Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/YpSy8jbRnM9w8kDkqm6sqVL31Vg.roa
File: YpSy8jbRnM9w8kDkqm6sqVL31Vg.roa (raw, json)
Hash identifier: y4M1J3UD3R8MPFxzHQy5V7i+1os1Q7+5rVpIy1Wd6yk=
Subject key identifier: 62:94:B2:F2:36:D1:9C:CF:70:F2:40:E4:AA:6E:AC:A9:52:F7:D5:58
Certificate issuer: /CN=d93da2019909d9fc37829fd9ec29d948ecff7c92
Certificate serial: 01942823970E26657642080F5A8B19642150
Authority key identifier: D9:3D:A2:01:99:09:D9:FC:37:82:9F:D9:EC:29:D9:48:EC:FF:7C:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2T2iAZkJ2fw3gp_Z7CnZSOz_fJI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/YpSy8jbRnM9w8kDkqm6sqVL31Vg.roa
Signing time: Thu 02 Jan 2025 17:50:08 +0000
ROA not before: Thu 02 Jan 2025 17:50:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211091
IP address blocks: 45.154.159.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:23:97:0e:26:65:76:42:08:0f:5a:8b:19:64:21:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d93da2019909d9fc37829fd9ec29d948ecff7c92
Validity
Not Before: Jan 2 17:50:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6294b2f236d19ccf70f240e4aa6eaca952f7d558
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:fe:cb:fb:86:15:37:a4:ad:96:9f:b6:27:5f:
60:45:40:c9:43:2d:9c:d5:2b:12:f6:07:12:0a:c1:
7a:1a:ee:c7:90:b0:ba:a1:eb:63:b1:c2:62:c9:55:
53:72:0d:21:f3:19:0e:3f:80:c2:cb:ad:86:2e:81:
65:ee:ad:a3:7a:07:92:fb:53:31:4e:87:63:03:d9:
49:a9:88:d9:38:21:c0:f9:00:3a:c1:86:3a:41:b7:
08:33:ee:a7:eb:54:9b:ef:ae:c5:93:fc:94:6f:55:
59:f5:88:cd:cf:a6:4c:47:21:10:f7:fe:dd:d5:37:
44:41:f7:76:f4:f8:c2:65:40:79:f4:e4:b8:2d:d6:
16:c8:eb:0c:f9:ee:14:b6:4d:93:85:d1:f6:3a:82:
dc:28:7b:7b:dd:c6:62:ee:cf:59:0b:40:16:26:52:
8c:51:23:0c:11:3c:26:7f:4b:3b:1e:a8:af:f4:cc:
92:d1:78:cb:08:62:40:87:65:3c:b7:63:74:df:00:
ca:33:e8:47:e1:22:e9:3a:ed:8c:02:87:ed:32:5b:
f0:a9:00:17:88:17:6f:30:e7:ed:60:db:3b:be:f8:
ac:2e:02:75:05:5f:4d:dc:68:c2:8c:04:65:cd:92:
b3:87:3d:92:a6:6e:0d:4e:3a:1c:80:7a:ac:4a:e6:
45:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:94:B2:F2:36:D1:9C:CF:70:F2:40:E4:AA:6E:AC:A9:52:F7:D5:58
X509v3 Authority Key Identifier:
keyid:D9:3D:A2:01:99:09:D9:FC:37:82:9F:D9:EC:29:D9:48:EC:FF:7C:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2T2iAZkJ2fw3gp_Z7CnZSOz_fJI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/YpSy8jbRnM9w8kDkqm6sqVL31Vg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/2T2iAZkJ2fw3gp_Z7CnZSOz_fJI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.154.159.0/24
Signature Algorithm: sha256WithRSAEncryption
19:87:41:e8:73:48:1d:10:da:11:f1:ac:81:25:d8:89:05:70:
e8:b6:96:71:0a:03:7a:71:f2:e5:ae:0c:06:90:73:e5:96:2e:
85:a5:f9:6a:10:49:13:14:cf:27:0a:78:91:99:67:8c:84:38:
b3:58:d4:44:10:d7:84:08:48:ca:61:7d:6b:fd:a1:db:dd:6a:
45:c4:2d:40:a6:1c:cd:7b:9f:0f:55:70:30:ff:c6:68:1b:a3:
d4:19:97:3d:a0:40:87:98:dc:71:43:1c:62:fd:9d:14:e1:ae:
f8:60:ed:0b:e0:01:d6:9e:46:73:6f:fe:b1:8c:a1:55:fb:e0:
7c:29:ab:81:72:ac:cf:85:98:16:1e:66:ce:b7:a8:7f:7e:13:
09:9e:70:81:bf:1f:a3:66:69:1e:fc:f5:59:24:2d:2d:71:e3:
c1:7b:aa:61:3f:9d:ae:81:5d:93:5e:8a:fa:b4:78:3d:d0:eb:
f1:7b:4d:8c:78:0f:36:7a:a1:99:d1:c2:02:a3:a3:cf:d9:9f:
01:c9:ab:fd:76:1b:94:28:f7:e9:a3:aa:9a:3d:3e:5b:c7:2b:
fa:ab:3d:5e:db:f7:60:ce:01:fc:f2:0f:e7:38:ca:23:af:92:
07:ca:55:96:d4:26:9b:32:ec:0e:d9:58:e3:aa:78:0f:53:d0:
95:00:02:3a
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQoI5cOJmV2QggPWosZZCFQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ5M2RhMjAxOTkwOWQ5ZmMzNzgyOWZkOWVjMjlkOTQ4ZWNm
ZjdjOTIwHhcNMjUwMTAyMTc1MDA4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2Mjk0YjJmMjM2ZDE5Y2NmNzBmMjQwZTRhYTZlYWNhOTUyZjdkNTU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5/7L+4YVN6Stlp+2J19gRUDJQy2c
1SsS9gcSCsF6Gu7HkLC6oetjscJiyVVTcg0h8xkOP4DCy62GLoFl7q2jegeS+1Mx
TodjA9lJqYjZOCHA+QA6wYY6QbcIM+6n61Sb767Fk/yUb1VZ9YjNz6ZMRyEQ9/7d
1TdEQfd29PjCZUB59OS4LdYWyOsM+e4Utk2ThdH2OoLcKHt73cZi7s9ZC0AWJlKM
USMMETwmf0s7Hqiv9MyS0XjLCGJAh2U8t2N03wDKM+hH4SLpOu2MAoftMlvwqQAX
iBdvMOftYNs7vvisLgJ1BV9N3GjCjARlzZKzhz2Spm4NTjocgHqsSuZFmQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGKUsvI20ZzPcPJA5KpurKlS99VYMB8GA1UdIwQY
MBaAFNk9ogGZCdn8N4Kf2ewp2Ujs/3ySMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMlQyaUFaa0oyZnczZ3BfWjdDblpTT3pfZkpJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi80N2FmYTMtY2UzMS00MDYwLWEwNzgt
ZjVhZGRkZGYxZWM1LzEvWXBTeThqYlJuTTl3OGtEa3FtNnNxVkwzMVZnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMi80N2FmYTMtY2UzMS00MDYwLWEwNzgtZjVhZGRkZGYxZWM1
LzEvMlQyaUFaa0oyZnczZ3BfWjdDblpTT3pfZkpJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALZqfMA0G
CSqGSIb3DQEBCwUAA4IBAQAZh0Hoc0gdENoR8ayBJdiJBXDotpZxCgN6cfLlrgwG
kHPlli6FpflqEEkTFM8nCniRmWeMhDizWNREENeECEjKYX1r/aHb3WpFxC1AphzN
e58PVXAw/8ZoG6PUGZc9oECHmNxxQxxi/Z0U4a74YO0L4AHWnkZzb/6xjKFV++B8
KauBcqzPhZgWHmbOt6h/fhMJnnCBvx+jZmke/PVZJC0tcePBe6phP52ugV2TXor6
tHg90Ovxe02MeA82eqGZ0cICo6PP2Z8Byav9dhuUKPfpo6qaPT5bxyv6qz1e2/dg
zgH88g/nOMojr5IHylWW1CabMuwO2VjjqngPU9CVAAI6
-----END CERTIFICATE-----
Generated at Sat Apr 26 12:24:20 2025 by rpki-client