Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/951c8e-4a86-4c8e-9986-0bfbad4849cd/1/YGIXVqh5iES84vdYGAppCo5tKX0.roa
File: YGIXVqh5iES84vdYGAppCo5tKX0.roa (raw, json)
Hash identifier: hSQSU/jcHgH1xJT0HWcNQMhLYcuL1EenZcTTe9h3F1U=
Subject key identifier: 60:62:17:56:A8:79:88:44:BC:E2:F7:58:18:0A:69:0A:8E:6D:29:7D
Certificate issuer: /CN=1d8626749cbf84bcf42ebb2985b86dee830e5c14
Certificate serial: 19E3D3E3
Authority key identifier: 1D:86:26:74:9C:BF:84:BC:F4:2E:BB:29:85:B8:6D:EE:83:0E:5C:14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HYYmdJy_hLz0Lrsphbht7oMOXBQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/951c8e-4a86-4c8e-9986-0bfbad4849cd/1/YGIXVqh5iES84vdYGAppCo5tKX0.roa
Signing time: Sat 01 Jan 2022 02:57:59 +0000
ROA not before: Sat 01 Jan 2022 02:57:59 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211471
IP address blocks: 217.150.221.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 434361315 (0x19e3d3e3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d8626749cbf84bcf42ebb2985b86dee830e5c14
Validity
Not Before: Jan 1 02:57:59 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=60621756a8798844bce2f758180a690a8e6d297d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:f6:e4:85:4e:1e:76:14:a1:b4:87:eb:75:23:
23:74:70:e1:66:2b:c5:6f:4a:6e:59:16:86:2a:e0:
f7:dc:b4:b8:9c:bd:d9:7b:24:56:97:9d:da:bf:3f:
c0:eb:3f:d9:0b:2b:98:41:65:94:75:0e:c5:d3:c2:
a7:7e:76:b2:6d:59:91:52:64:c7:8c:1c:c3:b9:d5:
ea:be:49:d9:49:3e:af:d0:de:6e:35:a9:df:71:b5:
0e:5a:31:ef:30:10:67:95:db:86:3a:6d:7e:26:69:
1b:0f:00:3a:f9:e3:d3:9f:e2:a9:84:01:8d:8c:bb:
60:86:ae:8c:02:07:9e:5b:73:ea:a0:d7:14:6d:ca:
01:08:2b:e3:b2:93:54:39:57:6c:a9:29:ce:d0:ea:
39:b3:cc:42:a4:43:e2:a4:b1:2a:a2:81:06:88:9c:
94:28:f1:25:20:c9:c2:d9:65:49:95:88:18:f1:1e:
63:d6:36:48:fd:42:d5:17:11:ad:9e:8c:05:cf:30:
4c:ae:73:05:bc:2f:dd:83:60:b9:fd:10:39:ed:c3:
19:eb:fb:32:b9:01:a6:b7:61:9c:ee:9a:93:77:50:
52:08:57:10:bf:78:12:c2:44:81:35:c9:0c:e2:5f:
c8:8b:a3:12:9d:56:13:8c:bb:46:0a:0b:74:b1:25:
ed:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:62:17:56:A8:79:88:44:BC:E2:F7:58:18:0A:69:0A:8E:6D:29:7D
X509v3 Authority Key Identifier:
keyid:1D:86:26:74:9C:BF:84:BC:F4:2E:BB:29:85:B8:6D:EE:83:0E:5C:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HYYmdJy_hLz0Lrsphbht7oMOXBQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/951c8e-4a86-4c8e-9986-0bfbad4849cd/1/YGIXVqh5iES84vdYGAppCo5tKX0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/951c8e-4a86-4c8e-9986-0bfbad4849cd/1/HYYmdJy_hLz0Lrsphbht7oMOXBQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.150.221.0/24
Signature Algorithm: sha256WithRSAEncryption
05:9a:34:e6:82:6a:35:76:2e:0e:c0:e1:40:32:7b:41:2d:fe:
bc:a1:45:ec:a0:c7:64:00:fb:46:a2:52:d3:34:d1:f3:8e:e4:
78:57:60:6a:87:fa:84:38:61:3b:7d:58:44:a2:fa:f3:cb:dc:
96:f9:3c:a5:90:2a:60:a9:06:7f:74:4d:6e:77:34:49:64:55:
35:11:a4:2a:2b:ee:5c:8b:88:16:c1:e5:86:5a:d2:78:47:27:
f6:69:63:4c:e4:41:11:5d:d0:00:c0:da:ab:96:3f:45:ce:d3:
c7:b7:f0:1b:13:2c:53:d6:47:21:4b:29:7e:87:80:9a:88:80:
0c:4b:17:dd:4f:5f:29:a2:bf:b8:14:3e:47:1c:2c:c9:3d:a5:
0a:98:b8:3b:5f:fc:0a:2c:d6:90:71:c4:99:60:b0:16:f3:6a:
e2:70:f3:99:46:1d:c5:3c:cd:fe:f9:c9:7b:20:93:b1:a9:85:
9c:06:1f:16:ae:2d:bf:97:4b:c4:de:56:82:27:4d:31:0c:1a:
45:bc:3c:ce:a8:50:a1:95:d3:5a:0d:3c:50:0f:4d:89:71:51:
d5:fd:9d:98:44:7b:1d:a9:18:f5:50:a3:8c:37:ce:e4:fa:2a:
1c:1f:1d:53:48:86:cc:8e:4b:e1:08:39:48:ca:76:d8:3b:9b:
9b:5a:f4:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 05:47:44 2025 by rpki-client