Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/4bcb1b-ff41-48e0-8db8-6212ac49ca3b/1/Y4tZQQUGw4dSkPgYC3q1W9aHI5c.roa
File: Y4tZQQUGw4dSkPgYC3q1W9aHI5c.roa (raw, json)
Hash identifier: KjniyHe6SnwQInW1GiWBavkeS+VVGiTFr72aG7JyQ4A=
Subject key identifier: 63:8B:59:41:05:06:C3:87:52:90:F8:18:0B:7A:B5:5B:D6:87:23:97
Certificate issuer: /CN=ddb71471373bb0603c356eeded4b918292b5beee
Certificate serial: 4AAB3D
Authority key identifier: DD:B7:14:71:37:3B:B0:60:3C:35:6E:ED:ED:4B:91:82:92:B5:BE:EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3bcUcTc7sGA8NW7t7UuRgpK1vu4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/4bcb1b-ff41-48e0-8db8-6212ac49ca3b/1/Y4tZQQUGw4dSkPgYC3q1W9aHI5c.roa
Signing time: Wed 22 Jun 2022 09:26:44 +0000
ROA not before: Wed 22 Jun 2022 09:26:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1136
IP address blocks: 145.8.178.0/24 maxlen: 24
145.8.177.0/24 maxlen: 24
145.8.176.0/24 maxlen: 24
145.8.179.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4893501 (0x4aab3d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddb71471373bb0603c356eeded4b918292b5beee
Validity
Not Before: Jun 22 09:26:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=638b59410506c3875290f8180b7ab55bd6872397
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:18:11:3d:7f:14:a8:8d:89:00:e6:ac:29:cd:
ff:b7:cf:89:9d:e3:16:0c:a5:9e:80:e6:01:11:5b:
b9:13:1e:cb:c4:1a:21:63:43:88:3c:38:5e:7a:db:
b5:d9:0a:36:83:04:a6:66:0b:7a:02:88:da:f5:1f:
d9:78:ff:4d:55:d5:22:04:d9:49:ec:83:cb:4e:31:
fa:fc:6e:5d:de:ed:b9:4e:cc:2f:95:59:97:a4:aa:
a9:e1:01:fc:96:44:d6:4a:d8:ea:2b:8b:5e:17:54:
89:04:7f:99:25:d4:e9:c2:f0:67:8c:1c:88:80:ef:
f7:2f:8f:cc:56:da:8d:0d:c1:87:75:9f:03:c8:8d:
f6:a5:48:5a:cc:72:76:e9:61:2b:1c:67:5c:e0:6b:
08:63:d9:f5:70:22:0b:0d:64:75:78:69:16:71:ca:
a3:03:90:c0:9d:54:b1:14:72:71:e1:84:3e:2e:5f:
c2:c8:6f:73:62:70:0b:8f:d6:dd:fd:f0:62:f5:7c:
4f:5a:31:6b:70:2b:63:26:c8:d3:85:b7:4c:2c:a7:
12:04:15:38:eb:4b:71:c8:cb:9a:52:3a:05:47:aa:
48:05:c9:a1:4d:6d:c4:2c:c0:02:1e:c2:9f:64:1c:
4f:8e:bd:4a:79:94:2c:9c:93:38:8f:c6:73:1e:af:
54:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:8B:59:41:05:06:C3:87:52:90:F8:18:0B:7A:B5:5B:D6:87:23:97
X509v3 Authority Key Identifier:
keyid:DD:B7:14:71:37:3B:B0:60:3C:35:6E:ED:ED:4B:91:82:92:B5:BE:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3bcUcTc7sGA8NW7t7UuRgpK1vu4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/4bcb1b-ff41-48e0-8db8-6212ac49ca3b/1/Y4tZQQUGw4dSkPgYC3q1W9aHI5c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/4bcb1b-ff41-48e0-8db8-6212ac49ca3b/1/3bcUcTc7sGA8NW7t7UuRgpK1vu4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.8.176.0/22
Signature Algorithm: sha256WithRSAEncryption
3b:aa:89:d9:9a:31:c9:9c:b2:65:e4:98:56:36:cb:6b:f5:38:
c6:03:c8:41:7c:f5:62:db:29:03:1b:26:90:74:f5:b6:b1:8c:
4f:5e:d7:62:41:91:d9:2a:48:3d:12:75:cb:13:ce:ef:e5:a8:
4a:20:2d:c9:8d:6d:14:b8:cc:4e:9a:bc:ed:43:cb:34:76:02:
b9:07:e6:9a:49:45:5b:b9:4e:12:2e:d9:9b:b5:ee:c2:fa:cd:
f7:0a:57:e5:6f:80:6e:b7:76:86:32:10:a6:95:5d:57:06:1e:
19:86:b9:a0:be:c4:da:ba:cc:b3:5e:fc:cf:a1:57:10:c1:e5:
94:2b:08:45:c8:20:3d:8e:34:4a:50:13:ec:e8:9f:1f:72:e8:
e7:1d:3a:bf:d3:b5:8c:dd:a1:bf:f8:53:d5:ae:c1:6c:55:ce:
69:26:28:b2:12:31:94:63:cb:13:a3:50:52:e8:b3:6b:e4:2a:
99:7f:32:9e:ff:4c:df:7c:de:98:b8:94:9d:40:a1:24:fc:0e:
36:24:48:43:5f:c3:84:e9:1e:ab:bb:3e:7e:70:04:a1:fd:36:
8c:a0:6e:f3:9b:cc:a1:59:f2:b6:54:47:67:d7:04:90:18:5b:
21:3e:9c:03:18:7c:be:47:ba:53:1f:38:8c:ce:c9:19:00:1f:
69:f4:f0:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 22:04:14 2025 by rpki-client