Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/Y74UHPEtrnmck4yeV-heFzeram0.roa
File: Y74UHPEtrnmck4yeV-heFzeram0.roa (raw, json)
Hash identifier: /Mk8ODPMgARhYuAVpjEY/NsvTw3zmPutkCH0QEtU+OA=
Subject key identifier: 63:BE:14:1C:F1:2D:AE:79:9C:93:8C:9E:57:E8:5E:17:37:AB:6A:6D
Certificate issuer: /CN=9b0c0d04225566db95e9ad3b2ef605014975aaa2
Certificate serial: 0188E7F810E2F15D507D97DA476F13FF3B51
Authority key identifier: 9B:0C:0D:04:22:55:66:DB:95:E9:AD:3B:2E:F6:05:01:49:75:AA:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mwwNBCJVZtuV6a07LvYFAUl1qqI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/Y74UHPEtrnmck4yeV-heFzeram0.roa
Signing time: Fri 23 Jun 2023 11:16:14 +0000
ROA not before: Fri 23 Jun 2023 11:16:14 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 176.105.229.0/24 maxlen: 24
45.150.55.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:e7:f8:10:e2:f1:5d:50:7d:97:da:47:6f:13:ff:3b:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b0c0d04225566db95e9ad3b2ef605014975aaa2
Validity
Not Before: Jun 23 11:16:14 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=63be141cf12dae799c938c9e57e85e1737ab6a6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:70:aa:93:76:93:11:24:84:73:26:0b:00:a7:
77:60:63:2f:5b:9c:0c:16:2e:55:1a:18:40:30:e8:
5c:3f:3c:fd:9a:f3:f8:93:36:61:43:bd:f1:24:c3:
57:fb:c1:98:62:7b:f1:18:9e:cc:3a:07:09:e1:9b:
b4:f7:3c:1d:d9:19:e1:53:ea:78:02:1c:0d:d1:0d:
c2:7b:6e:a5:e9:02:39:e2:fb:7b:51:68:c5:3e:9e:
e8:7d:c7:29:55:dc:52:95:74:2d:46:30:dc:98:98:
2e:6d:55:59:1e:29:90:b8:dc:6f:dd:a4:ca:12:13:
55:60:93:b2:d7:3e:f8:b5:ca:38:a1:3c:55:6f:37:
8e:68:08:95:ae:8f:1b:19:8c:3b:5a:a7:23:f5:2d:
25:4a:20:21:e7:00:7d:25:df:49:04:18:2c:50:4d:
90:42:0a:c9:da:17:a9:c8:9c:83:c0:ef:71:34:57:
d0:a2:db:01:84:7f:62:85:c9:e9:c5:92:51:87:00:
59:06:6a:96:74:58:fd:36:8e:7a:ce:8c:75:06:f2:
e9:21:94:61:0a:7e:11:39:a2:c5:20:04:1f:80:6a:
fc:42:de:89:3e:00:dc:44:f6:5a:35:aa:56:7f:19:
cf:69:bf:f0:6e:05:20:09:a4:b3:d3:53:d4:54:52:
1f:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:BE:14:1C:F1:2D:AE:79:9C:93:8C:9E:57:E8:5E:17:37:AB:6A:6D
X509v3 Authority Key Identifier:
keyid:9B:0C:0D:04:22:55:66:DB:95:E9:AD:3B:2E:F6:05:01:49:75:AA:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mwwNBCJVZtuV6a07LvYFAUl1qqI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/Y74UHPEtrnmck4yeV-heFzeram0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/mwwNBCJVZtuV6a07LvYFAUl1qqI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.150.55.0/24
176.105.229.0/24
Signature Algorithm: sha256WithRSAEncryption
02:1b:94:98:7d:20:ec:8c:36:c0:b2:13:4b:96:73:d7:3d:e4:
eb:c2:3f:00:65:db:93:d6:59:73:2a:bd:e8:10:29:92:f1:ed:
47:14:cf:f4:6e:55:0a:36:01:27:ba:73:3b:a6:d7:92:46:55:
81:bd:17:8f:4b:0f:16:bd:73:bf:7e:7f:a9:7c:88:52:e0:f1:
22:a8:2d:06:36:de:09:12:fe:6a:ce:f7:6d:26:54:0f:2b:57:
03:cd:7e:3e:c0:0d:20:e6:d4:d3:b7:9a:00:da:db:eb:d7:2a:
80:98:2d:3b:4b:f5:a5:43:8d:9d:6e:16:ff:4c:e5:98:af:51:
e2:ce:90:96:8b:d2:84:a6:44:1f:e4:8e:ff:45:bd:af:e1:14:
d4:37:7a:eb:0d:d8:35:3c:19:0f:ec:bc:9f:f1:d0:b2:b6:8e:
39:67:b6:08:4a:5e:4f:ba:b9:be:94:7e:c6:e6:7a:41:a3:1a:
60:f5:01:a8:a9:1d:66:86:a1:31:0d:41:26:7f:41:ca:40:ed:
e6:75:0b:34:dc:97:d2:7b:e6:7b:e4:52:c9:7d:64:73:44:ca:
23:89:63:66:fb:93:56:41:36:cb:80:61:eb:6a:11:4b:21:af:
9b:f5:73:28:77:0e:b3:c9:d8:0b:5e:99:7a:7c:b7:4b:cf:32:
51:3b:bb:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 18:07:33 2025 by rpki-client