Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/Yz9uALtxmsYX-pNDjaoDIBHGGJs.roa
File: Yz9uALtxmsYX-pNDjaoDIBHGGJs.roa (raw, json)
Hash identifier: 5LT9AjhsYCw3bsWkJ4ZtinNKQHZ+QgGLKQbypJteb00=
Subject key identifier: 63:3F:6E:00:BB:71:9A:C6:17:FA:93:43:8D:AA:03:20:11:C6:18:9B
Certificate issuer: /CN=1773db17795d2bf1b4b5345c5b29390dbaf4523e
Certificate serial: 0194236A63EA457B02B0003A8D93014B812C
Authority key identifier: 17:73:DB:17:79:5D:2B:F1:B4:B5:34:5C:5B:29:39:0D:BA:F4:52:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/Yz9uALtxmsYX-pNDjaoDIBHGGJs.roa
Signing time: Wed 01 Jan 2025 19:49:22 +0000
ROA not before: Wed 01 Jan 2025 19:49:22 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48037
IP address blocks: 145.10.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:6a:63:ea:45:7b:02:b0:00:3a:8d:93:01:4b:81:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1773db17795d2bf1b4b5345c5b29390dbaf4523e
Validity
Not Before: Jan 1 19:49:22 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=633f6e00bb719ac617fa93438daa032011c6189b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:bc:01:9a:e9:10:a3:92:28:d5:b7:32:1f:13:
60:e6:77:7c:64:a9:4c:50:a3:46:a4:94:93:60:81:
4b:08:39:5b:d1:7f:76:8f:2e:94:5e:90:3c:fe:c8:
1d:d8:f2:c2:27:4d:e6:b4:5f:a9:88:28:97:a2:42:
43:03:24:16:42:74:28:45:80:1c:8e:ed:ad:4e:75:
ce:fc:28:7d:13:6a:25:70:28:08:9a:92:6f:fc:dd:
10:7e:21:2a:cb:93:37:d5:62:51:73:72:7c:9e:e7:
23:1e:4a:9b:e9:d8:9b:af:cf:3e:c7:d6:36:6c:61:
06:75:09:06:5f:60:7c:9a:76:c1:53:bd:10:c0:77:
9d:e1:b7:07:89:ac:bd:13:49:01:a5:e1:93:f2:57:
9c:c9:30:94:ae:52:07:b8:35:12:69:52:c0:aa:b1:
1d:ce:3b:30:ab:1d:74:01:aa:e8:2c:b2:6b:b6:be:
85:84:51:58:3c:9a:ca:18:e0:2e:2c:1b:a2:b7:7f:
67:d0:ac:e8:87:1a:8b:4f:c1:11:53:46:2e:8b:da:
90:fd:e6:9d:91:11:c4:02:ed:fb:5e:80:bb:94:c3:
04:f0:84:be:a5:e5:71:de:4c:b2:00:38:7d:09:df:
d0:00:aa:9c:f3:85:e5:08:c4:68:0a:43:4c:97:69:
b9:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:3F:6E:00:BB:71:9A:C6:17:FA:93:43:8D:AA:03:20:11:C6:18:9B
X509v3 Authority Key Identifier:
keyid:17:73:DB:17:79:5D:2B:F1:B4:B5:34:5C:5B:29:39:0D:BA:F4:52:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/Yz9uALtxmsYX-pNDjaoDIBHGGJs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.10.0.0/16
Signature Algorithm: sha256WithRSAEncryption
03:42:e3:1c:5c:a8:53:2c:d1:36:a9:13:ae:a4:9b:f3:f9:ed:
14:3c:56:1c:a8:47:bd:29:23:be:99:08:e2:4e:d2:35:73:5b:
5c:2a:eb:21:52:b1:62:1f:f2:76:f6:44:cd:f0:3e:97:32:35:
e4:86:96:f9:fa:6f:fd:72:27:7a:84:31:3a:f8:39:e0:31:53:
91:be:91:96:4c:2e:17:b7:16:2b:b2:2e:d9:e9:41:82:6a:49:
eb:6f:06:f1:e6:6c:30:4f:27:a2:8b:6e:76:a3:05:6f:9c:b4:
a0:0a:44:75:26:19:64:1b:e4:49:aa:00:66:a3:a6:b8:62:58:
c1:21:1d:6a:72:c5:75:38:17:83:a6:27:51:b5:a0:68:14:12:
07:03:91:54:e3:3c:39:87:3c:7d:18:5e:c6:9d:00:d4:f2:25:
20:57:d4:70:c3:7b:55:0e:c8:d3:77:94:1a:76:4f:1d:2b:16:
a9:dd:95:63:d5:95:20:ea:81:f4:df:77:b0:41:c0:3f:f6:d4:
57:48:48:b2:8a:8a:f6:2b:5d:1b:c4:96:aa:38:c4:3d:c6:a6:
4b:98:7a:0a:f8:65:d3:fe:ce:33:ae:ae:23:70:b7:8b:7b:35:
bb:eb:75:8d:de:9a:cb:d9:4c:b8:5f:14:04:82:f4:ed:be:7d:
c8:87:0b:57
-----BEGIN CERTIFICATE-----
MIIE/DCCA+SgAwIBAgISAZQjamPqRXsCsAA6jZMBS4EsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE3NzNkYjE3Nzk1ZDJiZjFiNGI1MzQ1YzViMjkzOTBkYmFm
NDUyM2UwHhcNMjUwMTAxMTk0OTIyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2MzNmNmUwMGJiNzE5YWM2MTdmYTkzNDM4ZGFhMDMyMDExYzYxODliMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAirwBmukQo5Io1bcyHxNg5nd8ZKlM
UKNGpJSTYIFLCDlb0X92jy6UXpA8/sgd2PLCJ03mtF+piCiXokJDAyQWQnQoRYAc
ju2tTnXO/Ch9E2olcCgImpJv/N0QfiEqy5M31WJRc3J8nucjHkqb6dibr88+x9Y2
bGEGdQkGX2B8mnbBU70QwHed4bcHiay9E0kBpeGT8lecyTCUrlIHuDUSaVLAqrEd
zjswqx10AaroLLJrtr6FhFFYPJrKGOAuLBuit39n0KzohxqLT8ERU0Yui9qQ/ead
kRHEAu37XoC7lMME8IS+peVx3kyyADh9Cd/QAKqc84XlCMRoCkNMl2m5JQIDAQAB
o4ICCDCCAgQwHQYDVR0OBBYEFGM/bgC7cZrGF/qTQ42qAyARxhibMB8GA1UdIwQY
MBaAFBdz2xd5XSvxtLU0XFspOQ269FI+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRjNQYkYzbGRLX0cwdFRSY1d5azVEYnIwVWo0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZC9mNzdjYmQtODkzYi00NjE2LTlkNzYt
NTQ4NjFmMjMyNDlkLzEvWXo5dUFMdHhtc1lYLXBORGphb0RJQkhHR0pzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZC9mNzdjYmQtODkzYi00NjE2LTlkNzYtNTQ4NjFmMjMyNDlk
LzEvRjNQYkYzbGRLX0cwdFRSY1d5azVEYnIwVWo0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAkQowDQYJ
KoZIhvcNAQELBQADggEBAANC4xxcqFMs0TapE66km/P57RQ8VhyoR70pI76ZCOJO
0jVzW1wq6yFSsWIf8nb2RM3wPpcyNeSGlvn6b/1yJ3qEMTr4OeAxU5G+kZZMLhe3
FiuyLtnpQYJqSetvBvHmbDBPJ6KLbnajBW+ctKAKRHUmGWQb5EmqAGajprhiWMEh
HWpyxXU4F4OmJ1G1oGgUEgcDkVTjPDmHPH0YXsadANTyJSBX1HDDe1UOyNN3lBp2
Tx0rFqndlWPVlSDqgfTfd7BBwD/21FdISLKKivYrXRvElqo4xD3GpkuYegr4ZdP+
zjOuriNwt4t7NbvrdY3emsvZTLhfFASC9O2+fciHC1c=
-----END CERTIFICATE-----
Generated at Sun Apr 6 11:47:25 2025 by rpki-client