Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/YGMe0KWo_m6eJ0gMSerQxd_mK7o.roa
File: YGMe0KWo_m6eJ0gMSerQxd_mK7o.roa (raw, json)
Hash identifier: TX2OaT/Kq4swweS2SKxtiDq7F1NZ0dIzMpi6TRLh/ZA=
Subject key identifier: 60:63:1E:D0:A5:A8:FE:6E:9E:27:48:0C:49:EA:D0:C5:DF:E6:2B:BA
Certificate issuer: /CN=1f4738389cb3b998ec4fa6d4272f8dd799fbc4a9
Certificate serial: 01942521B9DAAAA95B6D0C793BD06B6B3D90
Authority key identifier: 1F:47:38:38:9C:B3:B9:98:EC:4F:A6:D4:27:2F:8D:D7:99:FB:C4:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H0c4OJyzuZjsT6bUJy-N15n7xKk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/YGMe0KWo_m6eJ0gMSerQxd_mK7o.roa
Signing time: Thu 02 Jan 2025 03:49:14 +0000
ROA not before: Thu 02 Jan 2025 03:49:14 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 55933
IP address blocks: 45.150.198.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:b9:da:aa:a9:5b:6d:0c:79:3b:d0:6b:6b:3d:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f4738389cb3b998ec4fa6d4272f8dd799fbc4a9
Validity
Not Before: Jan 2 03:49:14 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=60631ed0a5a8fe6e9e27480c49ead0c5dfe62bba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:2c:5d:d6:c7:0a:f9:61:43:4c:1c:4a:69:77:
3e:67:03:7d:ad:ad:cd:41:d5:98:a7:26:be:90:be:
5f:e8:63:45:6c:8d:43:fe:29:57:32:2e:3a:11:b4:
e1:d1:9b:5c:c1:44:64:d6:7c:ec:85:63:cb:00:ee:
be:d5:06:8b:77:4a:11:d7:fe:d2:9f:c3:22:7f:c1:
4a:68:50:68:ba:68:21:51:10:16:43:2b:61:e7:2d:
90:9f:91:a9:5e:89:1c:08:23:88:a9:ae:49:97:e4:
2a:0b:41:7c:09:80:1b:da:30:f0:3c:f9:c0:eb:c7:
43:01:2d:a7:04:d6:7b:9d:81:a1:9a:78:ed:0f:c5:
4a:b5:8d:4a:6d:fd:fa:f8:e6:a9:6a:6f:47:22:e5:
87:ff:66:88:65:a1:5a:98:47:0c:fe:3a:87:b2:6c:
00:63:40:82:fb:92:96:c1:aa:2b:e0:54:f5:08:bc:
67:38:0d:97:0b:ca:38:1d:8f:4f:d1:f6:aa:fc:84:
e0:0a:1e:47:cb:88:59:1b:34:76:b8:0f:74:f5:02:
c5:aa:89:e4:82:20:e2:2d:85:b4:e4:dd:21:db:db:
a9:77:03:20:e0:56:bf:a9:b0:02:43:f7:e3:38:db:
45:54:5c:6e:f1:e0:d2:d8:2f:19:21:b7:a7:7b:17:
60:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:63:1E:D0:A5:A8:FE:6E:9E:27:48:0C:49:EA:D0:C5:DF:E6:2B:BA
X509v3 Authority Key Identifier:
keyid:1F:47:38:38:9C:B3:B9:98:EC:4F:A6:D4:27:2F:8D:D7:99:FB:C4:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H0c4OJyzuZjsT6bUJy-N15n7xKk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/YGMe0KWo_m6eJ0gMSerQxd_mK7o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/H0c4OJyzuZjsT6bUJy-N15n7xKk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.150.198.0/23
Signature Algorithm: sha256WithRSAEncryption
78:0b:3d:72:a4:38:68:78:cb:4d:a1:0f:53:e3:37:e7:7f:e0:
a0:55:a1:ed:f2:80:9e:8f:95:6d:2d:47:67:f2:1e:6e:88:6a:
2c:71:b3:76:9c:c1:db:27:8d:82:6b:f5:e6:93:0e:9b:39:a2:
fa:06:d3:f6:d1:43:e4:f8:50:47:72:9f:74:40:9d:0b:38:ec:
e7:6d:2a:a8:6a:c7:d1:5d:75:5b:ed:49:96:cb:44:d6:ed:b4:
a9:66:f5:fb:da:c2:1c:8b:36:ea:14:7e:23:10:e5:c8:1c:6c:
6e:6d:02:8e:cb:fe:40:84:ec:ea:44:c4:c8:41:aa:c3:21:34:
e2:f8:d5:13:97:51:26:68:c3:aa:f3:17:ee:08:19:19:97:a1:
41:19:13:ec:ac:b4:9e:0d:a3:9e:b3:e2:53:d0:b8:b0:a1:de:
c0:a3:6c:97:36:09:53:7b:07:a2:80:be:dd:50:36:45:77:bf:
00:74:8e:63:13:88:81:21:35:d1:c8:06:ba:61:c1:c2:89:ee:
d0:fb:28:ac:7a:c9:0f:4c:73:19:54:67:3d:7a:e9:ea:16:e8:
10:61:84:12:e9:ad:04:48:04:2b:38:b3:bc:83:c3:5a:2c:8f:
ca:7d:40:1d:06:fd:92:a4:ab:29:34:15:d5:04:9a:c4:07:81:
38:3b:03:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:42:21 2025 by rpki-client