Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/adff80-b207-4fbd-bf5e-07dd1b4c55d9/1/YeBFRDhWHkWdJ3BdBG32lFyQpPo.roa
File: YeBFRDhWHkWdJ3BdBG32lFyQpPo.roa (raw, json)
Hash identifier: MVyNw91IhJOMM4FrgEVhHULbkmYOtygl69VygSdanvk=
Subject key identifier: 61:E0:45:44:38:56:1E:45:9D:27:70:5D:04:6D:F6:94:5C:90:A4:FA
Certificate issuer: /CN=62fa765a393369c96d8d836f23f76e67489c7dde
Certificate serial: 09F40BD1
Authority key identifier: 62:FA:76:5A:39:33:69:C9:6D:8D:83:6F:23:F7:6E:67:48:9C:7D:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yvp2WjkzacltjYNvI_duZ0icfd4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/adff80-b207-4fbd-bf5e-07dd1b4c55d9/1/YeBFRDhWHkWdJ3BdBG32lFyQpPo.roa
Signing time: Mon 18 Apr 2022 15:32:04 +0000
ROA not before: Mon 18 Apr 2022 15:32:04 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61317
IP address blocks: 85.209.16.0/22 maxlen: 24
2.58.84.0/22 maxlen: 24
45.8.172.0/22 maxlen: 22
45.66.148.0/22 maxlen: 24
45.13.149.0/24 maxlen: 24
212.102.114.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 166988753 (0x9f40bd1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fa765a393369c96d8d836f23f76e67489c7dde
Validity
Not Before: Apr 18 15:32:04 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=61e0454438561e459d27705d046df6945c90a4fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:74:99:1a:72:36:dd:e1:79:39:72:8c:0f:9f:
bc:8b:23:d5:11:c5:8f:b9:e7:90:5d:6d:16:63:d5:
2d:1e:18:c9:9d:5c:70:2b:5f:63:f8:3b:dc:3d:e8:
2a:ff:55:2c:98:2a:d7:e0:bc:16:50:27:cc:1c:1b:
1f:68:de:55:85:07:b8:75:88:e8:0e:2b:6e:c3:d3:
15:64:fb:03:c9:52:ab:41:81:f6:64:1d:06:5f:89:
7f:59:1d:26:3a:ea:12:10:b9:ee:16:d9:e6:e1:a8:
1f:90:82:70:0b:cf:bb:f4:4b:58:2c:b9:c1:8f:8b:
28:7e:8f:45:b3:1c:f7:b1:2e:a8:28:5e:9a:6d:f3:
34:1d:ac:01:fa:22:6e:97:f9:a2:5c:73:61:41:f0:
b6:f6:53:75:9e:de:10:d0:f4:46:d5:33:11:7c:93:
72:fc:5b:af:68:30:60:4a:f9:ee:df:24:f7:a2:91:
0b:38:8d:a0:2c:33:f3:bd:ad:0b:b5:a7:83:26:3b:
29:d8:7b:14:bd:67:3b:50:da:5c:d6:d7:c8:6f:cc:
07:f3:7a:47:f7:36:48:ae:ce:76:ce:20:27:12:a6:
84:dc:af:9e:19:74:d5:6e:af:d0:8c:74:9e:36:c6:
e6:87:e0:8c:81:84:a7:2c:63:42:70:91:e9:fa:4a:
d1:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:E0:45:44:38:56:1E:45:9D:27:70:5D:04:6D:F6:94:5C:90:A4:FA
X509v3 Authority Key Identifier:
keyid:62:FA:76:5A:39:33:69:C9:6D:8D:83:6F:23:F7:6E:67:48:9C:7D:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yvp2WjkzacltjYNvI_duZ0icfd4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/adff80-b207-4fbd-bf5e-07dd1b4c55d9/1/YeBFRDhWHkWdJ3BdBG32lFyQpPo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/adff80-b207-4fbd-bf5e-07dd1b4c55d9/1/Yvp2WjkzacltjYNvI_duZ0icfd4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.58.84.0/22
45.8.172.0/22
45.13.149.0/24
45.66.148.0/22
85.209.16.0/22
212.102.114.0/24
Signature Algorithm: sha256WithRSAEncryption
62:a1:97:78:dc:cd:f2:7a:1a:53:86:2b:2c:3c:22:ba:b0:79:
af:46:a1:9f:a1:42:81:0f:a7:b5:2d:c4:8f:f1:25:4a:cc:46:
28:2e:db:90:aa:fd:7a:ae:3d:85:f1:5a:23:c3:eb:a6:e5:c6:
01:17:fb:ce:f4:be:11:2d:c6:54:ec:ba:13:20:02:d3:37:ed:
5d:80:75:cb:4e:0b:e6:bf:a9:2a:61:f5:4e:ab:a7:89:8c:cf:
20:d1:8c:2a:0d:61:5f:88:8d:ed:51:71:ac:ae:9b:af:e6:d0:
e4:b8:13:6e:3a:78:dd:8c:cb:f0:b7:00:57:c7:d8:80:79:95:
48:46:ef:af:25:04:c0:c1:f5:52:dd:66:54:2e:6b:cd:a3:f1:
07:c9:6e:92:d3:5e:6b:09:17:a6:24:44:f8:4e:c0:9c:50:f8:
89:e7:da:6b:f0:59:0e:7a:3a:84:18:0f:a6:51:7b:6f:88:43:
ea:0b:8d:8d:44:ac:a8:bb:fd:de:0f:af:c4:4b:12:fb:f2:8e:
63:f1:bc:ad:b7:9c:bd:03:06:58:0b:38:be:27:5f:31:96:ea:
aa:d5:1f:6f:bb:67:dc:53:41:7a:44:09:f9:90:db:98:70:ac:
02:7e:9e:87:e9:54:2a:31:52:10:c3:79:37:8b:cf:c9:1f:09:
35:61:17:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:41:47 2025 by rpki-client