Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/YnXLJSUtwkp_C_d5QAZ0fDLXvK8.roa
File: YnXLJSUtwkp_C_d5QAZ0fDLXvK8.roa (raw, json)
Hash identifier: JofAlw3gkm24gLxBlV/DX6Xkj+IHR76ldTczbrb5zpg=
Subject key identifier: 62:75:CB:25:25:2D:C2:4A:7F:0B:F7:79:40:06:74:7C:32:D7:BC:AF
Certificate issuer: /CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Certificate serial: 018BCDFC2AFD9657FAA1A43D0ECC10EBE351
Authority key identifier: 48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/YnXLJSUtwkp_C_d5QAZ0fDLXvK8.roa
Signing time: Tue 14 Nov 2023 13:18:57 +0000
ROA not before: Tue 14 Nov 2023 13:18:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43260
IP address blocks: 45.147.46.0/24 maxlen: 24
77.83.201.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:cd:fc:2a:fd:96:57:fa:a1:a4:3d:0e:cc:10:eb:e3:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Validity
Not Before: Nov 14 13:18:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6275cb25252dc24a7f0bf7794006747c32d7bcaf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:86:7b:c6:ee:dd:d6:a1:52:20:9f:47:bb:1b:
10:e4:52:06:e4:4d:1e:17:55:34:a8:f3:38:d5:18:
e6:01:c4:19:25:10:bc:65:a3:77:ac:1b:03:8e:10:
ef:bf:a6:ca:64:30:09:ac:2c:26:6b:60:60:92:b3:
f1:3b:57:ce:f4:aa:c3:18:c7:f2:78:59:f8:c1:ec:
82:14:c9:34:0b:fc:72:ff:a4:d4:9b:db:5e:f0:1b:
90:7c:86:d5:65:d5:6e:85:f0:d9:f2:da:95:70:35:
26:53:89:f6:f3:0d:91:3e:a3:f4:a3:62:07:a5:60:
2c:f7:27:e6:42:f7:ab:56:75:1a:55:e3:bf:bc:31:
d5:a9:92:2b:68:23:32:e0:81:59:0d:9c:bc:d5:2b:
d4:37:8c:bc:c6:5c:b9:bd:61:9b:10:b8:b8:38:fd:
95:27:6e:45:63:59:73:1e:d4:90:c9:2a:2c:b6:dd:
d5:fa:93:ad:5a:f8:34:1b:d1:8a:be:68:3f:b0:b8:
45:1e:40:ae:ab:fd:16:8c:d2:05:b0:a4:65:b9:b7:
12:62:40:11:d5:f7:f8:29:c8:23:d2:90:bc:ba:e3:
b9:17:13:cc:58:29:8a:57:79:6c:5f:3f:74:cc:85:
c1:bd:60:e9:67:59:2e:c8:f2:5d:ae:ad:de:ec:47:
f2:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:75:CB:25:25:2D:C2:4A:7F:0B:F7:79:40:06:74:7C:32:D7:BC:AF
X509v3 Authority Key Identifier:
keyid:48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/YnXLJSUtwkp_C_d5QAZ0fDLXvK8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.147.46.0/24
77.83.201.0/24
Signature Algorithm: sha256WithRSAEncryption
25:64:82:4c:bc:db:0e:1d:6a:d6:19:e6:26:82:d6:7a:69:4f:
b0:fb:ef:08:2a:67:26:26:29:3c:cf:95:a4:b2:a6:cd:87:fc:
67:17:1d:b5:d5:72:8e:1f:08:a9:ef:e0:dd:b4:c5:7c:8f:65:
8a:24:a5:68:7a:55:af:22:6e:da:ff:52:ba:14:ff:60:93:ea:
b0:2c:d6:94:a7:d7:be:2e:6d:88:da:91:30:cb:a8:3e:99:2c:
21:52:d2:e8:8e:d5:ab:e0:b4:3c:db:70:40:cf:d3:0f:31:8f:
e4:b0:60:60:24:a7:08:74:66:04:c4:73:e4:d2:3b:18:bb:d8:
1f:ae:39:ec:33:e6:e0:0a:2f:d3:26:01:db:54:13:b5:52:44:
19:0b:31:67:97:08:96:a5:0a:ce:0c:36:83:06:61:1e:dd:20:
69:f8:22:3e:2a:e0:6b:1e:ce:4d:cf:df:cc:43:6f:62:f4:64:
46:2a:1c:2e:31:9b:33:cc:1c:7a:b9:20:42:5c:a3:24:f4:03:
b3:98:a6:e2:89:0a:59:9c:02:47:c3:be:b2:3e:37:0f:82:f0:
a9:51:d2:b1:2b:f4:47:6e:e1:ec:06:a9:39:14:14:01:31:da:
cb:8a:3d:af:ab:28:64:b6:5e:ef:83:fd:d2:d5:5c:e4:f0:02:
f5:5c:8d:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:30:14 2025 by rpki-client