Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/eb239a-33c8-4dbd-bc96-3259496e7c5f/1/v2yzqiaVt4E6wuNGrPIDoowzoEA.roa
File: v2yzqiaVt4E6wuNGrPIDoowzoEA.roa (raw, json)
Hash identifier: HHnEK4CceAX7ASpeH2yCemLRRS6cAc/ky5YLL/cpbkk=
Subject key identifier: BF:6C:B3:AA:26:95:B7:81:3A:C2:E3:46:AC:F2:03:A2:8C:33:A0:40
Certificate issuer: /CN=624039399017fa093dc8d503799f6ca403f0bd05
Certificate serial: 0183382592AFC48646EF52288D9E064E02EE
Authority key identifier: 62:40:39:39:90:17:FA:09:3D:C8:D5:03:79:9F:6C:A4:03:F0:BD:05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YkA5OZAX-gk9yNUDeZ9spAPwvQU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/eb239a-33c8-4dbd-bc96-3259496e7c5f/1/v2yzqiaVt4E6wuNGrPIDoowzoEA.roa
Signing time: Tue 13 Sep 2022 18:38:49 +0000
ROA not before: Tue 13 Sep 2022 18:38:49 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 33387
IP address blocks: 45.8.217.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:38:25:92:af:c4:86:46:ef:52:28:8d:9e:06:4e:02:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=624039399017fa093dc8d503799f6ca403f0bd05
Validity
Not Before: Sep 13 18:38:49 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=bf6cb3aa2695b7813ac2e346acf203a28c33a040
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:f7:0b:40:c7:d8:bd:3a:86:4b:07:8b:cf:53:
da:51:71:a2:da:60:3a:b2:80:72:f8:8d:1b:e3:3d:
90:74:6c:25:bc:64:8f:e0:71:e0:dd:65:f1:36:73:
11:9f:22:5d:40:57:2b:1e:39:25:7f:61:19:d3:87:
87:88:4a:de:55:03:af:bb:b0:6b:25:58:d3:c1:e1:
9a:e3:d2:1f:dd:32:d6:36:31:d0:a0:ef:26:7d:7a:
ae:bd:73:ac:43:7a:2f:67:b9:69:c9:5b:13:b9:cc:
be:fa:2c:55:3c:ed:0c:e0:27:56:4b:48:d4:4f:d3:
cd:c0:d5:be:14:2d:3f:e1:a7:b2:ae:51:a3:71:2e:
f6:df:c8:90:3b:75:b5:32:b4:84:6d:d9:e4:f9:53:
19:d9:d3:f5:b9:87:79:3f:25:08:65:2a:5d:c5:a2:
f4:bf:7f:98:d7:83:cc:07:a0:f4:9d:3e:d1:68:c8:
46:60:4c:0a:c8:82:4c:06:e3:c8:38:99:b4:23:fa:
71:f7:e2:ee:88:12:07:91:f9:a5:f1:c6:f9:82:bb:
63:be:c6:1f:09:6b:0a:6a:b3:88:0e:6b:d4:98:ad:
0e:5e:77:ed:85:37:c9:35:70:86:cf:79:22:63:8d:
4a:b9:7f:2d:f5:e2:09:45:77:9c:25:04:da:fd:e4:
e4:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:6C:B3:AA:26:95:B7:81:3A:C2:E3:46:AC:F2:03:A2:8C:33:A0:40
X509v3 Authority Key Identifier:
keyid:62:40:39:39:90:17:FA:09:3D:C8:D5:03:79:9F:6C:A4:03:F0:BD:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YkA5OZAX-gk9yNUDeZ9spAPwvQU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/eb239a-33c8-4dbd-bc96-3259496e7c5f/1/v2yzqiaVt4E6wuNGrPIDoowzoEA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/eb239a-33c8-4dbd-bc96-3259496e7c5f/1/YkA5OZAX-gk9yNUDeZ9spAPwvQU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.8.217.0/24
Signature Algorithm: sha256WithRSAEncryption
86:25:7c:b8:3e:81:89:49:a8:e6:cd:96:00:17:3a:d4:e7:2c:
12:55:d3:84:80:bd:ed:3e:24:d3:1f:85:be:e9:67:7c:24:78:
70:4f:f8:fd:e9:f8:7c:7b:94:f8:35:66:11:54:af:21:d6:1c:
a5:41:23:25:28:f8:3a:5e:27:11:5f:13:d8:d8:27:cf:b0:c0:
90:0b:16:6a:24:2d:86:e0:79:67:af:75:52:90:9d:dc:e4:df:
9f:24:cd:8c:8f:82:e2:f8:f6:d2:7e:e9:7f:1d:0a:2f:b3:7a:
12:9c:8b:bf:14:2b:d0:98:9f:cd:50:33:84:45:7c:38:d1:be:
5b:6c:6b:10:77:0a:b9:4f:ac:4c:24:4b:e1:72:80:1b:67:2c:
89:1f:c5:42:f6:71:ef:89:30:1a:37:6c:5f:fc:c4:6a:a7:e0:
06:8c:86:9f:f3:4e:92:69:e1:f4:81:0d:fb:c0:ba:0d:16:4c:
21:db:4a:00:f5:36:f4:92:2a:bb:0e:60:e7:20:23:1b:c9:38:
d7:19:71:57:87:0d:79:db:92:3a:8f:68:cb:e5:ec:5f:19:d4:
dc:b7:6a:a7:3a:51:19:ca:fa:0e:21:8e:78:e0:9e:68:35:64:
80:f6:19:ad:d1:13:b2:ba:3e:35:cf:ee:13:36:0a:5d:e4:13:
24:18:a7:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:27:32 2025 by rpki-client