Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/22b7ab-fc11-407a-bd3c-63411367d90a/1/2YqdGEIdMzY2vhH5bWxnKdddSEU.roa
File: 2YqdGEIdMzY2vhH5bWxnKdddSEU.roa (raw, json)
Hash identifier: 9LWiPodvJQom88P/dBp1yCiWmPws557eiQuQBNs6yF8=
Subject key identifier: D9:8A:9D:18:42:1D:33:36:36:BE:11:F9:6D:6C:67:29:D7:5D:48:45
Certificate issuer: /CN=9f0743496c7ff3effb870601139cad9d2f271e10
Certificate serial: 01941FFA320500473B9B3E4F64A73D9C87FB
Authority key identifier: 9F:07:43:49:6C:7F:F3:EF:FB:87:06:01:13:9C:AD:9D:2F:27:1E:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nwdDSWx_8-_7hwYBE5ytnS8nHhA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/22b7ab-fc11-407a-bd3c-63411367d90a/1/2YqdGEIdMzY2vhH5bWxnKdddSEU.roa
Signing time: Wed 01 Jan 2025 03:47:57 +0000
ROA not before: Wed 01 Jan 2025 03:47:57 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 47377
IP address blocks: 45.144.128.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:32:05:00:47:3b:9b:3e:4f:64:a7:3d:9c:87:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f0743496c7ff3effb870601139cad9d2f271e10
Validity
Not Before: Jan 1 03:47:57 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d98a9d18421d333636be11f96d6c6729d75d4845
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:42:cf:1d:56:44:49:6e:77:dd:fc:bf:fa:26:
30:46:b1:d4:d6:c8:61:c2:b1:a2:5e:d8:52:05:3f:
42:44:84:9d:09:fc:18:79:b2:d7:83:44:82:0b:f7:
84:2c:11:28:04:d1:c2:8f:c2:98:23:86:f9:5d:52:
83:de:0f:32:e6:96:4d:f5:50:2d:c0:72:45:dd:00:
1f:54:b0:f7:f3:11:08:8b:00:4d:19:4b:6f:88:a6:
4c:aa:7d:4b:70:65:4e:b7:c2:52:77:50:af:d6:eb:
29:d2:42:d6:d6:bc:55:43:a9:af:fd:85:fb:fc:9b:
34:7d:c6:02:f6:19:8b:29:c8:9b:26:4d:29:7b:22:
31:74:6a:2a:99:05:b6:fc:f6:85:f7:3d:67:4e:bb:
6b:91:64:d3:dd:41:c4:c2:ca:1e:87:70:0a:98:f2:
38:9a:db:02:64:e4:3e:7c:38:5f:b1:88:c7:2b:d3:
0a:ec:e5:80:50:1f:57:13:b3:f7:42:ab:d9:02:00:
2a:3b:57:39:06:f1:8e:ed:14:06:ca:94:bc:f3:58:
c4:44:9e:69:13:7b:3f:58:17:ed:b8:f4:1e:9c:79:
31:b4:fd:ba:3a:c9:0a:06:ce:a9:04:3a:d0:bd:e0:
34:59:90:c5:d2:07:98:62:b4:fc:d4:dd:00:e2:e3:
8e:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:8A:9D:18:42:1D:33:36:36:BE:11:F9:6D:6C:67:29:D7:5D:48:45
X509v3 Authority Key Identifier:
keyid:9F:07:43:49:6C:7F:F3:EF:FB:87:06:01:13:9C:AD:9D:2F:27:1E:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nwdDSWx_8-_7hwYBE5ytnS8nHhA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/22b7ab-fc11-407a-bd3c-63411367d90a/1/2YqdGEIdMzY2vhH5bWxnKdddSEU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/22b7ab-fc11-407a-bd3c-63411367d90a/1/nwdDSWx_8-_7hwYBE5ytnS8nHhA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.144.128.0/22
Signature Algorithm: sha256WithRSAEncryption
71:b0:1e:50:8e:4f:0b:b5:9a:c8:fd:cb:c8:b4:10:11:d6:31:
99:18:e4:70:02:52:5f:d4:7f:51:96:51:4f:02:85:ae:80:3e:
4b:ab:e1:e6:a0:e8:7e:e4:56:b0:b8:06:c4:a2:77:49:70:83:
c9:1c:98:6e:1c:8b:e4:c2:5a:c8:ab:a8:3f:b6:2b:9d:15:82:
03:02:0d:75:d1:45:f7:a2:14:86:c2:d0:18:50:88:71:c8:d5:
9b:1b:2c:f2:7c:d8:05:0b:94:f9:e9:4b:d5:e9:25:38:de:db:
8e:85:f0:a8:9d:5d:c7:07:81:6a:99:08:9b:b4:13:58:49:3d:
16:a9:e3:ed:b4:a2:50:7d:f6:29:b8:38:c4:30:f5:8b:b0:96:
0a:25:ac:55:a8:46:02:5c:55:72:ca:7b:7a:59:b9:5c:0a:d0:
0d:0b:9a:b3:6b:5d:a5:ab:9a:b5:e9:b6:b8:0c:d5:80:42:f9:
d0:0f:44:00:b7:03:62:42:75:8f:4a:2d:d5:d4:2f:87:c8:64:
74:db:82:ed:84:43:c7:a1:0d:a4:bb:7a:e1:9c:e5:92:05:c1:
d6:e3:3d:e2:de:08:53:83:53:15:a8:af:63:1f:3a:9b:25:30:
25:97:c8:4d:53:20:f9:b0:76:6a:60:08:15:83:0c:05:5d:15:
42:55:f5:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 01:27:12 2025 by rpki-client