Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/eb239a-33c8-4dbd-bc96-3259496e7c5f/1/YL1dfaTiXQOYSP-r8hQfmS39jt0.roa
File: YL1dfaTiXQOYSP-r8hQfmS39jt0.roa (raw, json)
Hash identifier: raktwKOvcacAZteJQjaVAO8oTOPtXuomvzGebAO166U=
Subject key identifier: 60:BD:5D:7D:A4:E2:5D:03:98:48:FF:AB:F2:14:1F:99:2D:FD:8E:DD
Certificate issuer: /CN=624039399017fa093dc8d503799f6ca403f0bd05
Certificate serial: 018332DD7107765CA3F439CF7837AD052B35
Authority key identifier: 62:40:39:39:90:17:FA:09:3D:C8:D5:03:79:9F:6C:A4:03:F0:BD:05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YkA5OZAX-gk9yNUDeZ9spAPwvQU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/eb239a-33c8-4dbd-bc96-3259496e7c5f/1/YL1dfaTiXQOYSP-r8hQfmS39jt0.roa
Signing time: Mon 12 Sep 2022 18:01:56 +0000
ROA not before: Mon 12 Sep 2022 18:01:56 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 56683
IP address blocks: 45.8.216.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:32:dd:71:07:76:5c:a3:f4:39:cf:78:37:ad:05:2b:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=624039399017fa093dc8d503799f6ca403f0bd05
Validity
Not Before: Sep 12 18:01:56 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=60bd5d7da4e25d039848ffabf2141f992dfd8edd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:53:b5:42:df:af:eb:6e:a8:0b:5d:67:69:2c:
e4:a8:ea:8e:68:25:11:fc:78:26:30:a8:79:64:20:
9d:87:8d:13:2f:b8:7c:4c:37:bb:b2:37:99:c2:70:
73:84:f8:d7:b5:4d:ea:61:92:58:62:24:6c:4b:1a:
f0:a7:23:e6:ca:8a:d0:58:bd:b4:c2:97:44:69:ae:
7f:64:8b:cb:8f:b6:f5:b2:73:15:d0:e9:fe:42:87:
21:d7:11:b8:2e:1c:e4:70:9b:a9:a6:58:06:1c:8f:
03:6d:30:80:21:a5:78:49:50:64:d2:66:3d:95:40:
e1:cc:c8:8a:16:37:4f:1f:0e:d0:54:e0:fb:ad:51:
8b:55:cc:34:df:96:fe:a2:e9:98:b9:63:7a:be:53:
fe:12:24:b2:59:51:98:c5:de:6e:b9:06:3c:84:d1:
e7:da:2c:8c:6f:45:6e:a3:4d:92:f5:54:ce:77:39:
fe:85:d5:41:2f:f7:79:82:05:a4:fb:f1:28:ed:07:
7d:42:43:4e:4a:0b:81:97:dc:f1:31:57:d7:c6:11:
e9:2d:db:81:97:b9:fb:a0:20:ac:7c:bb:9d:dd:14:
97:df:ac:2d:b5:e0:76:42:29:23:0c:1d:31:1d:c1:
9f:cf:e5:b9:31:12:88:b7:62:b4:4d:3c:05:d6:2c:
ba:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:BD:5D:7D:A4:E2:5D:03:98:48:FF:AB:F2:14:1F:99:2D:FD:8E:DD
X509v3 Authority Key Identifier:
keyid:62:40:39:39:90:17:FA:09:3D:C8:D5:03:79:9F:6C:A4:03:F0:BD:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YkA5OZAX-gk9yNUDeZ9spAPwvQU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/eb239a-33c8-4dbd-bc96-3259496e7c5f/1/YL1dfaTiXQOYSP-r8hQfmS39jt0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/eb239a-33c8-4dbd-bc96-3259496e7c5f/1/YkA5OZAX-gk9yNUDeZ9spAPwvQU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.8.216.0/24
Signature Algorithm: sha256WithRSAEncryption
97:6c:95:a7:96:f9:26:be:b6:f4:37:19:92:39:c1:87:bf:89:
2a:49:77:84:bb:1f:7c:5f:f6:54:9c:f5:4f:91:b5:d2:d2:70:
88:93:47:16:19:d6:7d:a0:ac:ea:f9:d3:6f:78:3c:c5:e2:36:
e0:af:28:ce:f6:d5:8a:58:61:ce:5b:cf:c9:ca:0a:f3:3c:69:
b4:80:68:5c:07:4f:ad:56:79:77:3e:f9:ed:24:fb:2d:66:86:
e8:96:7a:9b:d9:db:ad:ab:71:1c:27:25:67:62:30:6e:26:bd:
9c:6b:4b:30:4c:16:37:31:17:44:61:ce:25:4c:35:0f:8d:7a:
a1:73:81:4b:99:6b:08:72:f2:b6:1f:90:d0:93:8d:e8:e3:c2:
fc:8c:c2:72:e6:bf:43:1f:3b:f3:c6:1f:29:68:f9:94:dc:a1:
3f:23:34:f5:b3:9c:bd:13:27:81:83:0d:ea:e1:9b:a2:16:e6:
8a:c8:80:a6:4a:4d:74:6a:37:45:cd:66:80:b7:5a:b8:c7:e4:
a9:bc:58:ac:67:e6:97:ad:2b:30:fa:54:c6:c8:06:68:b8:d5:
e8:9e:92:65:46:fb:3d:79:20:4c:a7:a9:eb:f4:e4:da:3c:40:
75:18:4c:8e:3b:8a:b0:ee:76:24:9b:a8:ff:09:ef:ea:ec:c1:
0b:76:d6:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:55:13 2025 by rpki-client