Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/a24095-0908-4884-9244-95d59465e9a8/1/ysJps6pTqYBp8hRsJvvn2nSnB6Y.roa
File: ysJps6pTqYBp8hRsJvvn2nSnB6Y.roa (raw, json)
Hash identifier: xFEzrUJlVVBWEtFecNObcV0TMloS/XizxOFPtUYtswE=
Subject key identifier: CA:C2:69:B3:AA:53:A9:80:69:F2:14:6C:26:FB:E7:DA:74:A7:07:A6
Certificate issuer: /CN=d94284b94325f5060f8a0e87c1be2827788f18f9
Certificate serial: 019425FBF5974E6E3C4E18D016F616F2B74A
Authority key identifier: D9:42:84:B9:43:25:F5:06:0F:8A:0E:87:C1:BE:28:27:78:8F:18:F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2UKEuUMl9QYPig6Hwb4oJ3iPGPk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/a24095-0908-4884-9244-95d59465e9a8/1/ysJps6pTqYBp8hRsJvvn2nSnB6Y.roa
Signing time: Thu 02 Jan 2025 07:47:36 +0000
ROA not before: Thu 02 Jan 2025 07:47:36 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 201193
IP address blocks: 45.143.84.0/22 maxlen: 24
45.143.84.0/24 maxlen: 24
45.143.85.0/24 maxlen: 24
45.143.86.0/24 maxlen: 24
45.143.87.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fb:f5:97:4e:6e:3c:4e:18:d0:16:f6:16:f2:b7:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d94284b94325f5060f8a0e87c1be2827788f18f9
Validity
Not Before: Jan 2 07:47:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cac269b3aa53a98069f2146c26fbe7da74a707a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:28:9e:04:9d:cd:f3:93:99:f8:f3:86:2b:8a:
cd:d7:ae:9c:4e:ad:43:9b:7b:3f:38:df:a4:a3:6a:
79:12:2e:ef:77:4c:4f:47:20:53:13:b5:67:8e:a8:
7f:c2:b2:c8:72:58:df:71:25:00:6a:10:86:df:6d:
30:51:0b:07:93:96:16:bd:91:86:8b:8f:2a:27:aa:
13:df:bd:97:4d:25:6b:da:48:06:8b:33:c4:61:f2:
be:5a:ce:03:17:da:9f:64:11:c2:da:c1:66:eb:ee:
94:1a:b8:1c:ab:ab:2f:e8:de:a1:27:67:07:2e:63:
b3:75:77:d0:2f:f2:fb:f9:b6:34:c3:22:e6:18:fa:
63:f5:3d:b8:70:df:16:74:1a:83:59:7c:10:ef:0b:
d7:e9:e0:75:e5:2a:6a:c1:13:e5:16:df:a8:ed:34:
f9:60:28:60:ad:e0:bb:91:35:8a:71:47:35:7d:05:
cc:19:29:9d:c2:ce:0d:42:56:8d:b7:f1:0d:e9:67:
2c:15:fc:ef:59:59:b4:cd:64:4d:ec:27:a3:51:1f:
6d:43:fb:11:a1:7e:1e:e3:4b:98:b6:95:17:dd:db:
48:5a:f1:72:90:f9:51:f3:46:cf:04:37:10:72:aa:
42:5b:6b:06:56:0b:33:99:2f:e7:bd:bc:63:1d:60:
7a:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:C2:69:B3:AA:53:A9:80:69:F2:14:6C:26:FB:E7:DA:74:A7:07:A6
X509v3 Authority Key Identifier:
keyid:D9:42:84:B9:43:25:F5:06:0F:8A:0E:87:C1:BE:28:27:78:8F:18:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2UKEuUMl9QYPig6Hwb4oJ3iPGPk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/a24095-0908-4884-9244-95d59465e9a8/1/ysJps6pTqYBp8hRsJvvn2nSnB6Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/a24095-0908-4884-9244-95d59465e9a8/1/2UKEuUMl9QYPig6Hwb4oJ3iPGPk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.143.84.0/22
Signature Algorithm: sha256WithRSAEncryption
02:f4:1c:03:61:38:ad:99:8d:9f:6e:af:95:cc:d1:75:2c:4a:
dd:a6:e3:87:18:bb:3f:5f:8f:b2:91:26:68:17:3d:31:93:c3:
cb:d3:58:14:ba:b7:89:ff:85:67:1b:24:c1:7b:10:36:4d:f2:
9c:aa:6e:44:85:58:07:c5:5a:02:a1:35:3b:14:bd:20:4e:c3:
9c:fc:e0:a6:c8:c8:8f:0a:eb:75:da:41:3a:8b:c8:c3:29:c4:
8d:55:09:f3:66:6e:1e:1a:01:d9:d1:f2:d5:82:16:b9:ae:f3:
45:03:e7:4a:05:49:8f:4c:45:6c:1a:7e:1c:9e:9b:49:ab:47:
89:05:84:0b:46:1f:19:6a:f4:7a:91:e2:a4:9c:30:de:cd:72:
3f:27:66:9e:d8:d0:4a:d4:39:0c:94:91:e1:0d:07:4a:a5:46:
40:5e:21:41:6b:42:01:7b:4b:c3:4c:b7:bf:10:b7:64:39:ff:
ab:d1:29:e0:bf:33:79:60:47:58:80:57:3e:ab:92:b1:50:01:
5c:c3:37:10:32:04:8a:72:63:7e:cf:6e:4b:03:cd:46:aa:bb:
3c:6b:1e:71:eb:bc:3a:82:85:8f:fa:26:59:41:43:45:e8:13:
15:c5:3f:7b:e7:b7:90:1f:05:6d:06:4c:b9:58:75:0d:8a:63:
de:73:8c:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:57:58 2025 by rpki-client