Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/b08e6e-0822-4224-954b-a6b1ad34e08c/1/yaNI0_QU-og_a5wIKL7nblpP3wo.roa
File: yaNI0_QU-og_a5wIKL7nblpP3wo.roa (raw, json)
Hash identifier: mocSKnatPWu2K5HO5VSBkHGD9dsGk50fbeHRajNzTSQ=
Subject key identifier: C9:A3:48:D3:F4:14:FA:88:3F:6B:9C:08:28:BE:E7:6E:5A:4F:DF:0A
Certificate issuer: /CN=91d7ecf17142b3b0935f8e37b8f7d9c253f0ee19
Certificate serial: 019425FDB433B9C3867E256E704169414284
Authority key identifier: 91:D7:EC:F1:71:42:B3:B0:93:5F:8E:37:B8:F7:D9:C2:53:F0:EE:19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kdfs8XFCs7CTX443uPfZwlPw7hk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/b08e6e-0822-4224-954b-a6b1ad34e08c/1/yaNI0_QU-og_a5wIKL7nblpP3wo.roa
Signing time: Thu 02 Jan 2025 07:49:31 +0000
ROA not before: Thu 02 Jan 2025 07:49:31 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8767
IP address blocks: 45.84.72.0/23 maxlen: 23
45.84.74.0/23 maxlen: 23
2a0e:a680::/48 maxlen: 48
2a0e:a680:1::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:b4:33:b9:c3:86:7e:25:6e:70:41:69:41:42:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91d7ecf17142b3b0935f8e37b8f7d9c253f0ee19
Validity
Not Before: Jan 2 07:49:31 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c9a348d3f414fa883f6b9c0828bee76e5a4fdf0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:1e:97:73:9c:3c:eb:c0:10:61:16:74:14:ba:
82:83:2f:68:f2:38:9d:b1:19:b2:56:c9:a9:ad:c7:
e0:78:7a:11:0c:34:27:91:9c:89:ea:89:49:ab:2a:
6b:bb:d2:f1:f3:32:06:24:e3:5d:e0:c5:01:26:ec:
d0:20:75:94:29:41:d8:0d:02:ac:9e:f4:f3:dd:c0:
fb:cc:e5:e4:b1:51:e6:24:f9:32:65:d2:28:86:3a:
ef:06:54:72:e6:46:2d:b1:84:54:5a:d6:95:75:35:
b4:a2:bf:2d:37:89:f2:62:97:2c:e9:62:0d:a4:a7:
eb:31:4f:77:f8:a8:aa:b7:82:ee:eb:7b:45:21:ce:
c0:53:c0:2f:bb:a1:d9:05:35:f7:4d:3f:08:14:f6:
bd:36:7d:8b:75:8a:04:88:fd:93:83:21:a1:e6:36:
5c:80:dd:0a:e3:e9:3a:ee:87:74:73:39:b5:66:07:
02:5f:62:b2:3f:61:fd:f0:b1:29:04:9f:3f:e5:56:
fb:43:df:76:8f:87:79:45:09:27:90:56:98:98:4c:
5d:63:8e:e6:44:a3:6f:1d:47:93:df:b9:15:25:fe:
5b:1e:3e:e3:51:14:e8:ae:17:f9:19:1c:13:f7:8a:
f6:ca:00:62:b3:88:52:f0:53:5b:9c:2d:c0:50:ee:
13:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:A3:48:D3:F4:14:FA:88:3F:6B:9C:08:28:BE:E7:6E:5A:4F:DF:0A
X509v3 Authority Key Identifier:
keyid:91:D7:EC:F1:71:42:B3:B0:93:5F:8E:37:B8:F7:D9:C2:53:F0:EE:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kdfs8XFCs7CTX443uPfZwlPw7hk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/b08e6e-0822-4224-954b-a6b1ad34e08c/1/yaNI0_QU-og_a5wIKL7nblpP3wo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/b08e6e-0822-4224-954b-a6b1ad34e08c/1/kdfs8XFCs7CTX443uPfZwlPw7hk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.84.72.0/22
IPv6:
2a0e:a680::/47
Signature Algorithm: sha256WithRSAEncryption
01:6d:d7:14:7e:0c:18:66:6f:9e:df:7f:49:49:79:96:9b:f2:
23:a1:ab:f1:e4:41:53:5e:94:e4:c8:0a:d4:cb:8e:ee:4c:39:
45:49:37:1b:be:55:89:10:ca:f0:90:b4:60:a3:5b:c2:fd:c5:
67:eb:ad:1b:42:5a:b0:78:fd:83:22:c7:2a:6d:76:3c:04:b9:
3b:a4:4d:75:9d:7c:28:7f:b1:d9:98:3b:6d:f9:28:40:11:db:
10:35:85:0c:a6:5a:05:c1:57:6d:98:ca:0e:b6:3f:44:a4:ab:
1b:78:ee:61:04:e1:c3:2c:12:4a:14:61:01:58:c3:1f:6a:07:
b7:9a:98:ee:de:fa:48:71:53:72:eb:f8:f5:42:9a:92:86:7e:
c7:cc:f7:b1:f6:06:85:6b:c3:3e:e0:de:cc:c4:65:df:a2:c0:
90:7d:cc:32:62:88:fd:a0:b0:1a:31:2d:24:1b:a8:2a:07:0b:
4d:43:4d:55:62:81:6e:1c:fc:cc:10:88:b3:8f:56:f0:81:bf:
2c:f3:fc:96:4c:13:07:84:10:de:b7:99:c6:42:e2:d5:4b:63:
31:35:19:c2:f3:b5:85:c9:c3:8e:f9:60:31:94:83:37:15:d9:
3a:55:d0:66:23:93:34:76:1f:39:49:85:0a:64:4d:5d:61:04:
61:1d:33:0f
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAZQl/bQzucOGfiVucEFpQUKEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkxZDdlY2YxNzE0MmIzYjA5MzVmOGUzN2I4ZjdkOWMyNTNm
MGVlMTkwHhcNMjUwMTAyMDc0OTMxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjOWEzNDhkM2Y0MTRmYTg4M2Y2YjljMDgyOGJlZTc2ZTVhNGZkZjBhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzB6Xc5w868AQYRZ0FLqCgy9o8jid
sRmyVsmprcfgeHoRDDQnkZyJ6olJqypru9Lx8zIGJONd4MUBJuzQIHWUKUHYDQKs
nvTz3cD7zOXksVHmJPkyZdIohjrvBlRy5kYtsYRUWtaVdTW0or8tN4nyYpcs6WIN
pKfrMU93+Kiqt4Lu63tFIc7AU8Avu6HZBTX3TT8IFPa9Nn2LdYoEiP2TgyGh5jZc
gN0K4+k67od0czm1ZgcCX2KyP2H98LEpBJ8/5Vb7Q992j4d5RQknkFaYmExdY47m
RKNvHUeT37kVJf5bHj7jURTorhf5GRwT94r2ygBis4hS8FNbnC3AUO4TRwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFMmjSNP0FPqIP2ucCCi+525aT98KMB8GA1UdIwQY
MBaAFJHX7PFxQrOwk1+ON7j32cJT8O4ZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva2RmczhYRkNzN0NUWDQ0M3VQZlp3bFB3N2hrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi9iMDhlNmUtMDgyMi00MjI0LTk1NGIt
YTZiMWFkMzRlMDhjLzEveWFOSTBfUVUtb2dfYTV3SUtMN25ibHBQM3dvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNi9iMDhlNmUtMDgyMi00MjI0LTk1NGItYTZiMWFkMzRlMDhj
LzEva2RmczhYRkNzN0NUWDQ0M3VQZlp3bFB3N2hrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQCLVRIMA8E
AgACMAkDBwEqDqaAAAAwDQYJKoZIhvcNAQELBQADggEBAAFt1xR+DBhmb57ff0lJ
eZab8iOhq/HkQVNelOTICtTLju5MOUVJNxu+VYkQyvCQtGCjW8L9xWfrrRtCWrB4
/YMixyptdjwEuTukTXWdfCh/sdmYO235KEAR2xA1hQymWgXBV22Yyg62P0Skqxt4
7mEE4cMsEkoUYQFYwx9qB7eamO7e+khxU3Lr+PVCmpKGfsfM97H2BoVrwz7g3szE
Zd+iwJB9zDJiiP2gsBoxLSQbqCoHC01DTVVigW4c/MwQiLOPVvCBvyzz/JZMEweE
EN63mcZC4tVLYzE1GcLztYXJw475YDGUgzcV2TpV0GYjkzR2HzlJhQpkTV1hBGEd
Mw8=
-----END CERTIFICATE-----
Generated at Fri Apr 25 06:57:39 2025 by rpki-client