Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/959e03-78fc-4589-acde-f9a43709d00b/1/5MLAJJhZUqxE0r3U4OzONARKrWM.roa
File: 5MLAJJhZUqxE0r3U4OzONARKrWM.roa (raw, json)
Hash identifier: uzxNaFRQSXU6HSS8pS9HTMaQBaBvl861ChSN96+0v7c=
Subject key identifier: E4:C2:C0:24:98:59:52:AC:44:D2:BD:D4:E0:EC:CE:34:04:4A:AD:63
Certificate issuer: /CN=c6cfa94f6134e3960ea5f318846a30cf3e922dd7
Certificate serial: 01946436AA8A389068D61726A976ADCD72D5
Authority key identifier: C6:CF:A9:4F:61:34:E3:96:0E:A5:F3:18:84:6A:30:CF:3E:92:2D:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xs-pT2E045YOpfMYhGowzz6SLdc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/959e03-78fc-4589-acde-f9a43709d00b/1/5MLAJJhZUqxE0r3U4OzONARKrWM.roa
Signing time: Tue 14 Jan 2025 09:48:11 +0000
ROA not before: Tue 14 Jan 2025 09:48:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44092
IP address blocks: 45.90.156.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:64:36:aa:8a:38:90:68:d6:17:26:a9:76:ad:cd:72:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6cfa94f6134e3960ea5f318846a30cf3e922dd7
Validity
Not Before: Jan 14 09:48:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e4c2c024985952ac44d2bdd4e0ecce34044aad63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:26:21:e2:7d:ed:2a:9c:8c:4f:90:27:b5:b8:
1e:e2:f6:8b:b0:3f:5a:ea:bf:0b:80:77:d9:6d:3e:
57:4e:50:5c:76:dc:21:73:95:e3:02:64:42:72:39:
72:bb:85:eb:25:41:1d:1c:4e:ce:a4:6a:fe:94:ad:
75:f0:a2:70:60:e1:4c:78:1f:ef:aa:f0:c2:ea:4e:
ef:78:48:ce:a4:b5:29:21:d2:59:b0:86:9d:8f:4c:
e1:b3:8a:ac:34:1c:51:b5:00:82:02:02:d4:8d:8f:
be:d8:e3:ee:22:10:cb:cd:37:83:99:05:0f:3d:31:
0a:7d:c2:7e:5e:75:bf:27:7c:b1:34:51:2a:aa:f0:
d5:52:1e:1b:a4:4f:07:20:f3:83:f2:57:7e:39:8c:
42:70:6b:96:ed:66:d4:a1:f9:80:f3:93:48:76:b3:
2b:0e:cc:13:bc:e9:f4:96:fa:6d:b6:7f:c6:81:20:
c6:2e:82:52:55:bc:bb:df:b2:4c:8e:99:c2:5c:65:
2f:79:73:c3:f5:bf:8d:07:ef:fb:7e:79:cf:3a:2e:
e2:b7:64:99:56:0c:09:86:2b:79:7a:45:79:d7:10:
c6:b5:db:4c:02:f6:d8:98:27:14:48:75:eb:20:aa:
fc:1e:bb:c5:53:b4:65:8f:eb:2e:c0:c8:ae:cb:b0:
f3:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:C2:C0:24:98:59:52:AC:44:D2:BD:D4:E0:EC:CE:34:04:4A:AD:63
X509v3 Authority Key Identifier:
keyid:C6:CF:A9:4F:61:34:E3:96:0E:A5:F3:18:84:6A:30:CF:3E:92:2D:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xs-pT2E045YOpfMYhGowzz6SLdc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/959e03-78fc-4589-acde-f9a43709d00b/1/5MLAJJhZUqxE0r3U4OzONARKrWM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/959e03-78fc-4589-acde-f9a43709d00b/1/xs-pT2E045YOpfMYhGowzz6SLdc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.90.156.0/22
Signature Algorithm: sha256WithRSAEncryption
af:98:8e:78:25:45:76:51:c8:2a:73:c5:81:a4:7c:ac:22:3b:
d0:4c:f7:59:fb:61:20:df:99:1f:82:b0:c6:4f:2d:1b:e1:96:
72:be:3f:13:12:4d:b5:f3:f8:4d:31:b4:f7:9e:1a:b6:69:ba:
35:da:b9:5b:cc:5b:28:55:47:9d:f7:11:3b:f6:af:89:9e:3c:
0c:72:57:39:42:5f:17:aa:6e:ab:9d:dd:fd:19:f9:e8:3b:74:
b4:9a:2f:51:67:66:28:a5:69:78:a6:e4:22:55:84:f3:d2:f8:
4f:5a:0a:c9:03:9e:1d:16:e2:e7:1b:c7:8d:2b:b7:8e:6f:54:
de:86:54:d0:46:a0:2e:d8:05:01:c9:2a:02:55:cf:ce:c8:d6:
a8:2c:a0:58:68:e2:c8:c8:d0:e3:da:52:19:68:8c:dc:42:4d:
78:64:03:70:4c:6b:be:b5:9b:2f:f5:e7:19:3f:bb:26:37:98:
29:4d:e3:89:2f:4d:3d:cd:cd:4f:82:02:5b:b5:bc:d4:4b:a7:
25:83:52:d5:58:9f:c3:55:bd:13:18:be:08:11:bd:84:d7:73:
ec:4d:ef:5c:58:14:1e:bf:99:6d:b3:aa:38:b6:ca:61:cb:76:
ed:3b:5f:19:50:d0:52:9c:01:d7:5a:3b:60:00:65:e4:ba:a2:
b7:43:63:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 20:05:10 2025 by rpki-client