Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/0fcd8e-1034-4a75-a070-699f3cd850fa/1/tyr7YT-XlbKvyQI5Aiw1lqcEPZ0.roa
File: tyr7YT-XlbKvyQI5Aiw1lqcEPZ0.roa (raw, json)
Hash identifier: A8rtdyJ9paAEirlby1av+cQ7baYrwbelcvz/vsvt2z4=
Subject key identifier: B7:2A:FB:61:3F:97:95:B2:AF:C9:02:39:02:2C:35:96:A7:04:3D:9D
Certificate issuer: /CN=8b2e0d184ff553375c847c38d4dfcdcde1219fd3
Certificate serial: 019421B1FC8E167E3BD680A586B80436FFCD
Authority key identifier: 8B:2E:0D:18:4F:F5:53:37:5C:84:7C:38:D4:DF:CD:CD:E1:21:9F:D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iy4NGE_1UzdchHw41N_NzeEhn9M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/0fcd8e-1034-4a75-a070-699f3cd850fa/1/tyr7YT-XlbKvyQI5Aiw1lqcEPZ0.roa
Signing time: Wed 01 Jan 2025 11:48:20 +0000
ROA not before: Wed 01 Jan 2025 11:48:20 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 39522
IP address blocks: 45.138.222.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b1:fc:8e:16:7e:3b:d6:80:a5:86:b8:04:36:ff:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b2e0d184ff553375c847c38d4dfcdcde1219fd3
Validity
Not Before: Jan 1 11:48:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b72afb613f9795b2afc90239022c3596a7043d9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:ef:19:4a:55:0f:26:d0:7c:c4:f8:54:6c:2f:
61:ff:fe:18:ec:f7:00:9c:f4:bc:0d:df:21:3b:48:
2a:24:8c:72:95:08:da:bd:f0:b4:56:2d:8e:ec:1c:
cf:74:c3:3e:33:b9:58:34:db:96:4b:70:e2:ed:ea:
1c:a3:59:eb:ea:a2:50:1e:a2:12:4d:91:d0:b0:7c:
c9:78:04:ac:c7:25:89:56:54:07:36:a7:ac:eb:fb:
4a:66:50:bf:7a:21:b0:ff:6c:81:07:8c:07:d2:50:
e9:0d:e0:e3:6e:b0:d6:99:e1:84:ab:f3:01:20:00:
84:29:3b:4e:fe:33:fe:e0:6a:ec:c7:ea:9a:2a:d8:
2b:34:a4:94:24:d1:75:8b:2b:a0:74:3e:ae:34:ca:
17:d9:c0:84:81:23:ed:2e:5a:4e:30:05:ad:16:d8:
eb:e4:37:32:a4:12:2b:8a:c0:b5:12:c0:2c:fb:0d:
87:65:ad:70:f8:5c:02:51:2a:e9:8a:e6:94:62:9d:
24:a6:16:75:b0:39:20:f9:08:9e:19:68:20:89:ce:
18:27:9f:93:c7:5a:d1:3e:e1:ae:dd:85:45:15:9a:
a4:4e:d1:e8:ae:e2:68:87:00:5c:b4:61:a3:d9:04:
d3:23:c7:70:da:d8:53:43:3e:d9:64:90:33:0f:47:
75:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:2A:FB:61:3F:97:95:B2:AF:C9:02:39:02:2C:35:96:A7:04:3D:9D
X509v3 Authority Key Identifier:
keyid:8B:2E:0D:18:4F:F5:53:37:5C:84:7C:38:D4:DF:CD:CD:E1:21:9F:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iy4NGE_1UzdchHw41N_NzeEhn9M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/0fcd8e-1034-4a75-a070-699f3cd850fa/1/tyr7YT-XlbKvyQI5Aiw1lqcEPZ0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/0fcd8e-1034-4a75-a070-699f3cd850fa/1/iy4NGE_1UzdchHw41N_NzeEhn9M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.138.222.0/23
Signature Algorithm: sha256WithRSAEncryption
9f:fd:6b:02:f5:33:b3:be:ee:92:45:ad:c0:f8:74:a8:4e:09:
61:39:ab:bd:3f:f6:15:4c:88:c5:59:4f:c7:2a:a3:5f:3f:06:
eb:5e:e6:f7:49:88:50:4e:02:68:b4:df:b1:e7:ca:cb:00:a6:
e9:2c:33:13:9c:5c:74:1f:13:21:c6:bc:e9:78:3b:b8:78:c4:
a8:37:1a:2c:d1:6c:7c:7c:0e:00:e3:d7:76:8c:69:76:6d:99:
fe:71:e0:90:00:fc:bb:cc:40:51:7f:50:1e:18:03:ce:51:ee:
7f:41:8b:c7:45:6d:dc:d3:ce:18:09:07:39:81:37:e5:7f:99:
db:9d:87:8c:85:58:e2:51:bd:2b:88:75:71:1e:ad:ec:e7:e8:
0f:2a:3a:d4:ed:2e:c8:e4:31:66:9f:94:c6:39:c6:19:11:e2:
ed:e6:22:aa:cb:6b:16:8d:07:7b:d6:70:cd:54:29:5d:dd:99:
ca:aa:19:97:82:75:42:ed:29:3c:40:b3:f2:ca:57:9f:d1:24:
75:8d:52:bc:96:6e:42:0f:52:63:ba:d1:f5:aa:41:fa:ba:2b:
c8:29:b4:ec:ee:2f:28:88:5b:54:05:2b:74:1e:32:af:13:4f:
ee:44:e2:c9:7a:62:0c:3b:b9:88:7d:69:43:b4:62:03:1e:64:
e7:a7:07:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:50 2025 by rpki-client on console.sobornost.net