Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/yeQLFrJs4WdLFKdKgzBIpjutlHI.roa
File: yeQLFrJs4WdLFKdKgzBIpjutlHI.roa (raw, json)
Hash identifier: Ugxn+TT5cBp3rhGWB31gVEyOkseuKcrjFWmkY2aT8ak=
Subject key identifier: C9:E4:0B:16:B2:6C:E1:67:4B:14:A7:4A:83:30:48:A6:3B:AD:94:72
Certificate issuer: /CN=1773db17795d2bf1b4b5345c5b29390dbaf4523e
Certificate serial: 0194236A5CE87B1917C1650876FFA52C7DC2
Authority key identifier: 17:73:DB:17:79:5D:2B:F1:B4:B5:34:5C:5B:29:39:0D:BA:F4:52:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/yeQLFrJs4WdLFKdKgzBIpjutlHI.roa
Signing time: Wed 01 Jan 2025 19:49:20 +0000
ROA not before: Wed 01 Jan 2025 19:49:20 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 2686
IP address blocks: 145.139.77.0/24 maxlen: 24
145.139.78.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:6a:5c:e8:7b:19:17:c1:65:08:76:ff:a5:2c:7d:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1773db17795d2bf1b4b5345c5b29390dbaf4523e
Validity
Not Before: Jan 1 19:49:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c9e40b16b26ce1674b14a74a833048a63bad9472
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:6e:b9:b8:7a:95:fa:35:39:f4:2f:c7:ed:f7:
01:b8:f1:9e:7e:a1:b3:32:92:68:c1:a3:62:ad:d0:
0c:c7:7d:13:39:e7:ad:99:b7:c2:da:bb:c3:94:94:
70:04:4f:22:e8:06:db:b8:7e:77:89:3e:05:b8:3a:
80:bc:19:c0:6c:a1:5b:1b:58:4e:4c:45:8a:ac:aa:
a6:97:4f:41:f9:f9:37:0e:b0:9b:0b:b4:45:d0:a2:
26:9c:7a:26:30:bf:dd:5a:fb:e6:30:c1:da:98:05:
23:d3:23:33:29:e9:c2:90:4c:9f:c6:4b:a7:99:17:
a5:9a:25:c4:eb:ea:7b:8e:2b:bf:6e:2a:cb:16:ee:
57:57:11:01:8f:9a:5c:ae:37:f9:9e:0c:3e:be:89:
45:df:97:10:7f:b8:71:d3:99:77:05:7a:0a:38:a2:
27:06:6e:53:11:35:cc:ad:4a:b3:1d:c4:be:3e:8a:
7e:3b:b4:94:30:0d:82:c0:d5:0f:5e:04:72:bd:a1:
f9:58:2a:e3:4d:7f:31:c5:0e:48:d4:20:1f:f6:c4:
0a:d3:b0:1f:e6:0b:fb:fb:9c:22:71:d8:c9:8b:61:
2f:54:ee:5b:e1:02:be:6b:77:aa:c1:ba:23:1f:3d:
12:a8:8e:d2:12:ca:ed:eb:8c:c3:54:87:d1:64:a7:
7e:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:E4:0B:16:B2:6C:E1:67:4B:14:A7:4A:83:30:48:A6:3B:AD:94:72
X509v3 Authority Key Identifier:
keyid:17:73:DB:17:79:5D:2B:F1:B4:B5:34:5C:5B:29:39:0D:BA:F4:52:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/yeQLFrJs4WdLFKdKgzBIpjutlHI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.139.77.0-145.139.78.255
Signature Algorithm: sha256WithRSAEncryption
1e:63:0e:14:38:67:aa:72:70:c6:44:06:e3:56:1f:e1:48:b7:
cb:94:00:0e:70:cd:58:67:5c:51:63:a9:94:8d:cc:d0:2a:8d:
c4:e2:ba:f4:3f:1f:e8:19:38:f4:6e:6c:12:59:77:3f:6e:c0:
c0:47:c7:74:5a:74:9e:95:62:8b:d6:31:b9:60:b7:66:10:bf:
0c:14:44:b0:41:10:42:24:33:66:3d:30:fa:73:56:a3:b9:03:
9e:a9:4b:f6:2c:82:a4:30:0a:0a:ee:88:0a:53:3e:8f:7f:58:
98:9f:76:84:54:47:69:ea:d0:58:e8:e7:0d:3e:8f:57:da:9c:
30:b0:cf:ad:4a:b2:b6:ef:d7:d7:b6:d3:71:71:c1:4e:70:70:
b5:53:82:98:0d:59:a7:95:0e:db:2b:23:b9:17:c3:56:4a:6b:
8a:94:9c:13:1b:7c:91:a3:06:eb:84:15:75:2b:a4:77:4c:74:
4d:51:cf:c0:cd:8f:fc:76:1d:80:b8:e4:7b:6c:b4:95:03:c7:
7d:5c:bd:08:57:2d:45:5c:8d:ea:30:63:b0:90:ae:94:78:c4:
b3:56:f4:f8:77:b3:1a:20:e4:99:3f:32:05:ec:b1:73:44:1b:
d9:06:16:dc:0e:16:73:c7:5e:fd:0f:19:97:00:80:c1:6e:23:
9f:5f:00:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 11:47:05 2025 by rpki-client