Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/adff80-b207-4fbd-bf5e-07dd1b4c55d9/1/ry3wFSzmCX1FsBwwo5B4K10-rFI.roa
File: ry3wFSzmCX1FsBwwo5B4K10-rFI.roa (raw, json)
Hash identifier: IOFW6jORtmI1xUWRepxMOquSTvMdrtPGDD09eI15n/8=
Subject key identifier: AF:2D:F0:15:2C:E6:09:7D:45:B0:1C:30:A3:90:78:2B:5D:3E:AC:52
Certificate issuer: /CN=62fa765a393369c96d8d836f23f76e67489c7dde
Certificate serial: 0184EC44763BB625D3F5F663C588A6F96005
Authority key identifier: 62:FA:76:5A:39:33:69:C9:6D:8D:83:6F:23:F7:6E:67:48:9C:7D:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yvp2WjkzacltjYNvI_duZ0icfd4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/adff80-b207-4fbd-bf5e-07dd1b4c55d9/1/ry3wFSzmCX1FsBwwo5B4K10-rFI.roa
Signing time: Wed 07 Dec 2022 11:07:00 +0000
ROA not before: Wed 07 Dec 2022 11:07:00 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 7562
IP address blocks: 45.8.174.0/24 maxlen: 24
45.8.175.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:ec:44:76:3b:b6:25:d3:f5:f6:63:c5:88:a6:f9:60:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fa765a393369c96d8d836f23f76e67489c7dde
Validity
Not Before: Dec 7 11:07:00 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=af2df0152ce6097d45b01c30a390782b5d3eac52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:34:ff:3d:68:90:34:eb:bc:c6:b9:0b:4d:0f:
d3:88:f3:90:e9:76:09:92:b8:6f:5e:81:26:1f:16:
67:42:65:58:5e:db:55:32:ce:85:77:6b:9c:61:95:
49:74:72:36:f3:26:53:23:49:10:e5:e3:e8:ac:3c:
8f:07:20:ac:dd:ed:8d:8f:31:99:20:db:8e:ac:2c:
39:71:de:73:89:c7:7c:5f:85:1d:dd:8a:6d:2f:df:
3e:0c:29:98:18:80:cc:f1:49:0d:2f:c3:ed:4e:00:
2a:9a:42:6f:4a:b6:cb:37:a3:a3:77:0c:f6:9e:ec:
03:30:1f:a4:f0:29:fc:8c:fc:6a:79:c3:b2:9e:c6:
e2:f8:88:41:a1:b9:6d:16:81:7e:0b:9e:c4:4b:c9:
32:bf:a3:3f:1d:92:0f:bc:43:ac:c3:e5:52:fe:84:
d5:18:e1:ee:4e:56:a1:f9:28:35:93:1f:10:64:6d:
de:b9:1c:72:50:0b:b1:59:30:6d:21:6b:d4:26:13:
e7:32:3e:23:8c:59:0c:82:ee:a0:6e:6f:24:49:74:
28:3e:41:c2:c7:8f:6d:bb:54:b2:c8:75:e6:74:bd:
3a:82:51:c4:d3:44:e2:34:de:a3:0e:41:79:93:fb:
93:a9:f8:73:cd:c3:49:07:e8:b6:48:eb:88:00:fb:
98:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:2D:F0:15:2C:E6:09:7D:45:B0:1C:30:A3:90:78:2B:5D:3E:AC:52
X509v3 Authority Key Identifier:
keyid:62:FA:76:5A:39:33:69:C9:6D:8D:83:6F:23:F7:6E:67:48:9C:7D:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yvp2WjkzacltjYNvI_duZ0icfd4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/adff80-b207-4fbd-bf5e-07dd1b4c55d9/1/ry3wFSzmCX1FsBwwo5B4K10-rFI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/adff80-b207-4fbd-bf5e-07dd1b4c55d9/1/Yvp2WjkzacltjYNvI_duZ0icfd4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.8.174.0/23
Signature Algorithm: sha256WithRSAEncryption
1a:fb:c7:07:29:5e:14:e6:69:29:1f:2f:89:05:c7:ec:39:9e:
0b:6e:2b:14:c7:f8:75:fc:38:e2:53:43:6b:6e:00:4e:64:f3:
ce:ae:d4:a6:a8:c0:c0:89:f7:ee:b2:7c:1e:53:3c:79:17:81:
d6:0b:78:14:e4:f7:d4:7c:01:63:4d:eb:f7:ca:e1:4d:42:dc:
2f:87:6c:70:75:2c:1f:9a:cc:5a:e4:a4:38:3e:0b:0c:15:5f:
eb:e1:e9:54:0a:64:2b:3a:2e:28:98:bd:19:9e:46:4b:d8:d0:
22:e6:7c:e5:cf:c7:0d:44:17:de:18:e4:79:73:8c:b3:1e:3b:
e2:f8:e8:e1:50:39:ab:d4:dc:68:48:a2:dc:4d:3c:49:ee:a6:
0d:da:e6:bc:36:b5:ad:20:9e:26:e9:0d:36:ae:3a:6a:32:e9:
d5:0b:19:3b:d9:64:e3:4f:cc:72:d5:f9:c6:f3:ee:db:1f:dc:
33:b3:bd:f3:2d:a1:d4:23:40:1e:5a:b6:da:fe:18:35:30:b8:
28:85:6d:04:2e:1d:4a:9a:8f:99:66:df:9a:77:a3:49:99:5e:
d8:fe:05:a3:20:e9:29:e8:c8:d3:01:48:3a:06:02:42:5f:7b:
d7:2f:97:3d:9c:8c:72:8b:74:fd:c9:07:98:04:3e:e6:21:d8:
55:49:89:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:43:27 2025 by rpki-client