Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/yUQavGNFg2MDogixDVa8-Sbs3eQ.roa
File: yUQavGNFg2MDogixDVa8-Sbs3eQ.roa (raw, json)
Hash identifier: SWatdnMASBiC9XOcLfhD+eg83SQstV7HtoZLOKl5FZA=
Subject key identifier: C9:44:1A:BC:63:45:83:63:03:A2:08:B1:0D:56:BC:F9:26:EC:DD:E4
Certificate issuer: /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Certificate serial: 019421B234C640932A53D82A570B8428B3BF
Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/yUQavGNFg2MDogixDVa8-Sbs3eQ.roa
Signing time: Wed 01 Jan 2025 11:48:34 +0000
ROA not before: Wed 01 Jan 2025 11:48:34 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 29802
IP address blocks: 45.8.185.0/24 maxlen: 24
85.209.162.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b2:34:c6:40:93:2a:53:d8:2a:57:0b:84:28:b3:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Validity
Not Before: Jan 1 11:48:34 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c9441abc6345836303a208b10d56bcf926ecdde4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:cc:ba:1f:19:89:89:be:02:14:d8:56:b5:5e:
fe:be:60:a4:87:0e:f2:e8:4b:85:1d:6c:2b:22:4d:
95:aa:ca:17:14:96:16:5a:a1:93:89:4b:f7:3d:18:
94:ab:c2:8e:b7:ce:86:3f:8a:c9:f0:e4:09:89:4d:
df:30:05:42:61:59:8b:92:b9:2e:69:a7:cb:e1:7d:
2e:e6:5c:25:4c:43:85:82:52:7a:87:cc:15:ff:cf:
76:c6:27:f2:f8:d8:53:f4:2b:ac:48:fb:0d:22:3d:
6f:22:fc:0f:5f:37:3d:ec:79:9a:b3:90:3a:4d:af:
b6:9e:3f:fc:6f:67:ca:15:63:3a:92:42:5e:42:30:
58:53:ef:00:4e:c9:cc:d8:c2:91:57:9b:61:2c:8c:
3e:5e:25:f2:95:0d:7f:37:89:ce:69:e2:e6:eb:fe:
92:61:76:23:0c:09:b2:6a:c8:90:d2:3a:64:b3:fe:
eb:99:c1:94:c1:5c:d4:35:05:89:a9:c7:4e:18:d9:
35:6b:10:55:d4:b0:7a:9b:dc:ae:50:64:bd:81:4f:
cd:a9:1d:ad:79:c4:2d:6f:0f:0d:39:b6:c5:c7:83:
72:c9:83:f8:00:67:6d:b7:43:b9:6c:19:b7:7c:19:
6b:9b:dc:45:fa:ff:0b:cc:2a:31:b8:48:e5:d0:8e:
ed:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:44:1A:BC:63:45:83:63:03:A2:08:B1:0D:56:BC:F9:26:EC:DD:E4
X509v3 Authority Key Identifier:
keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/yUQavGNFg2MDogixDVa8-Sbs3eQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.8.185.0/24
85.209.162.0/24
Signature Algorithm: sha256WithRSAEncryption
a0:03:10:6e:8f:a9:9d:83:81:f6:01:4e:d3:3a:c6:7e:05:0a:
4a:8d:eb:f0:3d:05:ae:80:ab:f7:4a:cd:7c:68:dd:e9:43:18:
71:7e:da:b9:c1:fc:d3:17:1c:3f:b0:30:41:42:e2:ed:21:89:
44:11:e7:2a:85:e0:ce:42:2f:e0:0c:8b:70:90:bb:71:7b:20:
27:17:40:09:bd:71:b7:db:67:82:31:df:ab:55:d3:4a:b0:66:
13:98:79:9e:67:22:e2:32:4d:89:60:64:1e:77:d5:3f:5a:70:
bc:50:c6:a8:7e:d9:b9:1b:52:38:98:c8:d4:15:c7:4f:d4:37:
70:30:fb:04:e0:87:af:99:e9:3f:29:6e:2b:5b:1e:b6:80:d5:
ae:72:c5:db:50:b6:cd:08:79:5c:41:04:0d:03:73:fa:21:dd:
81:a3:f2:cf:62:c2:04:e9:21:cf:70:57:6b:de:ee:54:c8:76:
12:7e:bf:86:b8:48:f3:e6:73:7c:c0:4c:86:e4:1f:eb:71:49:
8c:9d:c3:bd:9f:c7:05:3d:67:41:fe:af:df:f3:01:be:7c:8c:
96:96:91:0b:cd:24:cb:8b:e6:fb:30:70:73:7a:9f:45:e2:df:
4b:9f:d7:69:df:d3:39:69:3d:b0:96:23:3a:f5:3e:06:4a:b3:
36:5a:7c:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 13:43:34 2025 by rpki-client