Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/Yq-hEdcoYfCbZLF_ZkMkRBp0d_8.roa
File: Yq-hEdcoYfCbZLF_ZkMkRBp0d_8.roa (raw, json)
Hash identifier: rnVvhBYyuVWm/SgZmkVwaADe0qObR7RPl1MVIMxdQ9A=
Subject key identifier: 62:AF:A1:11:D7:28:61:F0:9B:64:B1:7F:66:43:24:44:1A:74:77:FF
Certificate issuer: /CN=618478f198fe569010c3df6219142f530c4f5e56
Certificate serial: 0194258F9074B3C8C1B2E801CA107526FB7A
Authority key identifier: 61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/Yq-hEdcoYfCbZLF_ZkMkRBp0d_8.roa
Signing time: Thu 02 Jan 2025 05:49:12 +0000
ROA not before: Thu 02 Jan 2025 05:49:12 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48108
IP address blocks: 45.142.213.0/24 maxlen: 24
45.142.215.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:90:74:b3:c8:c1:b2:e8:01:ca:10:75:26:fb:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=618478f198fe569010c3df6219142f530c4f5e56
Validity
Not Before: Jan 2 05:49:12 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=62afa111d72861f09b64b17f664324441a7477ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:31:52:90:a6:8a:35:1c:8b:01:19:82:0a:f0:
a3:1b:09:8a:c4:79:14:15:94:da:7e:64:98:d0:00:
52:c1:fa:16:2a:e7:ef:81:ff:dd:c3:0d:1e:e0:71:
ca:3d:e9:28:0e:07:2f:25:c6:02:2d:e0:98:6d:f9:
7f:3b:c3:a1:5d:cd:86:e7:8c:ad:3b:18:ae:fd:64:
c3:e8:bc:1c:55:ff:68:bc:7a:b3:94:5b:19:f8:47:
c0:50:94:f2:7f:cd:1f:b9:f3:59:5b:8c:d2:e0:07:
c1:f4:ea:04:98:6a:ba:a4:ba:19:0c:53:1f:f2:ad:
d7:13:57:12:d7:7f:4f:4c:43:15:99:9b:01:0e:bb:
91:4e:83:2d:ed:9c:62:c5:11:9f:da:58:ea:69:a5:
2e:40:11:e8:78:fd:76:26:d5:ee:2a:81:9f:2d:e3:
d5:ae:16:59:71:34:d1:36:e7:29:d6:f3:6a:e1:63:
86:20:95:1c:b9:ed:e1:2b:71:98:58:2d:c0:89:6a:
17:0d:94:76:93:9d:7b:17:82:2e:08:88:e5:a8:f3:
e9:95:3a:9b:ef:2c:5c:73:eb:84:b0:ae:69:8f:dc:
c2:78:f2:a4:a3:ed:b3:ef:c4:d1:bb:95:66:7e:e3:
30:ea:3f:83:78:03:ea:58:6a:03:ef:cc:10:8f:f7:
4f:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:AF:A1:11:D7:28:61:F0:9B:64:B1:7F:66:43:24:44:1A:74:77:FF
X509v3 Authority Key Identifier:
keyid:61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/Yq-hEdcoYfCbZLF_ZkMkRBp0d_8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.142.213.0/24
45.142.215.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:3d:c4:26:1d:ae:f4:4a:f8:95:3e:0b:2c:30:51:a3:53:36:
75:d4:1e:ab:57:35:47:4a:55:dd:01:7a:fa:c5:23:63:f2:df:
ef:73:14:d4:a1:a8:71:4b:1c:cc:5f:7b:f8:3f:6a:ef:60:9f:
61:d2:40:a5:37:03:8e:51:7c:82:b9:69:46:b5:9f:04:91:d7:
ea:fa:23:c2:4a:54:13:a2:08:11:99:f8:ca:dd:c9:d6:65:8b:
2b:d8:97:b9:cd:cf:ab:77:22:0d:ab:5e:d1:87:16:cd:a0:3a:
f5:02:43:68:24:06:6a:62:af:26:a8:96:68:7b:3c:ee:65:8d:
a8:80:fe:2c:0b:03:78:40:a7:31:ff:3f:c1:07:5e:ff:7f:62:
d7:73:5a:3e:ec:1e:30:64:bf:c9:15:83:78:42:18:b5:7d:1d:
42:48:33:d8:3b:25:ec:b1:c2:96:fc:ae:0f:11:2c:bc:09:ee:
52:5f:18:4b:7f:d6:e5:5d:b0:f3:b7:13:b9:54:e4:a9:20:cb:
76:85:1f:ed:97:1a:f3:c2:20:25:40:c4:b3:32:17:3c:e0:f6:
53:e1:25:fb:79:59:11:e3:ff:fd:3e:bf:a0:33:c6:61:23:9c:
b5:ee:ae:7c:a4:13:36:f2:21:88:8f:88:4b:e2:52:dc:82:e5:
64:fd:5f:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 09:05:10 2025 by rpki-client