Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/795ded-fcdf-47cf-af83-a4bc2816643a/1/yYF76A9a5972cNIX_uOpEiXqNIo.roa
File: yYF76A9a5972cNIX_uOpEiXqNIo.roa (raw, json)
Hash identifier: yLDhIU6xMrIMskWKcq7aO2KNOmOGTAk0rgx5iP9GY0Q=
Subject key identifier: C9:81:7B:E8:0F:5A:E7:DE:F6:70:D2:17:FE:E3:A9:12:25:EA:34:8A
Certificate issuer: /CN=80f376df5f9ef487c82b31a875c6a496d79ca0d7
Certificate serial: 1578D176
Authority key identifier: 80:F3:76:DF:5F:9E:F4:87:C8:2B:31:A8:75:C6:A4:96:D7:9C:A0:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gPN231-e9IfIKzGodcakltecoNc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/795ded-fcdf-47cf-af83-a4bc2816643a/1/yYF76A9a5972cNIX_uOpEiXqNIo.roa
Signing time: Sat 01 Jan 2022 14:03:41 +0000
ROA not before: Sat 01 Jan 2022 14:03:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60485
IP address blocks: 5.157.22.0/24 maxlen: 24
37.203.209.0/24 maxlen: 24
5.157.38.0/24 maxlen: 24
91.108.183.0/24 maxlen: 24
5.157.57.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 360239478 (0x1578d176)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80f376df5f9ef487c82b31a875c6a496d79ca0d7
Validity
Not Before: Jan 1 14:03:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c9817be80f5ae7def670d217fee3a91225ea348a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:0c:03:41:c7:5d:9a:10:14:1d:6d:12:f9:4e:
a3:9e:71:e5:04:62:15:1f:a3:5e:1a:bb:c6:15:77:
b5:0b:80:30:80:64:02:0d:b8:4e:45:66:42:2f:8e:
b9:e6:a7:28:39:b6:fe:2e:12:eb:27:dd:85:63:f1:
90:40:17:6c:5d:de:36:94:f6:8a:a6:b4:97:70:68:
b0:68:11:72:cd:1e:6b:3b:85:c5:31:9d:4a:d5:3e:
39:32:79:82:69:5f:15:ea:f4:f3:76:2e:fa:36:94:
12:60:f6:60:cd:8b:e8:e6:af:82:48:f0:8b:f1:e8:
30:e4:0f:9d:37:ab:f7:b9:2f:1c:19:71:65:b9:94:
f0:38:28:6c:6e:e2:eb:df:59:21:75:ba:80:26:dc:
f2:39:f1:46:66:54:ba:0d:4a:7f:50:34:a1:27:55:
8f:ea:b0:73:55:a2:b4:e1:4c:3c:71:ea:0b:3f:c6:
5e:ba:1c:da:c0:c2:b7:98:69:52:ee:01:f6:a4:8f:
22:03:6e:de:34:3d:f5:f8:0c:f6:6d:3f:3e:c6:9c:
e6:1f:98:33:b5:f7:dd:87:65:05:49:fa:09:8b:4d:
59:6b:e0:d1:8d:af:be:69:d7:09:5d:9c:1b:26:5e:
3b:a9:48:9a:81:d1:8d:aa:86:e3:73:e1:20:8e:17:
2e:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:81:7B:E8:0F:5A:E7:DE:F6:70:D2:17:FE:E3:A9:12:25:EA:34:8A
X509v3 Authority Key Identifier:
keyid:80:F3:76:DF:5F:9E:F4:87:C8:2B:31:A8:75:C6:A4:96:D7:9C:A0:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gPN231-e9IfIKzGodcakltecoNc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/795ded-fcdf-47cf-af83-a4bc2816643a/1/yYF76A9a5972cNIX_uOpEiXqNIo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/795ded-fcdf-47cf-af83-a4bc2816643a/1/gPN231-e9IfIKzGodcakltecoNc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.157.22.0/24
5.157.38.0/24
5.157.57.0/24
37.203.209.0/24
91.108.183.0/24
Signature Algorithm: sha256WithRSAEncryption
53:ab:05:a5:18:11:4c:45:04:cf:ed:46:1e:20:cb:6e:7d:1f:
34:e1:31:59:97:22:52:d2:49:07:37:4e:b8:da:4a:c4:db:69:
84:39:8c:e0:0c:74:67:5d:ff:7d:b7:9a:6f:c1:27:39:cb:52:
df:9f:4e:86:ba:d3:32:a5:cd:72:b3:a1:2b:2b:a2:2e:4e:c5:
35:28:0e:86:af:55:3a:79:3d:ff:68:f2:ad:d7:ea:24:0c:ce:
7e:ee:4d:1c:23:b0:f4:a5:fe:2e:3e:67:db:cb:17:6c:7b:4f:
4f:fb:f8:a7:55:9e:e6:16:83:53:f4:10:ab:96:89:1e:29:a9:
b2:4f:49:db:8d:59:5d:d0:b1:b1:65:3e:46:65:35:e2:5d:ab:
73:6e:10:a5:45:7e:8b:91:53:cc:c7:7b:90:a4:a3:95:c9:a3:
91:c6:51:04:a5:70:d4:1a:30:a3:4e:5d:55:a9:42:81:63:f2:
42:27:f8:84:88:b8:61:bc:4f:bc:12:18:1c:43:b1:c2:0d:29:
be:51:a5:71:b4:3b:c9:bd:a2:27:2d:a3:51:c3:34:59:c7:c7:
83:17:8f:ab:a4:18:ef:a5:97:66:ff:62:d9:39:c3:55:47:c3:
4a:37:b1:42:54:7d:8a:44:4b:94:10:1b:71:f5:ba:57:d0:8b:
90:f5:ff:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 05:31:46 2025 by rpki-client