Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/IJAgtqUSJY8oADE6wPUYwsaM_vc.roa
File: IJAgtqUSJY8oADE6wPUYwsaM_vc.roa (raw, json)
Hash identifier: aELnWhtiTPLR1Ao6+IMAo0vgsOrNOVS729JFewxwTgs=
Subject key identifier: 20:90:20:B6:A5:12:25:8F:28:00:31:3A:C0:F5:18:C2:C6:8C:FE:F7
Certificate issuer: /CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Certificate serial: 019421440C40C6C2E0B3C7F3F47A689C0C32
Authority key identifier: 09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/IJAgtqUSJY8oADE6wPUYwsaM_vc.roa
Signing time: Wed 01 Jan 2025 09:48:15 +0000
ROA not before: Wed 01 Jan 2025 09:48:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60957
IP address blocks: 45.150.114.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:44:0c:40:c6:c2:e0:b3:c7:f3:f4:7a:68:9c:0c:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Validity
Not Before: Jan 1 09:48:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=209020b6a512258f2800313ac0f518c2c68cfef7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:28:b5:60:20:a1:bd:05:79:23:5e:32:82:92:
fe:dd:25:ed:9e:14:4b:48:4b:4c:dd:b1:7e:ab:86:
d8:37:c5:ca:51:aa:06:e3:26:83:23:20:0c:ea:93:
4f:1d:ca:64:d3:12:b3:83:10:8c:51:71:ae:fd:f2:
b9:e9:6f:f2:18:1c:d3:c2:78:9b:04:21:7f:f9:03:
79:a6:6a:08:43:bb:d4:d1:f8:e2:43:7f:1e:07:85:
83:00:ab:31:c9:48:15:ea:63:5b:3c:68:e1:4e:20:
9a:be:f8:db:c1:00:55:fd:1b:a3:1c:3f:87:ac:02:
05:09:d4:a0:6c:32:53:93:10:65:fb:98:57:62:3e:
60:08:db:08:b2:72:e7:af:18:b4:81:4d:de:2c:46:
b7:b3:a7:15:96:dd:47:0c:22:76:3d:ac:2c:6f:d0:
d7:29:b6:9a:3f:b3:81:d5:aa:97:b2:20:93:19:c6:
a3:06:b8:3e:79:ea:5f:8d:bc:39:80:52:ed:5f:5d:
fa:b8:23:d6:f0:de:a9:b0:10:24:03:ec:a0:c2:91:
c1:96:c1:89:10:2b:c3:12:0c:c6:0d:a5:c4:20:a4:
d7:74:3b:6f:12:63:46:8e:ad:c1:e3:69:51:56:ba:
0e:3d:ec:69:21:9d:33:27:8d:75:67:83:1b:dd:ae:
d4:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:90:20:B6:A5:12:25:8F:28:00:31:3A:C0:F5:18:C2:C6:8C:FE:F7
X509v3 Authority Key Identifier:
keyid:09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/IJAgtqUSJY8oADE6wPUYwsaM_vc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.150.114.0/24
Signature Algorithm: sha256WithRSAEncryption
61:72:38:1c:ff:f7:a8:44:64:9e:6f:f0:55:92:7f:34:39:be:
36:6f:9b:4e:7f:63:b1:4f:c9:0c:91:a3:85:1d:8e:1d:61:80:
5b:4a:12:22:3f:33:90:3e:f0:09:97:e7:0e:a9:54:f1:f7:24:
c9:95:c8:71:39:5e:96:8e:53:57:a2:10:bc:ab:91:f2:03:b5:
ef:00:fa:ce:49:b5:65:81:99:93:5d:ad:76:e0:51:53:23:78:
6d:76:43:a0:16:84:54:27:6a:10:85:34:d7:ed:ce:1e:e0:0d:
3c:b7:1e:1f:66:21:25:a8:04:2f:4f:b7:b7:71:f4:ed:8a:76:
2b:ca:0e:0b:41:95:b3:75:8f:0f:fe:6a:8a:ad:3d:5d:b6:bb:
b9:90:3b:79:fc:cb:fc:e1:de:23:e0:c4:8f:ed:a1:6b:64:0c:
ae:bf:df:31:1f:e9:d3:e9:78:37:a6:43:f2:94:19:6f:79:3b:
2f:45:24:31:17:b3:52:36:86:21:b1:70:fa:8e:17:e8:15:d5:
9f:48:9b:17:c0:4c:ae:ee:94:5b:e4:cb:c9:48:41:42:5c:e0:
c8:b9:f3:07:1e:f1:33:7a:4b:b1:01:23:3d:fd:88:aa:6f:21:
98:11:6b:03:7d:85:90:23:14:f1:07:69:ae:92:c9:ce:94:e4:
b7:db:fb:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 13:27:07 2025 by rpki-client