Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/d2e8d7-593f-4afb-b6b3-b9d8cfc19cec/1/YrKRXunBmmb1nmitbNEwYZOGYhA.roa
File: YrKRXunBmmb1nmitbNEwYZOGYhA.roa (raw, json)
Hash identifier: +5txGGiVKg9ufrK1NtAC6f9JbO6Rmo51yAT1WjrRfP4=
Subject key identifier: 62:B2:91:5E:E9:C1:9A:66:F5:9E:68:AD:6C:D1:30:61:93:86:62:10
Certificate issuer: /CN=545ab2a3712e2556a4434b8badd6c407a5673121
Certificate serial: 0A1F933E
Authority key identifier: 54:5A:B2:A3:71:2E:25:56:A4:43:4B:8B:AD:D6:C4:07:A5:67:31:21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VFqyo3EuJVakQ0uLrdbEB6VnMSE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/d2e8d7-593f-4afb-b6b3-b9d8cfc19cec/1/YrKRXunBmmb1nmitbNEwYZOGYhA.roa
Signing time: Sat 01 Jan 2022 06:55:37 +0000
ROA not before: Sat 01 Jan 2022 06:55:37 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 56727
IP address blocks: 178.237.48.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 169841470 (0xa1f933e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=545ab2a3712e2556a4434b8badd6c407a5673121
Validity
Not Before: Jan 1 06:55:37 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=62b2915ee9c19a66f59e68ad6cd1306193866210
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:e6:e8:09:5a:13:c3:af:52:e7:91:98:19:c8:
5c:19:cb:29:6c:d9:a7:84:0c:64:f6:c5:36:0a:bc:
72:1f:ed:86:72:75:de:2d:32:94:7d:2f:c9:28:e9:
49:5e:d6:d8:89:4c:eb:dd:c0:c6:4d:2f:97:aa:e4:
7b:76:61:8c:06:87:19:43:56:85:51:b3:91:9a:d5:
b6:45:5a:16:ca:9a:9d:70:c7:cb:34:73:77:95:c6:
fd:42:fc:f9:ed:57:8d:b9:77:19:3e:11:b9:12:90:
d0:ba:09:d7:b5:36:ba:6b:0d:5d:fe:88:87:99:17:
1e:a1:c0:49:83:79:14:3d:7c:72:8b:c1:e3:5a:b1:
c8:3a:00:7f:64:e4:61:73:30:4d:2e:20:99:7a:40:
37:f1:b0:8d:30:94:a4:52:f5:c2:f2:bf:b7:e5:2a:
65:a4:8d:aa:d6:a0:62:91:8f:f9:67:df:21:3c:0b:
eb:dc:f2:f6:ca:3e:54:1f:8a:a0:48:73:79:b2:90:
6b:d0:a0:c3:35:92:b7:b1:ec:0b:e9:23:15:07:fc:
cc:95:59:20:ef:1e:c5:e5:81:21:a2:18:40:26:fd:
1d:63:50:a1:86:1a:07:b9:a0:2b:63:ea:a6:83:31:
22:f0:29:a2:d6:3c:62:df:d4:ee:a0:33:da:9a:3e:
e1:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:B2:91:5E:E9:C1:9A:66:F5:9E:68:AD:6C:D1:30:61:93:86:62:10
X509v3 Authority Key Identifier:
keyid:54:5A:B2:A3:71:2E:25:56:A4:43:4B:8B:AD:D6:C4:07:A5:67:31:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VFqyo3EuJVakQ0uLrdbEB6VnMSE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/d2e8d7-593f-4afb-b6b3-b9d8cfc19cec/1/YrKRXunBmmb1nmitbNEwYZOGYhA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/d2e8d7-593f-4afb-b6b3-b9d8cfc19cec/1/VFqyo3EuJVakQ0uLrdbEB6VnMSE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.237.48.0/22
Signature Algorithm: sha256WithRSAEncryption
51:cd:0a:15:04:ce:09:5f:27:91:4d:09:27:f0:6c:43:56:58:
bb:9b:5b:f4:95:bf:17:a7:fd:28:5a:9a:a3:bc:62:dd:28:18:
1c:bb:4c:0e:2d:39:2d:b0:7c:76:ac:29:da:24:f3:4c:66:45:
47:32:01:4e:0d:e0:5d:23:0b:c7:8c:cb:a2:c3:39:97:df:aa:
11:d0:0a:60:88:7c:dc:ed:b1:85:e0:37:7f:e0:a7:1e:6f:f1:
ef:60:49:64:6e:2c:95:af:4a:41:88:ad:05:56:5e:9c:87:06:
23:24:4d:1b:fb:10:a2:d6:a1:04:b6:74:3b:f1:19:15:22:06:
8c:3a:23:12:5e:16:16:22:da:ff:02:ed:71:ee:97:5c:1e:f6:
63:db:67:f6:52:59:8b:2e:4a:94:9d:c3:33:67:b7:28:30:2c:
f8:cd:a6:b5:06:ea:c4:2f:76:7d:81:43:7b:f7:61:a0:3c:13:
6c:87:24:14:bb:5e:c5:0d:9e:42:2e:67:a7:8e:8f:ca:eb:f6:
29:18:e5:0e:02:f4:57:13:4b:ea:e8:64:b2:28:0a:89:59:e4:
2a:7d:d8:73:1d:cb:63:8a:c9:7e:5c:30:60:dd:80:da:4d:70:
ec:7e:5f:b4:cb:14:bb:96:f8:74:16:b6:fd:c8:4d:38:94:35:
34:86:69:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:46:34 2025 by rpki-client