Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/400685-f48e-4ab9-8e3f-042446b70fb1/1/9IL3cOLgV825piKJML4YuWjeJrw.roa
File: 9IL3cOLgV825piKJML4YuWjeJrw.roa (raw, json)
Hash identifier: WgYGxZdjBPsDK2nLI0aD3UDTfEXrKgAMLmB2VIGZnQQ=
Subject key identifier: F4:82:F7:70:E2:E0:57:CD:B9:A6:22:89:30:BE:18:B9:68:DE:26:BC
Certificate issuer: /CN=c6169716d0ae64068703140aa3730e3788fdd4c6
Certificate serial: 019427B52A51E95A1B16F5EA7B940A9D1BD4
Authority key identifier: C6:16:97:16:D0:AE:64:06:87:03:14:0A:A3:73:0E:37:88:FD:D4:C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xhaXFtCuZAaHAxQKo3MON4j91MY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/400685-f48e-4ab9-8e3f-042446b70fb1/1/9IL3cOLgV825piKJML4YuWjeJrw.roa
Signing time: Thu 02 Jan 2025 15:49:31 +0000
ROA not before: Thu 02 Jan 2025 15:49:31 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60117
IP address blocks: 45.134.12.0/24 maxlen: 24
45.134.14.0/24 maxlen: 24
45.134.15.0/24 maxlen: 24
212.8.229.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:2a:51:e9:5a:1b:16:f5:ea:7b:94:0a:9d:1b:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6169716d0ae64068703140aa3730e3788fdd4c6
Validity
Not Before: Jan 2 15:49:31 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f482f770e2e057cdb9a6228930be18b968de26bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:1e:e2:72:5c:ec:26:b0:ac:b4:49:11:7d:3a:
0b:eb:0b:77:1f:b9:25:04:2e:a7:2e:b6:ab:21:a2:
62:f2:55:e9:61:26:3c:6d:83:7f:5e:71:6b:21:33:
1d:b9:a2:7b:f8:38:cc:f6:e3:f8:11:f2:c1:b0:ae:
8b:3c:a9:2c:02:7a:e1:59:ba:9f:11:c6:48:cd:8f:
5c:c4:77:2d:36:be:58:f7:2d:17:3b:f4:91:12:78:
82:cb:0a:66:ad:65:16:d4:ee:88:d0:42:46:7f:e7:
d7:de:47:84:32:5c:ff:b7:4a:43:37:cc:c5:6c:c5:
84:ba:0c:47:f9:ba:16:21:1e:6f:30:3a:e9:56:85:
9d:83:4d:a3:cc:48:4d:dd:29:c7:89:c8:c4:c1:7a:
69:cc:da:ac:3f:fb:cb:67:ba:d7:91:a4:91:46:65:
42:32:e2:ac:35:4f:20:c2:f9:0f:e6:1d:44:fc:cc:
f2:ba:7a:0a:5e:90:9c:55:91:08:ce:3f:2f:c5:5e:
f8:b6:d7:fc:18:f6:c0:c9:8b:fe:a5:d9:11:e0:68:
d4:f4:18:9b:4b:36:fe:ae:59:d9:09:66:00:e7:1e:
62:76:28:0a:10:83:98:07:d6:9b:d5:0a:b5:1e:a0:
3c:05:bd:5f:cc:e7:3a:b1:7b:09:a5:e5:ac:6c:53:
47:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:82:F7:70:E2:E0:57:CD:B9:A6:22:89:30:BE:18:B9:68:DE:26:BC
X509v3 Authority Key Identifier:
keyid:C6:16:97:16:D0:AE:64:06:87:03:14:0A:A3:73:0E:37:88:FD:D4:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhaXFtCuZAaHAxQKo3MON4j91MY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/400685-f48e-4ab9-8e3f-042446b70fb1/1/9IL3cOLgV825piKJML4YuWjeJrw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/400685-f48e-4ab9-8e3f-042446b70fb1/1/xhaXFtCuZAaHAxQKo3MON4j91MY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.134.12.0/24
45.134.14.0/23
212.8.229.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:85:02:a6:61:28:b8:fe:f3:37:c2:53:90:7a:03:4b:98:85:
a3:02:49:30:c8:6b:2c:3f:61:81:32:b7:7d:5d:af:e2:99:4b:
f5:b0:81:66:57:59:04:d3:4b:94:f5:fa:bd:17:72:2c:0c:5b:
77:11:f9:17:2e:ff:76:56:bc:10:8a:54:66:73:69:65:85:de:
93:23:46:67:15:18:10:c4:dd:fb:5e:d0:2e:6f:2a:bf:1b:e8:
6e:99:bb:4a:8c:83:4e:9f:b4:37:a0:2e:bd:b9:82:f8:b2:72:
03:cb:06:08:5d:a0:39:a5:2c:96:17:7c:d9:1e:88:5f:f6:5e:
cd:71:fc:bd:85:da:da:e0:c6:03:68:ae:d2:18:e9:87:0c:03:
eb:82:20:bd:81:71:4c:ac:4c:fb:3b:a0:d8:4a:e6:37:5c:52:
71:bb:e4:8d:a9:08:06:73:db:71:48:60:43:16:51:46:4e:b0:
cb:49:5e:ad:28:d5:31:26:24:e5:d1:70:90:69:f1:76:6f:86:
62:56:2f:46:12:44:4a:5d:b5:ee:19:69:e4:84:c2:87:52:24:
4c:08:7f:4c:a3:8a:f3:a2:06:75:35:c9:49:05:a0:fb:e7:2b:
d9:05:f3:6a:1b:8d:2f:2f:d8:e5:25:6b:95:a1:b8:b6:22:55:
22:24:eb:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 05:07:17 2025 by rpki-client