Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/73e009-f2f4-43ac-81a1-89aa8d2e8004/1/yKkZFLs6YVbkXytvzgCPIVXuU18.roa
File: yKkZFLs6YVbkXytvzgCPIVXuU18.roa (raw, json)
Hash identifier: 3M+Qw4Xfzb67zSVF5cyn50VarUBuvPcrrFEH7s1xtH4=
Subject key identifier: C8:A9:19:14:BB:3A:61:56:E4:5F:2B:6F:CE:00:8F:21:55:EE:53:5F
Certificate issuer: /CN=7da5cd652afd1f2f337c20d8ff7286cd2cf1bdf9
Certificate serial: 019425FC3A6E7BD36C0235B85123D59589DB
Authority key identifier: 7D:A5:CD:65:2A:FD:1F:2F:33:7C:20:D8:FF:72:86:CD:2C:F1:BD:F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXNZSr9Hy8zfCDY_3KGzSzxvfk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/73e009-f2f4-43ac-81a1-89aa8d2e8004/1/yKkZFLs6YVbkXytvzgCPIVXuU18.roa
Signing time: Thu 02 Jan 2025 07:47:54 +0000
ROA not before: Thu 02 Jan 2025 07:47:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208109
IP address blocks: 45.154.172.0/24 maxlen: 24
45.154.173.0/24 maxlen: 24
45.154.174.0/24 maxlen: 24
45.154.175.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fc:3a:6e:7b:d3:6c:02:35:b8:51:23:d5:95:89:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5cd652afd1f2f337c20d8ff7286cd2cf1bdf9
Validity
Not Before: Jan 2 07:47:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c8a91914bb3a6156e45f2b6fce008f2155ee535f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:e2:29:b4:54:7f:88:9a:be:e6:0f:f9:d5:27:
a3:e0:45:d9:d9:f9:fa:e2:c3:81:9a:47:30:2e:63:
9f:a7:d1:da:1c:fb:2f:d4:2d:40:ee:a9:d1:b4:42:
29:24:27:9b:4b:2f:8d:cd:31:ed:41:2a:b8:19:49:
9d:a8:13:77:1b:1f:25:83:90:2f:4a:54:00:3b:3b:
3c:0a:56:33:9f:a3:38:3e:19:5f:89:f7:df:22:2f:
8f:1a:4c:3d:c2:1a:a8:f1:bf:f2:fd:13:ff:ae:45:
33:7b:4f:13:9c:38:ba:3d:d5:2a:35:ee:66:bc:31:
55:01:90:be:ee:55:5a:0d:1c:7f:1c:ec:80:3c:c5:
89:a7:ae:c6:55:9e:61:af:40:a1:c1:f8:64:8b:ae:
da:cb:96:3e:5a:53:6b:14:a4:15:68:7e:48:7e:f5:
db:c3:21:52:4b:ab:33:99:35:63:1d:0a:85:59:9a:
71:70:23:0e:44:40:fd:7c:a1:bd:ba:f3:47:5e:ab:
cb:05:5c:a5:04:af:cd:73:09:33:03:c5:46:2f:c1:
d5:30:d2:f9:1d:d3:ab:57:11:a9:6d:a4:5b:d8:5c:
5c:a2:48:2f:4f:78:1b:55:d7:e9:ab:21:33:24:a1:
a8:12:5a:f8:e1:e9:b2:55:21:9c:2c:ca:5c:e9:83:
21:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:A9:19:14:BB:3A:61:56:E4:5F:2B:6F:CE:00:8F:21:55:EE:53:5F
X509v3 Authority Key Identifier:
keyid:7D:A5:CD:65:2A:FD:1F:2F:33:7C:20:D8:FF:72:86:CD:2C:F1:BD:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXNZSr9Hy8zfCDY_3KGzSzxvfk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/73e009-f2f4-43ac-81a1-89aa8d2e8004/1/yKkZFLs6YVbkXytvzgCPIVXuU18.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/73e009-f2f4-43ac-81a1-89aa8d2e8004/1/faXNZSr9Hy8zfCDY_3KGzSzxvfk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.154.172.0/22
Signature Algorithm: sha256WithRSAEncryption
68:b3:7a:8a:12:30:fa:1c:24:cb:e3:54:88:35:00:9c:72:ef:
1a:85:dd:b7:4e:c2:35:64:e4:43:66:a4:e3:b6:78:e0:9c:00:
dc:69:f1:a7:05:4a:fb:e5:50:ce:dd:6d:08:a8:ae:83:1e:99:
9e:06:a9:55:e1:c8:0a:69:05:5c:13:ec:f6:3f:cb:81:dc:45:
4d:ac:f8:20:e2:db:5d:0f:e4:ee:79:1b:e3:5d:19:34:2c:75:
41:ea:c8:b0:0e:f1:13:d2:68:71:57:86:58:14:2f:fc:31:f5:
16:65:32:f8:20:a8:a2:a3:17:14:da:6b:ff:25:98:ff:b7:d7:
a8:21:0c:63:93:a7:0a:2d:00:6b:e6:c1:01:e0:91:18:a2:05:
fa:c7:74:18:69:ff:5b:1e:8d:ac:d1:23:cf:4a:b1:ad:d3:0f:
15:88:41:ca:23:22:4f:5d:b8:d1:16:e9:e9:59:4b:5e:82:14:
3b:14:7c:69:35:15:86:5f:bd:fe:0d:2c:40:0b:46:b8:a8:09:
3e:60:cd:4c:c8:da:e1:66:0b:2c:6d:50:43:12:08:1c:b5:58:
a4:f1:36:01:4b:bb:56:b0:0c:28:ac:a6:26:0e:c9:69:39:a5:
74:97:80:42:ca:78:33:b9:51:f9:c9:2d:6e:61:49:d3:6d:8c:
ca:bc:0f:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 13:00:40 2025 by rpki-client