Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/adff80-b207-4fbd-bf5e-07dd1b4c55d9/1/yt38eyxLkQ5GTqmEIiEBm5CP1nc.roa
File: yt38eyxLkQ5GTqmEIiEBm5CP1nc.roa (raw, json)
Hash identifier: dc69avbZa8KXSKFfQCq1/IYblErXtBYyBpROC6CRdFQ=
Subject key identifier: CA:DD:FC:7B:2C:4B:91:0E:46:4E:A9:84:22:21:01:9B:90:8F:D6:77
Certificate issuer: /CN=62fa765a393369c96d8d836f23f76e67489c7dde
Certificate serial: 01825B7B4C282B1648ED43786241FA2768EE
Authority key identifier: 62:FA:76:5A:39:33:69:C9:6D:8D:83:6F:23:F7:6E:67:48:9C:7D:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yvp2WjkzacltjYNvI_duZ0icfd4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/adff80-b207-4fbd-bf5e-07dd1b4c55d9/1/yt38eyxLkQ5GTqmEIiEBm5CP1nc.roa
Signing time: Mon 01 Aug 2022 22:16:23 +0000
ROA not before: Mon 01 Aug 2022 22:16:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 834
IP address blocks: 85.209.16.0/23 maxlen: 23
85.209.18.0/23 maxlen: 23
45.66.148.0/22 maxlen: 24
45.13.150.0/23 maxlen: 24
212.102.114.0/24 maxlen: 24
77.83.253.0/24 maxlen: 24
77.83.252.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:5b:7b:4c:28:2b:16:48:ed:43:78:62:41:fa:27:68:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fa765a393369c96d8d836f23f76e67489c7dde
Validity
Not Before: Aug 1 22:16:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=caddfc7b2c4b910e464ea9842221019b908fd677
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:e1:e0:38:a4:92:05:aa:1a:31:a8:5a:d3:61:
44:20:9a:08:4d:56:d0:4a:cc:ca:a6:a3:48:94:a9:
ef:d3:21:f4:c6:d5:4f:54:1f:00:cf:11:f4:8a:6c:
27:71:30:f7:12:19:88:33:c4:43:23:87:b2:d6:05:
14:9f:7c:b5:2c:d0:8c:33:77:cd:40:98:6a:bf:1c:
19:70:11:cf:bf:49:da:fd:b1:54:5a:84:b8:7c:84:
5e:f0:15:ce:6b:3d:91:97:ad:85:20:e1:70:83:69:
2d:e2:91:14:8d:f2:ac:5c:f9:9c:3d:85:28:a4:19:
8e:be:18:7a:36:22:40:46:a9:cb:0a:c5:b5:0a:47:
00:49:0a:87:93:51:e0:03:4f:f5:12:85:50:81:26:
94:1a:8a:76:cf:2d:e5:88:a3:5b:00:ef:ea:fa:f3:
bc:10:6f:3f:3b:7a:2c:b6:f7:68:18:d7:1a:ed:09:
0f:26:58:98:be:27:eb:a4:c1:a7:36:50:80:ba:ef:
31:47:1a:7f:b1:60:fe:47:46:e0:5c:8f:ee:cf:30:
5d:c7:96:37:52:67:26:8d:ba:3c:b8:42:39:f5:e4:
34:8a:35:3c:be:1c:ef:e4:55:18:5e:44:3c:b7:d6:
80:3e:d9:0e:90:d2:1c:30:63:61:fd:16:30:b2:4a:
25:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:DD:FC:7B:2C:4B:91:0E:46:4E:A9:84:22:21:01:9B:90:8F:D6:77
X509v3 Authority Key Identifier:
keyid:62:FA:76:5A:39:33:69:C9:6D:8D:83:6F:23:F7:6E:67:48:9C:7D:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yvp2WjkzacltjYNvI_duZ0icfd4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/adff80-b207-4fbd-bf5e-07dd1b4c55d9/1/yt38eyxLkQ5GTqmEIiEBm5CP1nc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/adff80-b207-4fbd-bf5e-07dd1b4c55d9/1/Yvp2WjkzacltjYNvI_duZ0icfd4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.13.150.0/23
45.66.148.0/22
77.83.252.0/22
85.209.16.0/22
212.102.114.0/24
Signature Algorithm: sha256WithRSAEncryption
c0:57:1f:8d:82:bb:23:53:58:79:64:a7:e8:21:44:68:46:6e:
52:42:f3:32:13:b0:c7:b6:60:dc:b7:9e:42:80:c5:a1:26:62:
14:f5:70:5d:b0:a1:3c:4d:04:15:1c:04:9f:56:d0:68:2d:86:
84:f4:34:c9:51:76:d2:bf:70:5e:b4:ec:a3:60:21:48:2e:60:
30:52:d3:b6:42:50:26:9c:17:80:07:59:5a:2d:83:07:c6:cf:
45:ff:3c:db:d5:8f:bc:b5:bc:92:57:f3:9d:70:be:b4:d0:07:
d5:e0:77:f6:c6:1a:b7:4d:a8:45:ec:fb:91:71:25:59:f1:06:
48:ef:2b:3b:7a:cd:3d:de:49:c2:ac:7b:02:fb:2f:80:2b:cb:
85:10:9f:58:29:f7:dd:67:b9:2e:0d:6e:bc:83:f9:11:c4:df:
0f:ca:b2:58:46:1a:89:06:e5:66:6e:5a:2b:09:11:f0:df:de:
a4:95:ac:3d:35:a0:2f:0d:d8:0e:78:57:45:c0:69:8c:1f:2c:
33:45:e5:54:8c:d7:47:ab:4e:01:c6:86:af:98:dd:18:e6:4c:
51:23:11:0e:6a:8f:2f:d7:b2:c2:94:06:84:8d:bd:fb:d7:92:
16:5b:9f:bf:2c:5f:44:04:17:7f:01:ea:48:22:e3:d7:43:8e:
16:d9:c7:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:33:37 2025 by rpki-client