Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/173173-819f-4bc9-92d8-78791c9356a3/1/YSDMeB2OTSIw6d7x_-ya3YNBb4I.roa
File: YSDMeB2OTSIw6d7x_-ya3YNBb4I.roa (raw, json)
Hash identifier: 5DEymavmL/Oqd88L6GTzb0QEXTGCoR8MdiyKdDZSrJI=
Subject key identifier: 61:20:CC:78:1D:8E:4D:22:30:E9:DE:F1:FF:EC:9A:DD:83:41:6F:82
Certificate issuer: /CN=11bfa2961fa0e0b07041293ddc0c3693a9e0a238
Certificate serial: 0194236978B2DF615A074092747349C2D566
Authority key identifier: 11:BF:A2:96:1F:A0:E0:B0:70:41:29:3D:DC:0C:36:93:A9:E0:A2:38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Eb-ilh-g4LBwQSk93Aw2k6ngojg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/173173-819f-4bc9-92d8-78791c9356a3/1/YSDMeB2OTSIw6d7x_-ya3YNBb4I.roa
Signing time: Wed 01 Jan 2025 19:48:22 +0000
ROA not before: Wed 01 Jan 2025 19:48:22 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208892
IP address blocks: 46.22.171.0/24 maxlen: 24
80.82.23.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:69:78:b2:df:61:5a:07:40:92:74:73:49:c2:d5:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11bfa2961fa0e0b07041293ddc0c3693a9e0a238
Validity
Not Before: Jan 1 19:48:22 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6120cc781d8e4d2230e9def1ffec9add83416f82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:1a:69:10:dc:c9:66:a1:75:15:d6:ab:dd:35:
01:29:d6:3e:bd:87:8e:55:69:df:aa:c9:3a:f8:51:
88:66:09:36:8d:1c:2c:3e:70:8f:68:5b:19:f4:ef:
0d:ea:f6:8a:6a:01:da:59:c4:d1:1c:52:ea:a3:73:
a7:5c:96:d4:bb:3b:d8:08:f0:fc:48:ea:5a:69:54:
73:f6:dc:2f:27:26:f8:6b:60:fe:34:97:31:d0:2e:
ba:36:f3:da:5a:f1:76:f7:b1:e9:b1:3e:6c:be:08:
be:6e:ba:1f:a3:77:60:3f:3a:e1:d1:12:35:e4:47:
8c:51:2e:39:fd:66:5e:57:18:a2:9a:52:8d:66:5a:
99:b1:ba:b4:f8:c6:b1:a3:0d:5e:1a:b7:8c:2a:cf:
ef:5d:c9:e3:79:07:37:d3:4c:39:f6:86:da:a3:70:
25:b2:a6:67:03:e8:20:b4:ca:b3:c4:57:b6:12:61:
a8:79:83:73:cf:06:a8:47:6b:0f:e3:88:7b:d5:89:
ed:4d:0d:fd:96:ef:60:2a:d0:97:7b:72:af:b8:09:
5e:1a:c0:8f:37:4e:d0:e7:05:f7:8a:5a:a9:67:55:
16:ca:e4:48:9c:fb:da:28:b7:b0:59:26:1d:85:d3:
23:0f:20:01:bc:bb:ac:ac:71:5e:99:15:aa:c8:c0:
69:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:20:CC:78:1D:8E:4D:22:30:E9:DE:F1:FF:EC:9A:DD:83:41:6F:82
X509v3 Authority Key Identifier:
keyid:11:BF:A2:96:1F:A0:E0:B0:70:41:29:3D:DC:0C:36:93:A9:E0:A2:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Eb-ilh-g4LBwQSk93Aw2k6ngojg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/173173-819f-4bc9-92d8-78791c9356a3/1/YSDMeB2OTSIw6d7x_-ya3YNBb4I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/173173-819f-4bc9-92d8-78791c9356a3/1/Eb-ilh-g4LBwQSk93Aw2k6ngojg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.22.171.0/24
80.82.23.0/24
Signature Algorithm: sha256WithRSAEncryption
a3:f5:90:a1:d3:08:ca:9a:2c:f5:f1:55:fc:35:7e:b4:f3:a7:
e8:bf:53:a4:ef:74:b1:43:cb:3e:68:5b:3a:99:6a:c0:d4:ce:
45:e5:b4:65:f2:30:60:58:97:4e:c7:ef:9d:0d:10:62:a5:26:
42:5b:5a:e5:4f:26:f8:cf:28:b4:0d:0e:64:ec:fd:b2:bf:30:
cc:8c:83:ad:f4:ad:68:32:f1:e6:7d:49:0a:ac:9a:77:92:5e:
dd:1b:00:2a:6a:51:b8:ad:7e:01:52:89:79:34:ad:89:e1:39:
09:bf:c1:de:cd:f3:64:98:f2:03:f2:31:a8:46:de:08:f8:ac:
37:50:a2:fe:72:cb:b2:9f:20:1a:a9:dc:89:bb:8c:ce:5f:d9:
b4:93:71:99:e2:65:65:86:0b:d2:8e:1a:0d:64:88:9d:b9:27:
e1:06:6a:57:95:ba:ec:c0:cc:17:50:58:ec:59:00:ee:2c:90:
fd:37:41:fa:82:8e:2d:d5:dc:7f:71:db:03:40:8f:90:e5:4b:
24:7a:a6:be:53:ce:a1:53:26:45:b6:2e:45:ec:76:42:24:eb:
c7:ff:a8:68:4f:b4:a7:a5:0f:57:81:6b:b0:ee:e7:fd:bd:47:
7a:49:40:f0:c7:d6:3c:7c:9e:40:43:2e:3a:8d:5b:75:9d:2b:
62:77:56:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:35:26 2025 by rpki-client