Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/YiInVWFnw3-xWQzKgalgc68ujco.roa
File: YiInVWFnw3-xWQzKgalgc68ujco.roa (raw, json)
Hash identifier: VCT+6YXxGOTeCjyAEMOHQb/7NWTjTc0QSztFs2gDk5U=
Subject key identifier: 62:22:27:55:61:67:C3:7F:B1:59:0C:CA:81:A9:60:73:AF:2E:8D:CA
Certificate issuer: /CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Certificate serial: 018F54D9473ACB51F329F0D6A897BE960CE4
Authority key identifier: 48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/YiInVWFnw3-xWQzKgalgc68ujco.roa
Signing time: Tue 07 May 2024 20:57:56 +0000
ROA not before: Tue 07 May 2024 20:57:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 34984
IP address blocks: 45.136.5.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:54:d9:47:3a:cb:51:f3:29:f0:d6:a8:97:be:96:0c:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Validity
Not Before: May 7 20:57:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=622227556167c37fb1590cca81a96073af2e8dca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:d5:69:eb:5e:3b:44:47:79:3d:f6:b3:ef:93:
57:60:45:d0:a3:8d:29:52:92:46:95:84:f5:c9:c7:
c8:4e:71:1e:5e:02:1d:f4:a3:2d:02:b7:90:9e:49:
db:fc:16:ef:56:43:cf:bf:5c:52:41:cc:35:26:eb:
16:31:cb:0d:51:a7:16:62:62:b3:3f:30:82:bf:51:
42:b3:6b:03:1a:fd:18:fe:5a:ce:21:c5:5a:8a:6b:
74:64:ad:1e:8c:ee:14:8c:29:88:45:34:fd:9e:d6:
56:23:ba:04:3c:30:aa:f1:da:98:b7:2d:60:f8:bf:
18:ae:18:36:fb:25:d7:4f:44:8a:62:d6:5a:9f:8c:
b2:db:d0:d8:4a:45:4e:d8:6e:84:68:a1:85:ec:8b:
b7:8c:ac:b1:e1:4c:c1:dc:45:32:70:ac:e1:42:4c:
15:f0:4a:96:a1:a0:80:d4:57:96:bf:26:4c:4c:d0:
33:af:96:60:2f:69:83:c0:bf:b5:3b:75:60:a0:e8:
dc:6d:b9:f1:f9:24:a7:38:ec:48:05:c5:68:6d:71:
6b:52:fd:e5:b6:32:7f:85:6f:40:71:09:40:dd:b5:
cd:6a:b0:dc:62:71:39:14:4a:a5:dd:f3:a2:c5:d3:
31:25:54:01:c8:44:00:0a:2f:fc:0a:4e:71:96:31:
45:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:22:27:55:61:67:C3:7F:B1:59:0C:CA:81:A9:60:73:AF:2E:8D:CA
X509v3 Authority Key Identifier:
keyid:48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/YiInVWFnw3-xWQzKgalgc68ujco.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.136.5.0/24
Signature Algorithm: sha256WithRSAEncryption
35:63:78:50:41:71:0f:26:ac:9f:33:b9:ca:1e:4c:e3:63:7c:
7d:ed:0c:e2:63:7a:50:4c:bb:cf:43:20:8b:2a:ec:65:83:09:
50:d8:1d:c9:5a:bc:e3:c7:98:94:81:45:fc:92:63:b8:01:e8:
f9:66:51:ed:19:52:56:db:f2:90:b8:8e:e1:1c:47:c4:6c:37:
f6:4d:5c:c7:bc:b8:49:38:56:e3:68:95:c8:7b:44:ae:91:7b:
6e:27:ae:ce:bd:8b:72:3f:c8:2e:30:1f:5f:5c:59:d9:a2:3d:
6e:31:a6:c2:0f:09:87:c5:89:48:84:60:49:98:4d:4d:04:b5:
e6:1c:42:e0:ee:36:9c:d2:a8:e4:0f:45:b2:a8:db:0f:05:81:
f0:9d:c5:9d:7b:6f:18:62:73:a8:b9:3c:3f:fb:e3:d1:5a:cb:
e5:5a:51:e0:0c:7e:61:5c:5a:6d:aa:25:fb:9c:ce:92:39:40:
ef:64:7c:bb:bf:a0:f0:38:12:2c:56:89:6c:d6:78:7c:5d:d0:
97:0b:3a:74:4a:1a:9a:09:76:12:27:df:80:90:1a:d3:46:e0:
1c:40:c8:1d:ab:76:3e:ab:c0:36:ab:0e:04:c0:56:fe:0b:48:
25:bb:ff:54:5a:65:cf:a5:ec:63:d0:95:0e:2f:dc:2e:c0:38:
28:b2:af:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:43:16 2025 by rpki-client