Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/dfRwLnd7H7w_OVSLP8kz-J08HvU.roa
File: dfRwLnd7H7w_OVSLP8kz-J08HvU.roa (raw, json)
Hash identifier: FPuBb8+13HSQLJU9CpclAE8hKmqwuolZDcDf1PJudFQ=
Subject key identifier: 75:F4:70:2E:77:7B:1F:BC:3F:39:54:8B:3F:C9:33:F8:9D:3C:1E:F5
Certificate issuer: /CN=0d2999042c5e2006bd5aeb7a05de1e96a5e73664
Certificate serial: 01941FFA679D3CA9C4B6F7ECA1A2B58D434B
Authority key identifier: 0D:29:99:04:2C:5E:20:06:BD:5A:EB:7A:05:DE:1E:96:A5:E7:36:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/dfRwLnd7H7w_OVSLP8kz-J08HvU.roa
Signing time: Wed 01 Jan 2025 03:48:11 +0000
ROA not before: Wed 01 Jan 2025 03:48:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 56309
IP address blocks: 45.150.128.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:67:9d:3c:a9:c4:b6:f7:ec:a1:a2:b5:8d:43:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d2999042c5e2006bd5aeb7a05de1e96a5e73664
Validity
Not Before: Jan 1 03:48:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=75f4702e777b1fbc3f39548b3fc933f89d3c1ef5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:1c:c2:3b:c7:db:1d:89:cd:55:87:8e:23:cc:
f8:f6:04:13:11:10:53:0c:84:3e:c1:46:a4:fc:7c:
8d:98:aa:c1:ea:91:19:6e:d5:12:ea:ad:51:77:79:
13:8f:5b:aa:42:74:94:42:c5:93:b9:a7:ff:6b:76:
40:27:e9:f0:28:38:bc:2b:7c:fb:e8:7b:d3:d5:94:
a1:e3:29:4b:69:d1:cd:de:49:e6:dc:a3:51:9c:8e:
7d:e2:3d:1e:a1:57:6d:54:d7:34:e2:df:73:6f:d8:
da:43:2f:6e:b1:af:02:00:72:ee:3b:89:a3:10:2c:
3c:65:3a:17:e3:22:e1:14:e4:cd:44:f6:7f:8d:27:
c5:5e:fb:3c:58:3a:e2:8d:6d:b0:e2:44:2f:f6:63:
56:41:a0:c7:f7:45:fd:60:5f:52:41:91:88:8e:37:
79:5d:e3:fe:ef:02:5f:a4:34:dc:79:79:c1:ad:93:
2a:5e:1e:20:71:97:00:75:c0:9e:61:77:f3:b6:94:
65:aa:de:29:d6:8f:92:78:5a:9a:4e:23:e6:9b:03:
7d:6d:65:48:3c:96:05:d8:b2:aa:1f:4b:62:a1:50:
aa:f4:88:8d:bd:06:05:10:0c:ce:c2:16:37:dc:6a:
c2:4e:22:3c:e0:e0:54:a8:1d:03:3f:47:f8:f0:76:
d5:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:F4:70:2E:77:7B:1F:BC:3F:39:54:8B:3F:C9:33:F8:9D:3C:1E:F5
X509v3 Authority Key Identifier:
keyid:0D:29:99:04:2C:5E:20:06:BD:5A:EB:7A:05:DE:1E:96:A5:E7:36:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/dfRwLnd7H7w_OVSLP8kz-J08HvU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.150.128.0/22
Signature Algorithm: sha256WithRSAEncryption
01:e4:7f:b7:03:75:fb:fe:f3:c8:ea:ff:eb:b6:56:6f:50:b7:
f9:b5:7e:a9:5b:83:74:63:1f:c6:b4:be:81:64:07:d3:33:cf:
6f:f0:1e:b1:39:b9:2c:57:27:a0:47:f1:bd:5f:97:a1:bd:29:
a4:86:3b:6a:a6:9c:98:7a:ab:a8:f4:0b:30:49:56:1e:56:b9:
fc:05:fe:3e:9a:b7:26:f0:35:77:3f:9e:3f:5c:a3:27:48:7d:
46:fa:10:5f:a5:d1:56:7b:4f:f6:25:d6:6f:b5:b4:82:ae:f7:
5b:0d:c3:c6:67:a8:4a:c9:02:a8:3b:70:76:f4:f4:24:cb:3b:
0f:80:f5:57:00:3a:02:02:76:bc:42:62:ec:84:97:96:af:74:
65:4e:97:9e:fc:4b:f4:a3:1e:63:6f:5c:bd:b5:4a:15:0e:3c:
56:f9:03:d6:fd:e4:6e:9f:d3:02:19:40:ac:7c:5d:c7:b4:54:
00:fc:f3:64:fd:73:6d:3b:b2:e8:08:37:04:d7:5d:0f:2a:3b:
06:5c:cf:52:4c:e3:4c:80:9a:24:cb:18:ec:eb:ea:1e:cf:b8:
2b:fe:4f:9d:47:e6:60:d0:6d:3b:42:e0:e5:e7:cc:0d:81:72:
92:e8:b7:52:67:2f:99:c6:ae:17:ba:53:f1:0a:d8:0d:ad:17:
58:77:77:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 17:21:34 2025 by rpki-client