Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/YgOutFNosyHqEKpML59P8660dc4.roa
File: YgOutFNosyHqEKpML59P8660dc4.roa (raw, json)
Hash identifier: zU9SBQ1bTbt9YfdUVPUnW5WPlDH+MBvlQeIzoSIIoL8=
Subject key identifier: 62:03:AE:B4:53:68:B3:21:EA:10:AA:4C:2F:9F:4F:F3:AE:B4:75:CE
Certificate issuer: /CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc
Certificate serial: 019424B3A0D6A87B8E0229F35CC2015C2184
Authority key identifier: 17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/YgOutFNosyHqEKpML59P8660dc4.roa
Signing time: Thu 02 Jan 2025 01:48:59 +0000
ROA not before: Thu 02 Jan 2025 01:48:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 140683
IP address blocks: 45.135.237.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:a0:d6:a8:7b:8e:02:29:f3:5c:c2:01:5c:21:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc
Validity
Not Before: Jan 2 01:48:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6203aeb45368b321ea10aa4c2f9f4ff3aeb475ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:c9:27:eb:1e:81:08:5a:99:69:38:94:ab:65:
57:fb:6b:e2:96:78:d0:66:c5:00:c2:3e:0f:de:e1:
b6:fd:65:7b:87:36:8f:71:e9:e4:8f:38:1d:03:0b:
ac:04:9a:45:50:8f:93:2c:42:2d:1f:22:98:13:1e:
97:f4:7c:78:c2:fc:cf:7d:b7:fc:45:ea:8c:3d:c5:
5b:f3:b7:9b:8b:7b:58:88:04:ff:bb:78:db:d8:91:
44:62:30:f8:ce:8c:56:9c:f7:a8:26:c1:91:8d:76:
4a:bd:43:f1:ef:38:c6:8c:6d:66:36:24:16:c0:85:
32:1a:7c:00:85:b5:e9:58:dc:40:66:bb:d3:c7:14:
f0:f9:ad:04:50:ff:8c:6c:ca:d1:11:2e:5b:62:15:
26:6b:e7:36:2a:17:4f:b0:5d:7b:32:ce:e9:38:a1:
e6:d3:94:8c:8b:9e:5f:1d:f2:06:2c:4c:d0:59:86:
5b:33:f3:92:f0:91:ce:e1:24:c7:2b:f3:a1:0c:b8:
2a:3e:d8:19:09:ab:d0:6e:c0:74:1f:b1:b7:24:94:
29:28:0c:77:a6:73:9d:6b:b4:d1:a3:3e:2a:1b:14:
e6:6f:72:af:92:de:35:95:92:1e:11:86:58:2a:27:
d8:8f:45:5d:ff:48:d6:e7:4a:10:53:18:89:39:49:
67:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:03:AE:B4:53:68:B3:21:EA:10:AA:4C:2F:9F:4F:F3:AE:B4:75:CE
X509v3 Authority Key Identifier:
keyid:17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/YgOutFNosyHqEKpML59P8660dc4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.135.237.0/24
Signature Algorithm: sha256WithRSAEncryption
83:40:f8:fc:42:94:6a:76:67:03:60:56:8d:3d:93:b8:8b:b0:
92:82:36:4c:aa:c6:92:5d:31:fa:9c:8f:50:66:15:bf:92:e0:
b8:e4:91:80:96:9f:f5:b9:45:64:f8:9c:ac:1b:5e:f6:ea:fb:
a1:6b:35:2c:df:0c:6d:bc:1f:35:1b:ef:e4:d0:4b:dc:7c:31:
30:5c:16:4e:4b:fe:8c:a7:33:c1:d2:97:cd:14:f0:77:7e:85:
fc:56:e1:9f:ad:65:27:0f:18:34:9d:5a:a7:b3:8e:89:3a:dc:
08:5e:95:1f:f4:0d:34:3f:91:82:73:e6:f2:f0:f8:26:b1:34:
c0:96:59:63:c6:34:9d:d0:42:96:54:e6:68:e0:85:90:8a:92:
13:8f:47:92:f8:d5:89:ad:bc:a6:ea:21:ab:2c:6c:a7:b3:fb:
6c:58:c6:b6:e0:80:28:33:0e:44:68:aa:df:c0:08:98:50:22:
30:06:69:e8:7c:fd:7c:fe:fd:bc:04:34:7c:b1:89:d6:16:27:
55:08:6b:68:7e:08:b4:7a:12:94:5e:09:90:58:7c:7a:18:8a:
8c:b4:87:cb:cc:94:16:ed:5e:55:bb:f0:92:74:cc:46:f5:d1:
fb:69:0d:8d:3f:f7:cd:5c:97:aa:87:de:b0:17:11:53:a5:a4:
c9:df:3d:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 16:42:50 2025 by rpki-client