Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/772cbc-7e69-4c91-86a3-3661b1ebbcfb/1/yBBzstTaOk57G_P5zLCVHKExcZ8.roa
File: yBBzstTaOk57G_P5zLCVHKExcZ8.roa (raw, json)
Hash identifier: mLlsvymN4uLLcemV8g47YSkzHhZQynCIXD4Wv9H9sKw=
Subject key identifier: C8:10:73:B2:D4:DA:3A:4E:7B:1B:F3:F9:CC:B0:95:1C:A1:31:71:9F
Certificate issuer: /CN=c276a8ba874c3fbddad344d03258b3e2c04d7bcb
Certificate serial: 019421438C12B1013FD9A2BC88FE75D21A71
Authority key identifier: C2:76:A8:BA:87:4C:3F:BD:DA:D3:44:D0:32:58:B3:E2:C0:4D:7B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wnaouodMP73a00TQMliz4sBNe8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/772cbc-7e69-4c91-86a3-3661b1ebbcfb/1/yBBzstTaOk57G_P5zLCVHKExcZ8.roa
Signing time: Wed 01 Jan 2025 09:47:42 +0000
ROA not before: Wed 01 Jan 2025 09:47:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51872
IP address blocks: 45.93.204.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:43:8c:12:b1:01:3f:d9:a2:bc:88:fe:75:d2:1a:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c276a8ba874c3fbddad344d03258b3e2c04d7bcb
Validity
Not Before: Jan 1 09:47:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c81073b2d4da3a4e7b1bf3f9ccb0951ca131719f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:31:49:5c:b5:5b:d3:28:a0:c8:0e:32:56:cc:
15:29:de:24:21:ae:78:9f:a6:ff:1d:ff:19:68:d2:
96:f1:f0:14:b0:de:fe:1c:52:91:ec:79:db:e4:74:
ea:84:d9:cb:82:11:70:bd:3c:23:17:73:92:08:e1:
de:1c:fe:fb:c6:47:7f:04:26:4d:28:de:62:17:8c:
d4:35:bc:4c:2a:16:3e:50:06:d9:8d:28:e5:d2:46:
b3:a1:b8:fb:de:df:05:13:77:e0:9b:ce:b5:ba:3f:
61:6c:c7:fe:29:49:b9:8f:bb:ed:00:1a:a1:33:1d:
51:86:00:ee:e0:22:75:fe:7e:19:aa:78:23:90:6c:
be:83:bb:49:54:8d:57:31:86:da:18:d0:84:10:b8:
a8:74:58:00:59:14:a9:61:fa:fa:b0:70:50:64:0a:
86:b4:33:f9:fa:f5:86:b1:98:94:e1:1b:23:c5:21:
d0:a1:d8:29:23:e9:57:1d:3f:5c:72:05:4c:e8:2a:
4a:af:15:f9:c3:ae:1a:31:35:ea:bb:08:e0:16:b9:
1f:ea:e4:08:e3:88:94:86:bf:f3:fe:45:4d:4d:5a:
0b:a0:a9:f2:a3:72:e8:44:c8:e2:9b:4e:ee:59:04:
35:ba:3c:e7:ed:3f:ce:92:36:00:5c:af:ad:36:8b:
f9:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:10:73:B2:D4:DA:3A:4E:7B:1B:F3:F9:CC:B0:95:1C:A1:31:71:9F
X509v3 Authority Key Identifier:
keyid:C2:76:A8:BA:87:4C:3F:BD:DA:D3:44:D0:32:58:B3:E2:C0:4D:7B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wnaouodMP73a00TQMliz4sBNe8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/772cbc-7e69-4c91-86a3-3661b1ebbcfb/1/yBBzstTaOk57G_P5zLCVHKExcZ8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/772cbc-7e69-4c91-86a3-3661b1ebbcfb/1/wnaouodMP73a00TQMliz4sBNe8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.93.204.0/22
Signature Algorithm: sha256WithRSAEncryption
7d:a9:cd:43:05:9b:c7:c7:4e:ad:1a:39:1a:48:c0:e4:ac:95:
21:9d:7f:5d:5d:57:a5:5e:0b:fc:ff:0f:a0:7d:1f:e6:2c:07:
e2:b2:47:e3:c6:b4:e7:88:46:a9:66:10:b0:01:44:a6:ff:82:
31:11:7b:36:b5:cb:88:9a:28:21:18:0b:7b:c9:87:d1:8d:55:
41:f1:a5:c5:cf:06:31:b5:06:e0:99:e9:90:59:b6:dd:20:ae:
39:d2:bd:fd:82:38:d8:3e:97:50:ff:72:5e:4e:dc:2b:69:2a:
82:8d:07:f8:07:e3:17:11:53:58:98:11:42:35:fb:a7:1d:07:
39:d5:82:d0:8b:a3:39:cb:3f:eb:b5:6a:c2:7b:51:87:71:42:
fb:73:25:6c:1e:c5:36:8a:30:12:ad:84:a0:6a:9b:44:4b:ee:
c3:61:ab:e7:4c:e3:ad:af:d4:73:97:bc:eb:14:e3:5e:d8:69:
c6:8e:41:17:6e:96:fc:01:fc:44:42:b2:60:f0:29:af:ea:38:
57:c7:49:0f:c3:21:a0:08:b6:51:f3:51:e7:20:56:64:5e:b5:
e9:71:6a:f6:97:c0:0f:23:21:94:6f:c5:ea:53:39:65:30:9c:
0f:15:c4:12:fd:db:7d:57:71:42:ac:d6:5e:cf:bc:b4:0c:2b:
d8:82:92:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:37:41 2025 by rpki-client