcNMjUwMTAxMDc0NzQ5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2M2Q2OTQwMDQzMTk2N2FjYzk1MmM2Yzg1ZjhiYjkzMjlhNDlmY2QzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtD2m91x/O5UUZDVSrymWIXYPJlIT
2/zlpinZ5G8Sas39Aqsk7dDcYp7230aHsfb/CgkS6FtlCc5P4LRZdYi8FlMRWyPW
os2IRAG/a3DVkvhMI4+B91EO4z4668DH9h+Gpbf57IRYPEwJ/Oxuf2K66TV43dys
qqkUIrCWnSbY/Gn5Nz0M7Ar0nPCzvp++uIxGJ83ZAgf5oYVid9WbjK9rnFRjwNuX
GgG1apw2vYYb+v8ELQoBC2tluYYPhM/yh605E7c3zQnO0wSUcsku8M52AU3LTHql
PNGFU2p8swbVs4MWmI61VvEJjAi4XVhn8yBoAwX9lQJOkyBt/NJmlXRVCQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGPWlABDGWesyVLGyF+LuTKaSfzTMB8GA1UdIwQY
MBaAFGIi4cKlMVM0tm2A941bULQuSAucMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWWlMaHdxVXhVelMyYllEM2pWdFF0QzVJQzV3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS85OTliOTctYzczMS00MTkyLTg1ZjEt
NTczNzAxYzg0ODMzLzEvWTlhVUFFTVpaNnpKVXNiSVg0dTVNcHBKX05NLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NS85OTliOTctYzczMS00MTkyLTg1ZjEtNTczNzAxYzg0ODMz
LzEvWWlMaHdxVXhVelMyYllEM2pWdFF0QzVJQzV3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALZLkMA0G
CSqGSIb3DQEBCwUAA4IBAQBXRugg/VqMYqD6Hw/9v/iTOQab8NaJ3QsCwjLsBLKQ
wYrEG+jAyulaAWPPbvpyXpQMRf+uA6BQ5BOoo5NNDlOWP6GnEUWXwqc5ybKbgp+J
AvkfBUOkuCMWAbppnlA67KoG/CB+YVtRbTyDf576x+TKH+/MG8qUNLL9uGqOU7Bu
iSFiuofrkjzX25u9HIl5xZmlJ9T2YfrSlu0RoQJdWCQymAZM/zss5h7BIHsozF+S
4/MB65DMit61x3XVb6P7wtWnaJaQl770lTe3tYE+avZkZum5B0pOM9EC7MmUhcwo
gpTtV3+Iez3ptBLm1k0RseE/Rc/Du/WkYrdRcaWvxeGJ
-----END CERTIFICATE-----
Generated at Tue Apr 8 03:51:11 2025 by rpki-client