Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/wT410oSQJkuLENm8fiZ3XFuynTw.roa
File: wT410oSQJkuLENm8fiZ3XFuynTw.roa (raw, json)
Hash identifier: gPA3qsxbb1tD5VQTsdzhL/7R7AYoJxb6rMnGjeUK9U8=
Subject key identifier: C1:3E:35:D2:84:90:26:4B:8B:10:D9:BC:7E:26:77:5C:5B:B2:9D:3C
Certificate issuer: /CN=60581e673d80f7474936b21337eafcc1bdc385e9
Certificate serial: 019425FD1F31D384084410B22F39C22416B7
Authority key identifier: 60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/wT410oSQJkuLENm8fiZ3XFuynTw.roa
Signing time: Thu 02 Jan 2025 07:48:52 +0000
ROA not before: Thu 02 Jan 2025 07:48:52 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44477
IP address blocks: 45.150.35.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:1f:31:d3:84:08:44:10:b2:2f:39:c2:24:16:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60581e673d80f7474936b21337eafcc1bdc385e9
Validity
Not Before: Jan 2 07:48:52 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c13e35d28490264b8b10d9bc7e26775c5bb29d3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:89:df:a5:f7:69:e0:b5:16:37:2d:61:4e:6b:
07:91:f3:80:a9:81:77:10:01:2a:44:8a:e4:6b:8f:
f4:0d:3d:55:20:9f:e5:0b:09:1a:d7:48:95:57:d9:
50:1f:f9:f3:ed:07:2e:4f:41:54:3e:5e:bb:b9:96:
3a:bb:28:46:ef:0d:9a:ac:c0:14:89:b5:df:44:91:
62:0c:e0:6c:9b:13:d2:26:6d:13:26:4d:a1:fd:6a:
b4:99:eb:4f:bd:72:f3:03:f4:59:6b:b1:c1:16:c2:
d0:14:1e:28:9b:24:97:ec:8b:c6:f2:79:50:0d:32:
55:e3:9d:9f:9d:fe:69:16:8b:af:10:c7:ba:a0:a7:
b9:c4:dc:8a:0c:05:22:ef:f5:e0:f6:f8:15:30:17:
ac:23:72:23:4a:bc:be:9e:40:3a:dc:cb:5d:79:3f:
0f:85:cf:b2:ed:0d:1f:1e:85:3a:50:f4:9c:a5:df:
16:ed:a2:d3:2e:b4:58:97:e6:10:71:0c:f1:ed:d0:
82:24:a1:f2:e7:f0:97:0e:da:5a:a5:48:89:b4:c2:
f8:94:43:3a:d0:ed:b8:e5:86:1b:45:91:4f:ce:4a:
4e:17:73:5e:24:96:25:2d:a6:04:1a:e5:72:38:f4:
be:c9:d2:dc:72:24:08:b1:f1:01:a1:a3:02:9c:1e:
b1:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:3E:35:D2:84:90:26:4B:8B:10:D9:BC:7E:26:77:5C:5B:B2:9D:3C
X509v3 Authority Key Identifier:
keyid:60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/wT410oSQJkuLENm8fiZ3XFuynTw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.150.35.0/24
Signature Algorithm: sha256WithRSAEncryption
83:fc:4b:31:cf:ff:de:86:17:33:27:25:03:56:90:5f:98:5c:
88:dd:02:cc:86:1f:b1:69:96:24:a6:5e:00:d6:be:e4:a9:cc:
1e:71:96:db:9f:0b:36:7c:dc:2b:24:81:79:8e:b1:be:49:2a:
cc:41:4d:c2:71:d2:54:10:8a:70:9d:07:3f:db:de:66:0e:1b:
2f:d5:4b:26:94:53:ae:b3:0c:be:d8:a0:9d:11:b0:a1:6b:0a:
40:54:52:df:02:d6:a2:0f:0a:33:c4:39:3a:4d:ee:ce:cf:ba:
de:c6:c9:e6:36:48:b4:cb:14:e3:cb:eb:26:e4:50:89:83:af:
44:ce:84:88:d2:73:48:95:75:b5:98:02:23:1c:a6:49:23:19:
62:61:a0:ab:c4:fc:0e:2c:e6:91:d1:0a:7d:c0:3a:b3:a0:a9:
ab:0c:87:de:34:f0:15:5f:78:45:4a:69:fb:40:13:4b:93:76:
71:9f:c2:ae:07:b3:e2:1c:07:cc:ff:10:2e:5e:78:6b:4a:f0:
fd:b9:a8:8d:0f:70:5f:7a:a0:5c:f6:19:ce:7b:08:22:c8:3c:
2c:38:d8:87:31:ad:31:ec:9e:09:a0:30:b0:af:80:4a:4d:1b:
93:ef:05:bd:21:2a:7d:6e:d0:cd:d3:2a:8d:85:ea:df:54:a2:
e4:78:ab:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 07:54:35 2025 by rpki-client