Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/YShvISC7oxCCC4CXIjredoiKhd8.roa
File: YShvISC7oxCCC4CXIjredoiKhd8.roa (raw, json)
Hash identifier: G0H2UWzpz6vd7Bnof8IEdnzLMMfw1S77OOg42TTe4jQ=
Subject key identifier: 61:28:6F:21:20:BB:A3:10:82:0B:80:97:22:3A:DE:76:88:8A:85:DF
Certificate issuer: /CN=a576eb2cc462e6e4bf0de69b9f634875debbaae2
Certificate serial: 0194244498DF9111227FBBA4D34C925273FB
Authority key identifier: A5:76:EB:2C:C4:62:E6:E4:BF:0D:E6:9B:9F:63:48:75:DE:BB:AA:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/YShvISC7oxCCC4CXIjredoiKhd8.roa
Signing time: Wed 01 Jan 2025 23:47:42 +0000
ROA not before: Wed 01 Jan 2025 23:47:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 197730
IP address blocks: 45.130.180.0/24 maxlen: 24
45.130.181.0/24 maxlen: 24
45.130.182.0/24 maxlen: 24
45.130.183.0/24 maxlen: 24
45.136.184.0/22 maxlen: 24
45.136.185.0/24 maxlen: 24
45.136.186.0/24 maxlen: 24
45.136.187.0/24 maxlen: 24
62.106.75.0/24 maxlen: 24
185.222.43.0/24 maxlen: 24
185.241.58.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:44:98:df:91:11:22:7f:bb:a4:d3:4c:92:52:73:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a576eb2cc462e6e4bf0de69b9f634875debbaae2
Validity
Not Before: Jan 1 23:47:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=61286f2120bba310820b8097223ade76888a85df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:9b:ca:cb:be:af:20:0f:fe:86:02:8c:0a:13:
24:84:26:a4:92:7f:ca:ba:37:56:f7:54:01:50:a3:
6a:d2:fd:64:7f:d5:da:ea:d0:9d:fe:61:bd:db:ba:
94:5f:12:01:51:b1:fc:0a:a5:b5:3f:d8:b7:2f:80:
6b:ff:f6:30:af:3e:4f:13:60:fb:d0:0a:4c:a2:c4:
1c:4d:70:27:80:97:82:1e:47:1c:4f:e3:a1:b8:6b:
c9:59:7d:67:70:a9:5a:a2:c1:c9:f1:0f:fc:aa:f5:
3b:21:d2:85:5d:01:8a:75:d6:9d:7d:30:7a:65:5e:
f3:47:10:37:b9:27:a8:ff:da:b1:9e:46:e5:6f:5a:
e3:1e:cd:19:3e:58:5b:6d:e1:09:28:6d:d1:f5:8a:
6b:e3:26:76:75:b0:fa:b0:86:96:cd:71:ae:7b:91:
44:b8:8e:1d:c5:e4:e2:71:6c:ff:64:18:09:02:fe:
78:59:27:3c:97:57:a3:9b:08:f2:3f:33:52:89:16:
cb:26:3c:31:fc:09:af:72:ce:3c:82:f6:c2:e3:cd:
07:fa:41:54:43:f7:d5:a6:61:f4:e1:13:87:10:de:
46:84:06:81:17:ec:79:29:d6:4d:2a:f2:f2:16:32:
f0:73:4b:bd:b3:5e:fd:ae:cd:39:f0:6a:86:4d:c6:
e0:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:28:6F:21:20:BB:A3:10:82:0B:80:97:22:3A:DE:76:88:8A:85:DF
X509v3 Authority Key Identifier:
keyid:A5:76:EB:2C:C4:62:E6:E4:BF:0D:E6:9B:9F:63:48:75:DE:BB:AA:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/YShvISC7oxCCC4CXIjredoiKhd8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/pXbrLMRi5uS_Deabn2NIdd67quI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.130.180.0/22
45.136.184.0/22
62.106.75.0/24
185.222.43.0/24
185.241.58.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:1c:55:95:f8:1e:30:a4:a9:25:6a:97:de:be:48:be:0d:3f:
ce:95:71:a6:ca:1e:8c:a1:0b:fd:68:e3:fd:65:a1:ff:0d:e6:
ec:42:29:a9:a5:13:d8:dd:98:e5:23:d9:fd:3e:54:cc:f7:bc:
47:5c:8c:27:6f:5d:ec:33:68:e3:41:37:8a:83:1b:08:08:fe:
a3:2d:89:24:11:18:eb:c9:1f:03:31:1f:83:e7:65:6b:9a:79:
8b:af:70:51:97:c3:df:2d:cd:ed:6c:25:5b:f4:10:48:dc:50:
51:ee:18:23:bb:a5:7e:ea:78:c7:08:55:4e:80:11:da:fc:ce:
55:44:50:8e:a4:4c:3e:77:91:5c:46:a3:d9:58:c7:07:7d:49:
86:5f:32:5d:b1:25:1e:a0:2d:80:30:72:4f:33:30:b3:c7:fa:
3c:cd:f1:bd:88:f5:dc:c4:c0:d3:0a:6c:00:12:a3:9d:04:fc:
a3:95:76:b4:40:1c:6a:e6:79:c8:62:35:33:54:82:1e:41:6f:
3c:a9:fe:f6:71:6f:bf:d9:dd:35:3d:bf:58:27:6a:df:22:f3:
b4:5b:af:57:3b:96:55:4d:0f:d6:c7:b1:e0:7c:33:94:e1:60:
27:14:88:f3:89:ff:c6:f2:68:a7:e7:65:90:55:a3:0d:37:a9:
ef:ef:72:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:24:26 2025 by rpki-client