Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/fd3630-6c71-4bed-966a-ae7d4c7538ad/1/ygeNrsucj-rGn8JTBcNIhnNtCcU.roa
File: ygeNrsucj-rGn8JTBcNIhnNtCcU.roa (raw, json)
Hash identifier: KBkElyIB1u/4stezxnXDGq1lV/mlLUiRmV5TkOx/9qs=
Subject key identifier: CA:07:8D:AE:CB:9C:8F:EA:C6:9F:C2:53:05:C3:48:86:73:6D:09:C5
Certificate issuer: /CN=d53f6b9ad30b6555fa5a54e7eb152b2bf412f226
Certificate serial: 019423D72DF1EBBB85379D6632DCAFF558D4
Authority key identifier: D5:3F:6B:9A:D3:0B:65:55:FA:5A:54:E7:EB:15:2B:2B:F4:12:F2:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1T9rmtMLZVX6WlTn6xUrK_QS8iY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/fd3630-6c71-4bed-966a-ae7d4c7538ad/1/ygeNrsucj-rGn8JTBcNIhnNtCcU.roa
Signing time: Wed 01 Jan 2025 21:48:11 +0000
ROA not before: Wed 01 Jan 2025 21:48:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212555
IP address blocks: 45.158.104.0/24 maxlen: 24
45.158.105.0/24 maxlen: 24
45.158.106.0/24 maxlen: 24
45.158.107.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:2d:f1:eb:bb:85:37:9d:66:32:dc:af:f5:58:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d53f6b9ad30b6555fa5a54e7eb152b2bf412f226
Validity
Not Before: Jan 1 21:48:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ca078daecb9c8feac69fc25305c34886736d09c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:59:1e:43:ac:01:78:04:3c:bf:16:89:88:07:
fd:e5:57:8a:57:dc:53:55:28:53:18:2e:85:d2:5f:
ac:e2:b3:f5:8e:a8:c5:f8:e7:e6:da:ca:eb:83:52:
b6:77:33:cf:90:b5:7c:9f:a6:2f:35:a3:d2:47:69:
fc:5c:93:53:7b:44:99:31:14:81:36:15:ad:0a:c2:
60:91:b2:49:49:d8:9d:30:74:39:1c:94:2f:7a:91:
88:77:d1:cc:b0:52:af:7c:01:18:0f:98:8c:8f:fb:
20:6f:62:0c:ca:13:2f:29:4c:63:93:12:fd:7b:c7:
b2:26:c9:74:f2:3b:d7:93:ae:50:b5:48:fc:93:ec:
ab:fc:e0:03:35:46:f6:19:66:51:5a:1a:8b:da:18:
b2:d3:9b:8d:c6:8a:e1:01:ec:bd:84:29:87:ec:a9:
27:d6:b5:97:90:ed:06:7a:3b:d1:45:86:1d:1e:53:
f8:7d:1a:a1:52:fb:5d:56:e2:c5:65:d6:a8:88:7f:
fd:2f:49:0c:55:1b:9a:52:cb:35:4f:db:f2:9a:34:
91:d9:d7:27:42:4f:f6:5b:8a:3b:9a:25:d7:60:3d:
2a:df:89:1d:a6:2e:93:48:cd:d7:e4:5e:bc:ed:15:
a6:9f:df:a4:6d:8d:b2:92:f5:07:5e:01:07:1f:41:
1c:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:07:8D:AE:CB:9C:8F:EA:C6:9F:C2:53:05:C3:48:86:73:6D:09:C5
X509v3 Authority Key Identifier:
keyid:D5:3F:6B:9A:D3:0B:65:55:FA:5A:54:E7:EB:15:2B:2B:F4:12:F2:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1T9rmtMLZVX6WlTn6xUrK_QS8iY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/fd3630-6c71-4bed-966a-ae7d4c7538ad/1/ygeNrsucj-rGn8JTBcNIhnNtCcU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/fd3630-6c71-4bed-966a-ae7d4c7538ad/1/1T9rmtMLZVX6WlTn6xUrK_QS8iY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.158.104.0/22
Signature Algorithm: sha256WithRSAEncryption
73:6c:4e:e6:3b:85:d2:5e:64:50:c8:f0:46:29:2e:11:92:43:
e0:fb:22:8e:2b:d1:5d:d0:02:2f:34:92:ef:27:c0:b4:2e:15:
46:07:3e:61:a5:2c:2e:e9:1b:db:32:c5:92:51:cd:67:31:d5:
eb:d2:ea:df:3b:92:c7:41:c6:e2:83:b1:c2:9c:72:77:fa:9e:
35:56:15:d4:47:95:e9:c4:84:6d:1b:c0:21:3d:cf:c7:05:96:
23:d1:63:2e:d6:ce:0f:0e:1d:5d:dc:ec:63:c0:c7:46:9a:7c:
db:d3:58:f5:12:a8:f0:65:b2:6b:cc:d5:d4:08:d6:2b:77:3e:
f3:6e:1b:4c:e2:fd:ee:16:63:9f:f3:71:83:3e:57:ca:f6:fc:
84:6f:42:b3:a8:75:e3:24:4b:c3:69:87:e8:b1:ea:3e:90:71:
86:f0:cd:67:54:7d:31:7a:c8:8f:1a:de:97:aa:64:ad:7d:21:
74:3b:e4:39:3f:6e:6f:32:98:03:30:c0:80:e0:17:c1:02:7c:
5d:6c:d4:1c:6f:09:a1:8e:ac:8b:c9:db:81:77:7d:65:3b:4a:
da:bb:b6:ac:93:9b:02:0a:e2:90:d0:0b:cb:50:92:bc:71:db:
cb:74:8c:b4:0b:49:ef:23:b9:8a:d1:de:df:55:ae:e8:6b:83:
cb:f1:db:86
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQj1y3x67uFN51mMtyv9VjUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ1M2Y2YjlhZDMwYjY1NTVmYTVhNTRlN2ViMTUyYjJiZjQx
MmYyMjYwHhcNMjUwMTAxMjE0ODExWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjYTA3OGRhZWNiOWM4ZmVhYzY5ZmMyNTMwNWMzNDg4NjczNmQwOWM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtFkeQ6wBeAQ8vxaJiAf95VeKV9xT
VShTGC6F0l+s4rP1jqjF+Ofm2srrg1K2dzPPkLV8n6YvNaPSR2n8XJNTe0SZMRSB
NhWtCsJgkbJJSdidMHQ5HJQvepGId9HMsFKvfAEYD5iMj/sgb2IMyhMvKUxjkxL9
e8eyJsl08jvXk65QtUj8k+yr/OADNUb2GWZRWhqL2hiy05uNxorhAey9hCmH7Kkn
1rWXkO0GejvRRYYdHlP4fRqhUvtdVuLFZdaoiH/9L0kMVRuaUss1T9vymjSR2dcn
Qk/2W4o7miXXYD0q34kdpi6TSM3X5F687RWmn9+kbY2ykvUHXgEHH0Ec1wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMoHja7LnI/qxp/CUwXDSIZzbQnFMB8GA1UdIwQY
MBaAFNU/a5rTC2VV+lpU5+sVKyv0EvImMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMVQ5cm10TUxaVlg2V2xUbjZ4VXJLX1FTOGlZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yi9mZDM2MzAtNmM3MS00YmVkLTk2NmEt
YWU3ZDRjNzUzOGFkLzEveWdlTnJzdWNqLXJHbjhKVEJjTklobk50Q2NVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Yi9mZDM2MzAtNmM3MS00YmVkLTk2NmEtYWU3ZDRjNzUzOGFk
LzEvMVQ5cm10TUxaVlg2V2xUbjZ4VXJLX1FTOGlZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLZ5oMA0G
CSqGSIb3DQEBCwUAA4IBAQBzbE7mO4XSXmRQyPBGKS4RkkPg+yKOK9Fd0AIvNJLv
J8C0LhVGBz5hpSwu6RvbMsWSUc1nMdXr0urfO5LHQcbig7HCnHJ3+p41VhXUR5Xp
xIRtG8AhPc/HBZYj0WMu1s4PDh1d3OxjwMdGmnzb01j1EqjwZbJrzNXUCNYrdz7z
bhtM4v3uFmOf83GDPlfK9vyEb0KzqHXjJEvDaYfoseo+kHGG8M1nVH0xesiPGt6X
qmStfSF0O+Q5P25vMpgDMMCA4BfBAnxdbNQcbwmhjqyLyduBd31lO0rau7ask5sC
CuKQ0AvLUJK8cdvLdIy0C0nvI7mK0d7fVa7oa4PL8duG
-----END CERTIFICATE-----
Generated at Thu Feb 20 02:42:30 2025 by rpki-client