Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/c0301d-5801-4ac6-b503-44ea64721c9e/1/YyQKNW-aaSEr0p2esm8D0Fg_nwI.roa
File: YyQKNW-aaSEr0p2esm8D0Fg_nwI.roa (raw, json)
Hash identifier: pTJx1G+lpAoztL9NOfbhzYw4YUxiJOEfyDad1p9GZA4=
Subject key identifier: 63:24:0A:35:6F:9A:69:21:2B:D2:9D:9E:B2:6F:03:D0:58:3F:9F:02
Certificate issuer: /CN=7ca643bb399c6d87adc4c7cba5d2b72fbd00d046
Certificate serial: 01857A88C5D63EAC5BE4F8B0A8BC6A51FC89
Authority key identifier: 7C:A6:43:BB:39:9C:6D:87:AD:C4:C7:CB:A5:D2:B7:2F:BD:00:D0:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fKZDuzmcbYetxMfLpdK3L70A0EY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/c0301d-5801-4ac6-b503-44ea64721c9e/1/YyQKNW-aaSEr0p2esm8D0Fg_nwI.roa
Signing time: Wed 04 Jan 2023 02:07:41 +0000
ROA not before: Wed 04 Jan 2023 02:07:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 9009
IP address blocks: 45.139.1.0/24 maxlen: 24
45.139.0.0/24 maxlen: 24
45.130.65.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:7a:88:c5:d6:3e:ac:5b:e4:f8:b0:a8:bc:6a:51:fc:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ca643bb399c6d87adc4c7cba5d2b72fbd00d046
Validity
Not Before: Jan 4 02:07:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=63240a356f9a69212bd29d9eb26f03d0583f9f02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:9d:50:cb:38:06:24:dc:2f:7b:19:2a:14:d9:
a4:1b:f8:20:cc:eb:98:24:16:95:43:66:a5:b9:e1:
9f:13:10:b9:b2:a5:ff:d3:11:e9:f4:a4:a4:f9:c5:
a4:2e:f2:5a:08:d5:b6:ec:69:8e:10:cb:1b:8a:37:
e5:15:6f:43:d4:c2:ea:fe:ca:01:b1:58:12:f9:b4:
64:8c:2a:c2:a8:7e:ea:5a:a2:5a:a2:e2:13:ab:72:
87:3c:54:cd:20:3c:eb:c8:d9:36:e5:d3:cf:7e:bd:
4b:8e:df:99:03:6d:46:92:29:77:06:1a:b8:a2:1f:
27:18:7c:e1:47:02:bb:d0:d4:fc:78:c4:cf:76:5b:
65:b1:83:5d:c6:a4:75:6b:22:d6:12:6f:6d:59:ca:
a2:bb:e3:77:18:0a:66:ec:00:df:46:18:21:42:43:
64:e3:fd:8b:19:f3:fa:e0:ce:9a:f7:d5:88:83:04:
24:60:89:22:ba:79:9d:fc:d6:5e:c6:2d:98:21:73:
b3:5d:d7:1c:8f:77:4a:02:ee:98:b3:01:8c:81:cb:
f2:9e:3d:df:a0:d0:5f:6f:4e:3c:f1:fa:e4:3d:33:
75:ef:c8:9c:1b:4e:4c:ab:6c:22:2b:b6:e0:bc:05:
e4:91:0e:fc:4c:35:7a:4a:c9:4b:33:f0:77:eb:d3:
1a:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:24:0A:35:6F:9A:69:21:2B:D2:9D:9E:B2:6F:03:D0:58:3F:9F:02
X509v3 Authority Key Identifier:
keyid:7C:A6:43:BB:39:9C:6D:87:AD:C4:C7:CB:A5:D2:B7:2F:BD:00:D0:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fKZDuzmcbYetxMfLpdK3L70A0EY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/c0301d-5801-4ac6-b503-44ea64721c9e/1/YyQKNW-aaSEr0p2esm8D0Fg_nwI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/c0301d-5801-4ac6-b503-44ea64721c9e/1/fKZDuzmcbYetxMfLpdK3L70A0EY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.130.65.0/24
45.139.0.0/23
Signature Algorithm: sha256WithRSAEncryption
ae:18:82:0e:3a:b2:83:d6:73:52:b5:b9:b2:87:2c:b4:9d:be:
3f:c0:08:19:f6:2b:04:7f:a8:34:45:bf:32:0c:1d:0e:72:24:
dd:b0:b7:46:5f:19:65:5e:c6:3c:18:e1:8d:2b:a7:a2:44:cb:
17:6a:5e:96:3d:08:ee:55:cc:3c:44:ed:9e:90:57:c3:cb:be:
b3:ac:20:69:6c:f7:86:02:7b:32:e4:da:f2:00:7d:13:5a:40:
07:1a:3e:9a:33:0b:9e:87:95:60:e5:ff:30:8c:1d:bc:ef:64:
37:3b:67:ba:9b:83:fa:b3:fa:fe:8f:98:74:f4:4c:38:25:e6:
be:12:f0:d7:dd:1f:30:23:82:f6:6f:7b:62:22:5c:29:84:38:
e0:68:b0:1b:2d:92:5d:e5:ec:83:27:73:6f:a9:b4:55:a1:45:
af:5b:9f:2b:3b:5c:a7:25:1d:1a:34:02:35:d5:52:85:7f:eb:
5b:04:92:e4:45:cd:0e:45:85:f7:33:b9:23:1a:96:bd:c7:8c:
29:fd:cb:df:3a:8b:71:fd:3e:00:8c:9b:24:ec:03:d0:72:78:
3a:d0:99:4f:ed:c7:92:f4:d3:bd:b9:c0:d9:66:7f:49:d2:14:
60:65:23:47:75:50:f5:27:5b:7e:cb:8c:fa:4b:3e:62:ba:43:
50:45:82:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:17:21 2025 by rpki-client