Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/963a83-d2d1-464c-bdb0-b1a9793ee324/1/7ybz4qgk4RPqp8xdPC6X_E4gtbM.roa
File: 7ybz4qgk4RPqp8xdPC6X_E4gtbM.roa (raw, json)
Hash identifier: ogGugsf7sS6PtDmol4WlYpBYEAXHnn37bVsSaSAg3P8=
Subject key identifier: EF:26:F3:E2:A8:24:E1:13:EA:A7:CC:5D:3C:2E:97:FC:4E:20:B5:B3
Certificate issuer: /CN=a57f291818d8719738268d844994a2e10824d4c9
Certificate serial: 0194221FD1998DEC684BDDD345EB5793A0A1
Authority key identifier: A5:7F:29:18:18:D8:71:97:38:26:8D:84:49:94:A2:E1:08:24:D4:C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pX8pGBjYcZc4Jo2ESZSi4Qgk1Mk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/963a83-d2d1-464c-bdb0-b1a9793ee324/1/7ybz4qgk4RPqp8xdPC6X_E4gtbM.roa
Signing time: Wed 01 Jan 2025 13:48:18 +0000
ROA not before: Wed 01 Jan 2025 13:48:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48072
IP address blocks: 45.90.194.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:d1:99:8d:ec:68:4b:dd:d3:45:eb:57:93:a0:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a57f291818d8719738268d844994a2e10824d4c9
Validity
Not Before: Jan 1 13:48:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ef26f3e2a824e113eaa7cc5d3c2e97fc4e20b5b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:52:00:b6:64:cd:83:3c:e8:ea:d9:99:8d:27:
a3:79:5b:64:11:f7:21:08:5f:26:47:ca:cc:02:e0:
92:4c:22:b8:b9:a8:ca:41:7c:d6:5f:a5:55:bf:de:
48:78:2e:02:f2:fe:4f:f4:0c:bd:d9:93:b1:da:35:
86:a2:7e:04:36:92:02:a3:40:f1:a6:16:76:58:49:
4d:78:08:c1:93:70:4f:fe:a5:7c:75:33:5e:03:cd:
1f:8a:90:08:9f:32:f0:24:49:e0:d6:f3:c9:0a:7d:
cc:b8:0a:6f:56:b1:56:56:4b:be:a5:19:16:ae:c7:
f6:d5:7e:6d:f9:84:aa:2d:13:f1:4e:5c:0c:e7:a0:
ee:e1:22:63:84:38:52:6c:d3:07:a3:1d:f6:a5:20:
1c:f0:34:18:45:59:d5:d6:44:15:8d:91:72:08:0b:
39:56:49:b2:07:1b:47:4d:b3:cb:96:54:23:7d:09:
18:13:20:d6:ee:ee:95:3b:13:40:b0:0f:f3:ab:bd:
75:65:5d:74:ba:b4:12:5c:10:97:11:05:72:c5:e6:
ac:3e:2e:03:16:95:f8:1d:2a:5d:80:46:91:9d:17:
2a:a7:d0:0c:52:8b:1a:71:5e:96:35:55:45:93:4e:
31:28:7b:f5:b9:47:4e:33:9b:02:52:91:2b:02:9d:
c2:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:26:F3:E2:A8:24:E1:13:EA:A7:CC:5D:3C:2E:97:FC:4E:20:B5:B3
X509v3 Authority Key Identifier:
keyid:A5:7F:29:18:18:D8:71:97:38:26:8D:84:49:94:A2:E1:08:24:D4:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pX8pGBjYcZc4Jo2ESZSi4Qgk1Mk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/963a83-d2d1-464c-bdb0-b1a9793ee324/1/7ybz4qgk4RPqp8xdPC6X_E4gtbM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/963a83-d2d1-464c-bdb0-b1a9793ee324/1/pX8pGBjYcZc4Jo2ESZSi4Qgk1Mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.90.194.0/23
Signature Algorithm: sha256WithRSAEncryption
23:65:1d:fa:91:bd:44:7a:b1:6d:81:d2:6c:14:ed:93:b3:30:
ae:d4:a4:30:58:56:53:fe:c4:79:73:fa:01:79:87:5c:64:2e:
e6:27:0e:5e:1b:78:66:7a:7f:8a:f2:e9:8e:a8:60:d7:16:ce:
66:04:45:4b:0d:c0:af:6d:94:5f:c0:43:97:9d:d3:9c:a1:5c:
76:c3:24:80:c0:21:71:53:13:bc:d4:57:3f:00:c8:5d:44:b7:
4a:07:cd:4b:c2:87:18:92:88:57:6b:23:e9:ae:fb:9b:54:5f:
34:80:d0:00:46:d2:8e:64:f9:57:29:55:c6:81:f3:22:52:25:
b7:1c:3a:bb:4e:90:17:d3:ff:e0:ad:2f:76:d2:2e:83:8a:6f:
4b:21:fe:0c:7c:20:83:5c:0c:42:37:4e:c4:53:e3:4a:d7:28:
eb:39:8d:2e:11:04:95:11:39:41:87:73:42:d8:59:f9:b3:09:
c8:21:e0:7e:b8:16:4a:9f:34:86:d3:3a:77:b4:f0:85:83:da:
4d:94:10:bd:00:1b:0b:26:fd:2d:cf:71:eb:fc:25:dc:a5:d3:
b0:ec:a0:39:da:3a:58:4e:bd:54:0d:9e:ba:08:9c:6b:c4:8a:
05:ed:ee:93:30:13:52:16:0d:f6:52:af:76:b1:23:e3:e6:53:
63:68:d0:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:40:00 2025 by rpki-client