Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/03ca23-a143-4df0-afb9-a24e3a0a31ef/1/YQBMItgYzXgvtsJZr9Y-cbi0JwI.roa
File: YQBMItgYzXgvtsJZr9Y-cbi0JwI.roa (raw, json)
Hash identifier: AkAfo5mQ4fkk6X0GxvhEwCam5E0S5qDCnTw0oq+a9Dk=
Subject key identifier: 61:00:4C:22:D8:18:CD:78:2F:B6:C2:59:AF:D6:3E:71:B8:B4:27:02
Certificate issuer: /CN=98728e8a27d30c83aee5f496240985ee40cb378b
Certificate serial: 01942369D8D59516C24B2E583685C92D671E
Authority key identifier: 98:72:8E:8A:27:D3:0C:83:AE:E5:F4:96:24:09:85:EE:40:CB:37:8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mHKOiifTDIOu5fSWJAmF7kDLN4s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/03ca23-a143-4df0-afb9-a24e3a0a31ef/1/YQBMItgYzXgvtsJZr9Y-cbi0JwI.roa
Signing time: Wed 01 Jan 2025 19:48:46 +0000
ROA not before: Wed 01 Jan 2025 19:48:46 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 56563
IP address blocks: 45.154.31.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:69:d8:d5:95:16:c2:4b:2e:58:36:85:c9:2d:67:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98728e8a27d30c83aee5f496240985ee40cb378b
Validity
Not Before: Jan 1 19:48:46 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=61004c22d818cd782fb6c259afd63e71b8b42702
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:37:e1:03:87:c8:29:81:ab:99:17:93:cf:53:
30:83:1b:da:13:a6:c5:2c:e7:19:96:89:4e:69:4d:
a2:f4:fd:73:aa:81:85:f3:81:9b:36:b8:10:0a:51:
bf:9f:d9:c1:4d:34:ed:08:48:1b:1c:ef:b5:40:f0:
79:7f:73:5d:82:8a:30:c3:e6:37:48:24:e1:3c:bf:
8d:ff:10:d8:6d:df:75:69:bf:b8:9d:dc:aa:17:44:
e7:06:ca:60:4f:37:a4:00:a9:4f:60:d5:d5:b2:0b:
49:6d:db:ee:c7:9b:69:12:32:f6:82:a9:7d:85:20:
d4:3d:d9:54:dd:70:bd:bc:cb:fb:77:bf:a4:1f:8a:
7b:77:46:1c:60:b5:a0:98:5d:ec:1d:77:5c:e9:da:
ab:3d:9d:a5:04:a9:e3:16:28:5e:ca:52:e5:5c:db:
ac:91:6c:41:6d:1a:4b:66:6b:91:99:d3:be:3f:00:
88:96:90:26:a8:ba:ba:76:da:eb:d8:f8:51:62:cb:
6e:17:30:cf:48:9e:00:e0:64:13:15:9b:8e:0a:d8:
52:65:66:03:17:b4:24:af:5d:ca:f9:8d:6c:91:c9:
a8:28:25:e9:01:67:5e:43:fb:7c:a8:4e:80:46:33:
7d:4a:81:d0:07:5c:e2:e1:6e:00:a5:9b:92:35:e2:
7d:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:00:4C:22:D8:18:CD:78:2F:B6:C2:59:AF:D6:3E:71:B8:B4:27:02
X509v3 Authority Key Identifier:
keyid:98:72:8E:8A:27:D3:0C:83:AE:E5:F4:96:24:09:85:EE:40:CB:37:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mHKOiifTDIOu5fSWJAmF7kDLN4s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/03ca23-a143-4df0-afb9-a24e3a0a31ef/1/YQBMItgYzXgvtsJZr9Y-cbi0JwI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/03ca23-a143-4df0-afb9-a24e3a0a31ef/1/mHKOiifTDIOu5fSWJAmF7kDLN4s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.154.31.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:4e:c8:95:cb:e2:35:02:a6:ad:1f:59:68:30:72:2a:24:65:
a2:c0:32:fe:a4:76:c2:8e:66:40:7c:99:9e:8a:8a:09:7e:a7:
1c:11:f1:da:6c:e0:6f:25:3f:b9:75:11:cd:7f:78:f6:c3:5f:
eb:b2:6a:9d:ee:6c:33:9e:a4:d9:aa:5a:6c:c2:9b:2c:8b:ca:
2e:18:c4:48:fb:10:50:1a:4f:7f:67:fb:ad:a4:14:f9:a5:00:
94:c0:3f:26:d9:8d:df:4d:8f:7c:e6:38:9b:ef:22:25:a7:00:
f4:69:0b:e9:4f:1b:9e:40:63:be:23:07:f5:2e:e2:c5:dc:89:
8b:5f:59:0b:19:46:ce:15:50:6e:a6:11:54:a3:32:6c:6c:6e:
60:38:4d:9c:ce:c7:25:a1:6d:22:7d:7e:9a:23:ec:c6:a7:9c:
4d:ff:e0:48:65:bf:6f:7e:be:b8:8f:c7:f4:1f:0b:7b:47:6f:
28:fc:11:38:bd:ae:26:f9:79:9f:ec:34:10:d3:f1:36:49:85:
f6:9b:7e:51:ed:34:ee:d1:5f:f7:5a:6d:c2:36:08:d5:02:19:
1d:a1:21:ca:ce:c7:5b:a6:c4:5d:d9:cb:ba:c3:c4:c2:e1:d2:
3d:8a:f3:92:06:05:fc:48:80:99:df:fb:eb:03:77:be:43:be:
4a:0c:93:8c
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQjadjVlRbCSy5YNoXJLWceMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk4NzI4ZThhMjdkMzBjODNhZWU1ZjQ5NjI0MDk4NWVlNDBj
YjM3OGIwHhcNMjUwMTAxMTk0ODQ2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2MTAwNGMyMmQ4MThjZDc4MmZiNmMyNTlhZmQ2M2U3MWI4YjQyNzAyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmDfhA4fIKYGrmReTz1MwgxvaE6bF
LOcZlolOaU2i9P1zqoGF84GbNrgQClG/n9nBTTTtCEgbHO+1QPB5f3Ndgooww+Y3
SCThPL+N/xDYbd91ab+4ndyqF0TnBspgTzekAKlPYNXVsgtJbdvux5tpEjL2gql9
hSDUPdlU3XC9vMv7d7+kH4p7d0YcYLWgmF3sHXdc6dqrPZ2lBKnjFiheylLlXNus
kWxBbRpLZmuRmdO+PwCIlpAmqLq6dtrr2PhRYstuFzDPSJ4A4GQTFZuOCthSZWYD
F7Qkr13K+Y1skcmoKCXpAWdeQ/t8qE6ARjN9SoHQB1zi4W4ApZuSNeJ92QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGEATCLYGM14L7bCWa/WPnG4tCcCMB8GA1UdIwQY
MBaAFJhyjoon0wyDruX0liQJhe5AyzeLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbUhLT2lpZlRESU91NWZTV0pBbUY3a0RMTjRzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC8wM2NhMjMtYTE0My00ZGYwLWFmYjkt
YTI0ZTNhMGEzMWVmLzEvWVFCTUl0Z1l6WGd2dHNKWnI5WS1jYmkwSndJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZC8wM2NhMjMtYTE0My00ZGYwLWFmYjktYTI0ZTNhMGEzMWVm
LzEvbUhLT2lpZlRESU91NWZTV0pBbUY3a0RMTjRzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALZofMA0G
CSqGSIb3DQEBCwUAA4IBAQCOTsiVy+I1AqatH1loMHIqJGWiwDL+pHbCjmZAfJme
iooJfqccEfHabOBvJT+5dRHNf3j2w1/rsmqd7mwznqTZqlpswpssi8ouGMRI+xBQ
Gk9/Z/utpBT5pQCUwD8m2Y3fTY985jib7yIlpwD0aQvpTxueQGO+Iwf1LuLF3ImL
X1kLGUbOFVBuphFUozJsbG5gOE2czscloW0ifX6aI+zGp5xN/+BIZb9vfr64j8f0
Hwt7R28o/BE4va4m+Xmf7DQQ0/E2SYX2m35R7TTu0V/3Wm3CNgjVAhkdoSHKzsdb
psRd2cu6w8TC4dI9ivOSBgX8SICZ3/vrA3e+Q75KDJOM
-----END CERTIFICATE-----
Generated at Fri Apr 25 09:53:03 2025 by rpki-client