Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/7bc3ab-d9b6-4ae4-bcd1-ce57150695a9/1/YmjzyL8u46kR-vLpOTgdOuGRLe4.roa
File: YmjzyL8u46kR-vLpOTgdOuGRLe4.roa (raw, json)
Hash identifier: +shBEhVl1U5CwR8GD48ZiNABdc0jQhByNS6Iqg6jdZM=
Subject key identifier: 62:68:F3:C8:BF:2E:E3:A9:11:FA:F2:E9:39:38:1D:3A:E1:91:2D:EE
Certificate issuer: /CN=ec4fb061a9426e4fb2885d822867572a1b58a4c0
Certificate serial: 01946A24881A47AB6DBC84AF76B132E4B955
Authority key identifier: EC:4F:B0:61:A9:42:6E:4F:B2:88:5D:82:28:67:57:2A:1B:58:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7E-wYalCbk-yiF2CKGdXKhtYpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/7bc3ab-d9b6-4ae4-bcd1-ce57150695a9/1/YmjzyL8u46kR-vLpOTgdOuGRLe4.roa
Signing time: Wed 15 Jan 2025 13:26:06 +0000
ROA not before: Wed 15 Jan 2025 13:26:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49042
IP address blocks: 45.14.226.0/24 maxlen: 24
45.148.120.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:6a:24:88:1a:47:ab:6d:bc:84:af:76:b1:32:e4:b9:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec4fb061a9426e4fb2885d822867572a1b58a4c0
Validity
Not Before: Jan 15 13:26:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6268f3c8bf2ee3a911faf2e939381d3ae1912dee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:99:a5:dc:5b:0d:b5:68:ad:16:03:0f:cb:03:
57:6d:a4:a3:28:18:f9:d4:3c:cc:c6:1b:d9:7f:32:
2c:ce:30:98:66:a8:9d:78:31:48:64:00:ef:e6:a0:
62:97:78:d0:f3:81:3f:f5:0b:30:e4:74:7c:d4:0e:
66:fc:97:2c:fb:58:77:bb:d1:7f:81:dc:df:0b:ed:
52:5c:df:d0:16:06:31:78:f3:ac:48:ab:30:39:5c:
bc:44:3c:2d:81:2b:78:d0:12:aa:ec:46:63:5e:50:
15:49:ed:0d:c5:53:ca:93:56:37:9a:fa:c7:2d:a0:
25:ee:48:c8:c2:1b:94:f9:9b:07:e9:d8:35:24:1a:
94:6e:bf:f1:d8:0e:82:74:43:32:48:5a:8c:7f:42:
63:aa:c2:61:f7:01:bb:50:22:c9:17:89:de:0e:c0:
b9:0f:9c:87:7e:c2:29:47:30:10:9c:c4:e9:be:a7:
5b:62:69:ec:44:b0:39:81:84:61:32:e7:0d:2d:9c:
ca:de:7d:82:ed:aa:67:25:88:db:fd:66:36:d7:ad:
3b:4d:b3:a1:77:0b:42:93:66:3c:2f:c3:f5:b8:42:
21:9b:85:29:16:fe:3e:4c:74:5a:6d:58:03:f6:50:
e5:9f:a0:a3:bd:e9:84:f8:12:76:80:ff:ef:b2:85:
7f:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:68:F3:C8:BF:2E:E3:A9:11:FA:F2:E9:39:38:1D:3A:E1:91:2D:EE
X509v3 Authority Key Identifier:
keyid:EC:4F:B0:61:A9:42:6E:4F:B2:88:5D:82:28:67:57:2A:1B:58:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7E-wYalCbk-yiF2CKGdXKhtYpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/7bc3ab-d9b6-4ae4-bcd1-ce57150695a9/1/YmjzyL8u46kR-vLpOTgdOuGRLe4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/7bc3ab-d9b6-4ae4-bcd1-ce57150695a9/1/7E-wYalCbk-yiF2CKGdXKhtYpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.14.226.0/24
45.148.120.0/24
Signature Algorithm: sha256WithRSAEncryption
76:4c:f2:3c:7a:85:e9:1e:01:8f:67:76:cd:c8:a5:fb:4a:fb:
8a:e8:96:b3:ed:8a:5d:ae:25:03:b4:b7:19:11:96:0a:00:b7:
fc:fb:07:64:d8:00:eb:c5:83:d4:9e:d9:91:75:6b:93:8c:42:
f0:1e:dd:10:7f:bf:69:89:21:33:1f:b9:4f:d0:78:bc:a2:69:
b7:89:11:8b:12:86:a7:55:2c:8b:b0:f3:27:e2:5e:c2:aa:e2:
76:cf:c8:1b:18:ef:f3:71:2c:56:7a:a2:96:57:21:6d:27:d5:
b9:96:25:f9:e1:83:ed:74:34:0a:72:85:d7:60:bf:55:e7:15:
13:9f:d9:c3:8b:db:75:6e:65:b1:f6:39:79:16:17:d7:12:47:
a2:4c:30:6e:50:be:3d:d3:8b:48:56:cc:2d:aa:6b:19:99:f0:
a3:40:73:c6:fb:3f:71:4b:71:ae:fe:c9:9e:f4:d0:7f:eb:8d:
63:ad:e2:fa:da:e4:8d:31:2a:8d:af:9a:2e:e1:d9:de:86:af:
b8:2a:a0:71:f7:32:35:83:53:4f:0b:79:64:e1:59:9b:d0:a5:
a6:46:57:f1:23:25:00:26:ee:b4:2f:72:f3:e3:46:cb:8b:79:
e2:f8:02:7e:95:1a:4d:1a:7f:ae:e7:54:83:95:5d:2b:df:04:
de:04:00:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 02:14:50 2025 by rpki-client