Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/adff80-b207-4fbd-bf5e-07dd1b4c55d9/1/GY2P1GeyTOLwaZqded0jJtCbvvE.roa
File: GY2P1GeyTOLwaZqded0jJtCbvvE.roa (raw, json)
Hash identifier: FxX1n7DBwFJ1bGU36OK0X6miM85cUX2Ma9qjOuLKJGo=
Subject key identifier: 19:8D:8F:D4:67:B2:4C:E2:F0:69:9A:9D:79:DD:23:26:D0:9B:BE:F1
Certificate issuer: /CN=62fa765a393369c96d8d836f23f76e67489c7dde
Certificate serial: 0184FF02BED7BE67819A75DFC6BDF78E0832
Authority key identifier: 62:FA:76:5A:39:33:69:C9:6D:8D:83:6F:23:F7:6E:67:48:9C:7D:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yvp2WjkzacltjYNvI_duZ0icfd4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/adff80-b207-4fbd-bf5e-07dd1b4c55d9/1/GY2P1GeyTOLwaZqded0jJtCbvvE.roa
Signing time: Sun 11 Dec 2022 02:28:00 +0000
ROA not before: Sun 11 Dec 2022 02:28:00 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211975
IP address blocks: 45.8.173.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:ff:02:be:d7:be:67:81:9a:75:df:c6:bd:f7:8e:08:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fa765a393369c96d8d836f23f76e67489c7dde
Validity
Not Before: Dec 11 02:28:00 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=198d8fd467b24ce2f0699a9d79dd2326d09bbef1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:de:37:05:e0:50:e6:e9:57:17:43:a1:bc:19:
de:8b:cd:80:9e:81:56:26:13:a9:7e:15:77:c3:fb:
46:6a:2d:38:dd:00:08:ef:e3:be:16:cc:c9:96:9d:
be:a5:41:71:24:bb:a8:e3:ff:49:12:77:95:cb:f3:
d6:e3:4e:52:5b:db:08:33:3d:76:5f:4a:ee:03:59:
18:4a:37:b8:a6:a4:33:60:56:62:d2:b9:94:ea:a5:
66:72:64:4b:6c:e3:fa:fa:54:c0:f1:67:16:a5:c8:
53:6a:80:96:b4:bb:d8:98:19:1a:e9:62:7d:f3:be:
b7:c9:6b:89:ef:f5:c9:b4:a7:14:b1:d5:b5:2a:df:
99:f8:51:97:27:1c:ff:3e:f0:44:ac:74:de:e4:5c:
c8:ae:51:b9:5d:38:61:eb:14:14:01:20:b6:7c:ab:
bc:d8:b2:28:0d:aa:c6:6f:a6:00:86:f1:d3:bd:f5:
31:f7:a8:26:8a:ef:73:4d:4e:4a:6c:77:37:87:fa:
9f:73:a9:aa:e0:44:a1:28:c2:29:38:71:de:cc:6a:
24:90:7d:c6:11:66:6e:23:43:8d:c1:47:b9:3a:d6:
3b:32:a1:f1:e3:53:f6:3e:32:8e:bf:5f:a8:76:c9:
cc:b1:41:b2:94:8a:91:bf:4c:ad:01:34:12:27:cf:
8f:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:8D:8F:D4:67:B2:4C:E2:F0:69:9A:9D:79:DD:23:26:D0:9B:BE:F1
X509v3 Authority Key Identifier:
keyid:62:FA:76:5A:39:33:69:C9:6D:8D:83:6F:23:F7:6E:67:48:9C:7D:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yvp2WjkzacltjYNvI_duZ0icfd4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/adff80-b207-4fbd-bf5e-07dd1b4c55d9/1/GY2P1GeyTOLwaZqded0jJtCbvvE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/adff80-b207-4fbd-bf5e-07dd1b4c55d9/1/Yvp2WjkzacltjYNvI_duZ0icfd4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.8.173.0/24
Signature Algorithm: sha256WithRSAEncryption
ef:e0:eb:46:3e:11:de:74:d9:a6:48:ab:95:e1:b3:26:19:88:
18:81:bc:8a:04:5b:d0:0a:ab:47:ee:92:4b:6a:dd:3d:fa:87:
37:7b:85:36:c1:0c:ad:f2:60:b9:ae:d0:ea:07:3f:85:d4:e4:
f6:52:0f:e1:99:bf:28:e4:17:13:30:a0:cc:25:88:85:cc:41:
03:2d:65:7d:f2:de:e5:a4:e2:c1:23:d0:03:2c:65:e4:3e:e9:
fc:c3:8e:97:6d:c2:aa:40:aa:77:c6:cb:bb:aa:98:fd:3e:c8:
1f:83:13:33:80:24:11:31:e3:14:85:b9:46:2c:4c:59:ba:1a:
31:7f:8d:b0:b1:85:46:3b:f5:71:0a:b2:9c:4a:1c:ab:e2:d9:
19:88:5e:59:5c:ba:33:7b:eb:af:18:45:21:09:c9:c8:17:5b:
a4:17:ee:cb:0f:80:c8:06:e8:86:8c:0a:c2:94:ea:73:29:a0:
c7:be:9b:c7:32:38:b9:da:6d:20:0b:8f:ef:22:f8:f1:e9:24:
8f:d1:98:64:89:58:59:7e:62:ed:68:67:e7:f9:ef:b9:78:54:
85:57:44:e9:71:b8:85:b5:8d:55:ab:a0:3c:07:7a:40:b4:9a:
97:07:09:94:27:49:03:67:54:fb:0b:4d:6e:94:be:43:c1:c3:
aa:7e:bf:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:29:19 2025 by rpki-client