Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/f3549f-18f7-48b0-901d-25cc9d6cfbb9/1/YY3Qm7qXSRolvYB8-EVRsch9Alc.roa
File: YY3Qm7qXSRolvYB8-EVRsch9Alc.roa (raw, json)
Hash identifier: CGD936LQGGht3os7WddcWJN6nDx+7ZqW/j3EYuV1RQM=
Subject key identifier: 61:8D:D0:9B:BA:97:49:1A:25:BD:80:7C:F8:45:51:B1:C8:7D:02:57
Certificate issuer: /CN=23446da7a70bce773ec2bc1655aae30c3c18412c
Certificate serial: 01938F71578038EF67674D1E8036222D330D
Authority key identifier: 23:44:6D:A7:A7:0B:CE:77:3E:C2:BC:16:55:AA:E3:0C:3C:18:41:2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I0Rtp6cLznc-wrwWVarjDDwYQSw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/f3549f-18f7-48b0-901d-25cc9d6cfbb9/1/YY3Qm7qXSRolvYB8-EVRsch9Alc.roa
Signing time: Wed 04 Dec 2024 02:13:10 +0000
ROA not before: Wed 04 Dec 2024 02:13:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 213772
IP address blocks: 45.153.237.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:8f:71:57:80:38:ef:67:67:4d:1e:80:36:22:2d:33:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23446da7a70bce773ec2bc1655aae30c3c18412c
Validity
Not Before: Dec 4 02:13:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=618dd09bba97491a25bd807cf84551b1c87d0257
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:d2:ef:5d:75:50:81:69:77:ad:0a:7e:e7:e6:
d9:9a:e7:a2:5a:30:38:8d:7b:75:c1:f0:d9:99:fa:
c7:59:c2:f5:bb:39:b2:b9:57:01:fd:b6:bd:94:c1:
d2:18:9e:f2:a0:34:1d:50:56:8d:d4:f9:7b:53:3b:
b9:f6:6d:e0:ea:8b:a4:4b:17:02:0a:68:60:10:c2:
07:97:b0:7c:4e:4c:40:85:e2:28:b7:45:c6:b9:02:
e4:3a:dc:43:9e:da:73:72:2b:23:f4:34:2b:91:12:
04:a6:d3:5c:c6:9b:b8:8f:9e:50:a4:a5:f1:c7:c3:
06:d2:c5:d8:1d:55:77:9c:a7:a8:d2:6d:07:0a:01:
97:24:91:e1:29:b0:f5:80:8b:44:81:20:97:7a:86:
81:f2:f2:67:55:d9:38:75:8c:e1:83:ff:af:ff:44:
ed:21:14:7b:c1:cc:24:33:39:a2:36:ea:86:83:27:
5a:2d:e5:ec:aa:08:f7:ce:4d:be:c6:e4:e6:27:d3:
9e:80:d0:06:dc:ec:eb:64:2f:ce:37:2b:1a:50:17:
7b:a0:63:18:90:26:8f:de:dd:ce:6a:fe:4f:1c:3d:
ed:05:1a:32:1f:00:92:b0:ed:bb:d1:96:8b:4a:0b:
40:0f:ae:07:d2:2f:60:2b:b5:0a:97:36:fb:15:d7:
57:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:8D:D0:9B:BA:97:49:1A:25:BD:80:7C:F8:45:51:B1:C8:7D:02:57
X509v3 Authority Key Identifier:
keyid:23:44:6D:A7:A7:0B:CE:77:3E:C2:BC:16:55:AA:E3:0C:3C:18:41:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I0Rtp6cLznc-wrwWVarjDDwYQSw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/f3549f-18f7-48b0-901d-25cc9d6cfbb9/1/YY3Qm7qXSRolvYB8-EVRsch9Alc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/f3549f-18f7-48b0-901d-25cc9d6cfbb9/1/I0Rtp6cLznc-wrwWVarjDDwYQSw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.153.237.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:60:ea:06:83:f2:96:12:1a:78:2c:60:49:fc:08:bb:7c:14:
30:9c:de:84:5e:7a:a7:77:c7:14:0c:05:d0:4b:4b:f9:88:13:
dc:1f:4a:4b:1b:65:5b:a2:78:0c:67:b0:60:8b:e8:10:f5:11:
ce:36:50:de:bb:e0:0a:0b:dd:10:75:00:ba:6e:4e:44:60:30:
56:b8:57:01:a8:39:9b:62:13:59:ab:57:d4:af:5b:c8:22:78:
5b:1f:01:9c:d6:49:47:85:d0:be:c2:1e:f5:14:c4:19:f5:de:
2d:52:41:89:68:36:14:06:4f:79:6d:e2:a8:72:c1:87:41:03:
13:c4:0b:e5:e5:a4:be:58:e3:d5:ae:cf:1c:42:6d:33:ca:27:
57:cc:b0:94:77:e4:17:36:ca:8b:58:23:3f:e1:d6:0e:77:e7:
e7:c9:ea:dc:70:4b:14:c4:be:ff:e9:3e:5d:4c:89:46:57:1d:
ef:46:2f:48:14:04:33:37:c1:64:fa:9a:9b:5a:1d:25:df:09:
4a:38:7b:5c:ee:d5:94:94:92:0a:3b:a2:86:e7:14:17:4a:16:
77:15:2c:44:49:74:60:f1:47:03:ef:50:b1:04:25:58:bd:90:
55:0d:d4:16:05:42:04:9f:8b:c9:e8:2e:fe:93:39:97:0c:2a:
99:d2:7f:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 09:08:10 2025 by rpki-client