Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/eb239a-33c8-4dbd-bc96-3259496e7c5f/1/w_YKRv5dO8ZFPQfoNhQkDhCIsqU.roa
File: w_YKRv5dO8ZFPQfoNhQkDhCIsqU.roa (raw, json)
Hash identifier: NB9TlrIfb2RLW6SFrS5RQ2/ZqKJZISxTQJEG6XYMxvw=
Subject key identifier: C3:F6:0A:46:FE:5D:3B:C6:45:3D:07:E8:36:14:24:0E:10:88:B2:A5
Certificate issuer: /CN=624039399017fa093dc8d503799f6ca403f0bd05
Certificate serial: 0182989388A093D729244D9006AD99C4028E
Authority key identifier: 62:40:39:39:90:17:FA:09:3D:C8:D5:03:79:9F:6C:A4:03:F0:BD:05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YkA5OZAX-gk9yNUDeZ9spAPwvQU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/eb239a-33c8-4dbd-bc96-3259496e7c5f/1/w_YKRv5dO8ZFPQfoNhQkDhCIsqU.roa
Signing time: Sat 13 Aug 2022 18:59:41 +0000
ROA not before: Sat 13 Aug 2022 18:59:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211237
IP address blocks: 45.95.212.0/24 maxlen: 24
45.95.214.0/24 maxlen: 24
194.31.195.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:98:93:88:a0:93:d7:29:24:4d:90:06:ad:99:c4:02:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=624039399017fa093dc8d503799f6ca403f0bd05
Validity
Not Before: Aug 13 18:59:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c3f60a46fe5d3bc6453d07e83614240e1088b2a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:22:d2:7e:da:00:b1:d7:d6:52:9f:23:c2:a6:
ad:1d:f2:1f:46:10:fe:ee:49:9c:56:45:4e:ed:88:
d9:6e:6a:c3:aa:ac:e3:03:ae:81:42:ec:1d:ac:3a:
74:73:48:25:f1:71:de:70:ef:dd:0c:c8:15:01:cd:
ff:db:1c:3e:6b:48:6d:2f:c7:53:c0:23:e0:9e:b5:
3c:a0:f6:79:69:4a:fc:36:73:2c:ff:f7:f7:a8:33:
a5:1c:9a:86:b0:d2:54:c3:57:19:5f:39:5a:02:10:
90:8d:84:d8:fe:02:fc:35:37:10:61:e0:84:e8:7d:
a6:df:8d:c7:c3:07:d4:1b:17:5f:be:87:33:17:68:
e4:65:4d:43:bb:87:3c:4f:2b:7e:1b:26:a8:86:5f:
9b:d4:c5:55:f7:52:96:0e:3b:43:bb:42:ec:00:16:
35:84:bd:7c:5a:a3:8b:fd:f4:1a:30:2b:97:a3:07:
c8:eb:87:fe:08:71:50:9a:90:10:f6:43:3b:5d:97:
03:c5:a2:e0:3b:e5:b1:09:b5:37:a1:d6:ab:5c:66:
c5:85:06:a9:b4:4f:66:0e:6a:4f:96:e8:a6:f3:d8:
2a:ba:83:6d:0b:70:d4:8d:55:2d:af:fc:43:4c:f4:
0d:f5:57:58:7a:4e:6b:a9:0d:08:6c:20:bb:bc:4f:
09:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:F6:0A:46:FE:5D:3B:C6:45:3D:07:E8:36:14:24:0E:10:88:B2:A5
X509v3 Authority Key Identifier:
keyid:62:40:39:39:90:17:FA:09:3D:C8:D5:03:79:9F:6C:A4:03:F0:BD:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YkA5OZAX-gk9yNUDeZ9spAPwvQU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/eb239a-33c8-4dbd-bc96-3259496e7c5f/1/w_YKRv5dO8ZFPQfoNhQkDhCIsqU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/eb239a-33c8-4dbd-bc96-3259496e7c5f/1/YkA5OZAX-gk9yNUDeZ9spAPwvQU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.95.212.0/24
45.95.214.0/24
194.31.195.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:f2:35:87:4b:95:6c:6d:94:ac:fd:e3:74:c2:2d:f4:26:cf:
c1:00:b6:eb:0e:ad:dc:ac:ee:8b:af:ba:42:ef:da:f8:43:12:
c9:9b:7c:31:c4:87:c5:60:06:be:24:da:ef:a2:f2:b0:80:5b:
42:e5:7a:dd:e2:a4:6c:d0:fb:e3:34:83:60:73:10:5a:29:01:
99:2a:33:a8:64:47:f1:25:a4:f1:72:a4:16:5f:94:6c:e3:e8:
e9:1d:45:db:89:1a:b7:e5:23:4b:fa:f1:09:ec:15:a7:cf:3f:
6a:b9:74:9c:fd:b5:7a:3c:60:6e:ad:f2:e7:4a:76:94:b6:f9:
43:d5:45:dc:d6:21:fc:e6:a6:79:f6:a1:29:b7:2b:e8:1f:a8:
37:7a:8c:cd:18:45:bb:39:30:c3:3c:95:cf:59:0c:c4:7f:10:
81:5e:b8:14:e8:e4:16:17:59:80:1c:b4:51:14:7d:ca:f3:b7:
2c:e7:dc:40:3e:c9:55:fa:4d:36:be:af:23:b0:41:b1:13:f5:
f1:ce:81:86:28:14:93:37:4f:ca:99:4a:e8:da:c7:a5:ce:99:
8d:f2:96:2c:eb:ee:2d:1b:7a:ce:55:66:c9:9f:7d:56:bf:6f:
40:30:0f:5a:a4:68:33:4f:fc:c9:48:96:a8:9e:42:4c:5b:94:
55:6c:d5:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 06:46:21 2025 by rpki-client