Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/f07c66-473d-435a-b693-c369c1d4c337/1/y0twRRK7kIIicC0zJX2FvmybQGw.roa
File: y0twRRK7kIIicC0zJX2FvmybQGw.roa (raw, json)
Hash identifier: RRAGiKx2HpUgHoJNcDWU1YjWsr84CXDzdBxmoXY5RBQ=
Subject key identifier: CB:4B:70:45:12:BB:90:82:22:70:2D:33:25:7D:85:BE:6C:9B:40:6C
Certificate issuer: /CN=44fc887c977393575de6257e75fa99cde2037c6c
Certificate serial: 019424B38620C1AB5429E71BCC5735514515
Authority key identifier: 44:FC:88:7C:97:73:93:57:5D:E6:25:7E:75:FA:99:CD:E2:03:7C:6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RPyIfJdzk1dd5iV-dfqZzeIDfGw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/f07c66-473d-435a-b693-c369c1d4c337/1/y0twRRK7kIIicC0zJX2FvmybQGw.roa
Signing time: Thu 02 Jan 2025 01:48:52 +0000
ROA not before: Thu 02 Jan 2025 01:48:52 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 61317
IP address blocks: 45.85.12.0/23 maxlen: 24
45.85.13.0/24 maxlen: 24
193.43.142.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:86:20:c1:ab:54:29:e7:1b:cc:57:35:51:45:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44fc887c977393575de6257e75fa99cde2037c6c
Validity
Not Before: Jan 2 01:48:52 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cb4b704512bb908222702d33257d85be6c9b406c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:7b:d0:60:73:86:61:11:a2:88:95:7e:64:20:
f7:11:e0:21:08:25:0f:21:71:3f:4b:19:65:60:82:
1c:c7:4c:5e:32:e4:25:11:78:bf:3f:48:0b:16:ab:
94:d2:7c:dc:e7:80:32:91:d1:49:7c:ce:af:b3:80:
0e:e4:97:21:dc:a8:91:6b:e0:3d:aa:dd:6a:5b:c6:
4a:50:4d:82:66:ec:79:cf:92:31:81:20:22:8d:52:
54:e0:17:f2:c4:a3:f8:cb:1c:1f:67:48:4d:ad:a0:
86:59:ef:72:f8:b1:2b:02:5e:34:d0:d2:d5:d2:9e:
8f:48:24:51:45:09:2e:54:ce:10:bf:6f:8a:d4:42:
ea:ae:12:3d:be:b1:2a:cc:8a:f6:39:88:f6:f9:ca:
54:3b:64:28:7f:b5:5c:a1:8e:3a:6e:6a:02:3e:05:
4d:15:43:bb:69:ae:75:ed:95:e9:1d:3b:ef:32:29:
29:16:07:dd:25:14:e8:19:6d:e7:9b:6a:ae:91:5d:
04:69:e2:23:95:e8:a8:75:68:55:35:c8:45:f5:e0:
1c:5b:e0:d9:d8:ad:97:d6:e0:cd:b4:a1:dd:ce:90:
b3:f5:d1:e0:c4:dd:1d:99:51:8c:3f:42:47:8f:4b:
33:77:94:da:61:ed:62:22:90:3c:3e:a3:30:76:f4:
37:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:4B:70:45:12:BB:90:82:22:70:2D:33:25:7D:85:BE:6C:9B:40:6C
X509v3 Authority Key Identifier:
keyid:44:FC:88:7C:97:73:93:57:5D:E6:25:7E:75:FA:99:CD:E2:03:7C:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RPyIfJdzk1dd5iV-dfqZzeIDfGw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/f07c66-473d-435a-b693-c369c1d4c337/1/y0twRRK7kIIicC0zJX2FvmybQGw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/f07c66-473d-435a-b693-c369c1d4c337/1/RPyIfJdzk1dd5iV-dfqZzeIDfGw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.85.12.0/23
193.43.142.0/23
Signature Algorithm: sha256WithRSAEncryption
4f:f3:1c:18:28:58:19:5e:d3:77:50:ca:7e:b7:69:40:ab:b7:
a3:57:1a:33:8b:6d:27:e0:36:c9:be:61:be:34:ac:60:24:40:
0b:20:4c:1d:c7:aa:53:89:bf:52:57:3a:61:9a:08:f3:4a:30:
c8:52:50:5a:03:8f:7d:30:82:98:8f:5f:01:41:77:9d:72:43:
8f:f1:f8:d5:94:a4:87:69:5e:ca:12:5e:c8:8f:16:d7:90:8b:
79:82:fd:9c:c0:f6:ea:36:4a:97:c9:31:0a:08:cc:15:16:72:
99:4f:f4:be:12:ec:02:1d:dc:35:fa:14:bb:e3:e0:d9:a7:a0:
3d:0f:ba:8e:72:01:4a:e1:20:56:b6:99:50:9c:10:de:0a:fa:
f8:0c:84:d3:d9:5f:c2:93:b4:f7:62:e3:36:d6:38:5e:92:df:
2e:41:ea:d4:8c:e0:69:b1:1c:39:19:f5:af:fb:9f:db:28:88:
d7:8c:28:c5:e3:d9:80:bf:14:6b:d5:33:81:f4:11:be:71:2e:
eb:d3:4b:ce:37:25:dd:89:89:51:17:25:b9:96:25:40:0e:95:
58:bb:22:f3:64:d4:65:ea:62:1e:2f:fe:34:e0:4b:be:cf:c3:
0e:5c:d7:b7:1e:4d:70:33:04:7b:1c:e9:9b:b7:f0:56:76:17:
12:9f:18:08
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZQks4YgwatUKecbzFc1UUUVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ0ZmM4ODdjOTc3MzkzNTc1ZGU2MjU3ZTc1ZmE5OWNkZTIw
MzdjNmMwHhcNMjUwMTAyMDE0ODUyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjYjRiNzA0NTEyYmI5MDgyMjI3MDJkMzMyNTdkODViZTZjOWI0MDZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvXvQYHOGYRGiiJV+ZCD3EeAhCCUP
IXE/SxllYIIcx0xeMuQlEXi/P0gLFquU0nzc54AykdFJfM6vs4AO5Jch3KiRa+A9
qt1qW8ZKUE2CZux5z5IxgSAijVJU4BfyxKP4yxwfZ0hNraCGWe9y+LErAl400NLV
0p6PSCRRRQkuVM4Qv2+K1ELqrhI9vrEqzIr2OYj2+cpUO2Qof7VcoY46bmoCPgVN
FUO7aa517ZXpHTvvMikpFgfdJRToGW3nm2qukV0EaeIjleiodWhVNchF9eAcW+DZ
2K2X1uDNtKHdzpCz9dHgxN0dmVGMP0JHj0szd5TaYe1iIpA8PqMwdvQ3bwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFMtLcEUSu5CCInAtMyV9hb5sm0BsMB8GA1UdIwQY
MBaAFET8iHyXc5NXXeYlfnX6mc3iA3xsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUlB5SWZKZHprMWRkNWlWLWRmcVp6ZUlEZkd3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy9mMDdjNjYtNDczZC00MzVhLWI2OTMt
YzM2OWMxZDRjMzM3LzEveTB0d1JSSzdrSUlpY0MwekpYMkZ2bXliUUd3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNy9mMDdjNjYtNDczZC00MzVhLWI2OTMtYzM2OWMxZDRjMzM3
LzEvUlB5SWZKZHprMWRkNWlWLWRmcVp6ZUlEZkd3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBLVUMAwQB
wSuOMA0GCSqGSIb3DQEBCwUAA4IBAQBP8xwYKFgZXtN3UMp+t2lAq7ejVxozi20n
4DbJvmG+NKxgJEALIEwdx6pTib9SVzphmgjzSjDIUlBaA499MIKYj18BQXedckOP
8fjVlKSHaV7KEl7IjxbXkIt5gv2cwPbqNkqXyTEKCMwVFnKZT/S+EuwCHdw1+hS7
4+DZp6A9D7qOcgFK4SBWtplQnBDeCvr4DITT2V/Ck7T3YuM21jhekt8uQerUjOBp
sRw5GfWv+5/bKIjXjCjF49mAvxRr1TOB9BG+cS7r00vONyXdiYlRFyW5liVADpVY
uyLzZNRl6mIeL/404Eu+z8MOXNe3Hk1wMwR7HOmbt/BWdhcSnxgI
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:43:39 2025 by rpki-client