Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/eb239a-33c8-4dbd-bc96-3259496e7c5f/1/YM_ypS7JVS-LqK_yipcjzX4d8A0.roa
File: YM_ypS7JVS-LqK_yipcjzX4d8A0.roa (raw, json)
Hash identifier: ZwX2TSuPXAZDUPgchSYVmerhzjKiCRfyid6D3UHrE38=
Subject key identifier: 60:CF:F2:A5:2E:C9:55:2F:8B:A8:AF:F2:8A:97:23:CD:7E:1D:F0:0D
Certificate issuer: /CN=624039399017fa093dc8d503799f6ca403f0bd05
Certificate serial: 0185155E35172DFD377DDBFBB4A9E19F85C6
Authority key identifier: 62:40:39:39:90:17:FA:09:3D:C8:D5:03:79:9F:6C:A4:03:F0:BD:05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YkA5OZAX-gk9yNUDeZ9spAPwvQU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/eb239a-33c8-4dbd-bc96-3259496e7c5f/1/YM_ypS7JVS-LqK_yipcjzX4d8A0.roa
Signing time: Thu 15 Dec 2022 10:39:33 +0000
ROA not before: Thu 15 Dec 2022 10:39:33 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 399045
IP address blocks: 45.8.217.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:15:5e:35:17:2d:fd:37:7d:db:fb:b4:a9:e1:9f:85:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=624039399017fa093dc8d503799f6ca403f0bd05
Validity
Not Before: Dec 15 10:39:33 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=60cff2a52ec9552f8ba8aff28a9723cd7e1df00d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:b6:c9:9b:83:38:eb:1e:bd:8e:83:d1:c9:5c:
7b:63:9a:46:52:26:d9:d3:75:b9:36:b6:ef:87:9f:
e9:0a:d3:46:68:04:e9:1b:4a:15:cc:eb:f4:88:5a:
c0:ae:ad:e2:2e:57:a4:c7:88:6a:f1:07:0d:3d:e6:
ae:00:64:ca:54:8f:2d:b4:ef:24:4c:41:fb:23:7d:
25:f2:c1:9e:52:c0:f0:5e:14:e8:30:5f:ef:7e:d1:
e0:87:a2:7f:4e:ce:51:d0:59:1c:8b:62:db:00:d1:
15:7a:94:0a:1c:f5:5b:e3:21:36:a9:d6:94:da:5c:
d2:32:50:86:d4:0b:bf:5b:2b:c3:dc:08:d4:11:33:
ac:fd:25:9d:e2:5b:bc:e0:26:b6:ec:a4:13:d0:f2:
67:f6:85:7a:db:e3:ac:f6:f5:7a:7f:9f:c1:5d:b1:
fc:25:bb:b4:6e:1f:cf:01:86:e1:dc:10:3c:e3:78:
08:b5:e1:54:42:7b:28:c0:cc:3a:38:98:9f:78:d0:
e1:ad:17:33:93:6e:a3:74:ec:82:af:4e:7a:06:ca:
57:67:79:cd:93:25:bb:ae:57:81:e9:ca:e3:cf:7d:
ac:b6:2f:7c:3e:2a:e4:87:63:62:a2:ed:83:01:2f:
68:31:e6:71:3b:23:87:29:e3:73:f2:23:cc:84:47:
ef:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:CF:F2:A5:2E:C9:55:2F:8B:A8:AF:F2:8A:97:23:CD:7E:1D:F0:0D
X509v3 Authority Key Identifier:
keyid:62:40:39:39:90:17:FA:09:3D:C8:D5:03:79:9F:6C:A4:03:F0:BD:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YkA5OZAX-gk9yNUDeZ9spAPwvQU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/eb239a-33c8-4dbd-bc96-3259496e7c5f/1/YM_ypS7JVS-LqK_yipcjzX4d8A0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/eb239a-33c8-4dbd-bc96-3259496e7c5f/1/YkA5OZAX-gk9yNUDeZ9spAPwvQU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.8.217.0/24
Signature Algorithm: sha256WithRSAEncryption
17:e6:46:69:58:ae:23:47:d7:87:69:72:15:61:b6:66:b8:46:
f0:7c:dd:d7:d6:bc:92:52:82:69:07:0b:c1:84:54:b5:ae:f9:
18:8b:8c:7e:ab:ec:f6:65:f9:ff:02:3a:35:c8:7a:00:2b:c2:
8c:5a:9d:89:6a:b7:2c:14:8b:ce:2e:a2:44:f4:af:20:22:d5:
45:03:08:c5:ed:38:70:bf:74:77:14:58:c6:68:bd:4b:fd:15:
ff:d5:36:15:1a:cf:d0:59:9c:c2:40:b8:e0:e2:34:64:1a:7a:
0f:95:3a:33:64:d6:32:ba:a3:de:a6:0b:e3:5f:59:3e:03:47:
1e:f4:37:d4:11:3e:4d:36:e8:9b:24:6b:4b:81:44:d5:c5:9a:
76:2f:f7:37:57:d5:94:f8:ca:04:3c:a7:83:15:fb:c3:d3:42:
66:79:e7:3d:ec:d4:19:a1:2f:c6:15:9f:fd:34:cd:51:35:ab:
01:d3:61:58:91:22:8a:af:b7:42:52:b7:c2:3f:a2:cb:aa:e4:
4a:32:3d:94:9c:53:9b:9e:8d:5e:0e:74:1e:ec:f0:2e:1c:9d:
a5:0d:d0:1e:63:b2:29:0f:fa:86:9f:83:cb:fd:f8:44:23:da:
8c:da:1c:0a:dd:35:ea:ea:f0:56:e5:6b:25:e5:fd:06:a4:86:
49:9f:50:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 21:39:09 2025 by rpki-client