Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/PufZgMOjQU7u5zh55lDtq5B_saM.roa
File: PufZgMOjQU7u5zh55lDtq5B_saM.roa (raw, json)
Hash identifier: 9koPHFpdCnF7N2Fk+BzHRD2tlnxntJL3qYoCZSAkCzk=
Subject key identifier: 3E:E7:D9:80:C3:A3:41:4E:EE:E7:38:79:E6:50:ED:AB:90:7F:B1:A3
Certificate issuer: /CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Certificate serial: 0194236A4C9EAF757996D24DC5CAF4358B28
Authority key identifier: 6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/PufZgMOjQU7u5zh55lDtq5B_saM.roa
Signing time: Wed 01 Jan 2025 19:49:16 +0000
ROA not before: Wed 01 Jan 2025 19:49:16 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 149485
IP address blocks: 45.138.210.0/24 maxlen: 32
45.138.211.0/24 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:6a:4c:9e:af:75:79:96:d2:4d:c5:ca:f4:35:8b:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Validity
Not Before: Jan 1 19:49:16 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3ee7d980c3a3414eeee73879e650edab907fb1a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:ba:13:dc:fe:fc:ec:79:f3:be:0c:8f:b3:fd:
ba:8c:23:21:a2:95:a6:07:72:98:37:61:e1:f0:c3:
cd:d6:50:43:05:43:37:66:df:77:93:c0:d3:47:04:
f3:81:16:b3:a2:f9:77:4f:67:7b:f0:4a:c5:0b:37:
c2:20:69:e9:1c:3f:35:cc:ec:8c:05:af:6c:e2:4e:
0c:ef:2a:d4:5b:d4:be:dc:a9:0e:e3:ad:29:a3:b6:
cd:66:20:a5:24:7b:58:e5:51:13:1d:f3:0d:0a:97:
7c:f5:44:75:78:c7:c0:a9:90:b5:bf:61:71:77:c2:
e6:84:ea:92:de:09:e6:a6:be:4d:81:98:16:01:f7:
56:68:7b:b5:c6:73:c9:0a:49:f0:40:83:17:a4:df:
4e:a0:ac:72:51:b0:87:a9:c4:7f:77:9d:8e:b0:a2:
f3:8b:37:2d:83:15:61:d9:b0:4f:fa:10:92:9f:ea:
f2:2f:e6:57:54:0e:29:8c:03:38:5e:9f:79:50:01:
70:5e:42:36:20:10:69:5c:4c:40:1a:57:68:cc:de:
fd:a1:c1:cd:d6:42:2e:c8:d3:a3:5c:87:47:f4:f1:
e7:c7:8e:85:be:b2:7d:e0:c9:5e:b6:ad:3f:b5:a7:
38:60:64:87:2b:c7:d9:31:ba:5a:7b:51:cc:34:bb:
7d:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:E7:D9:80:C3:A3:41:4E:EE:E7:38:79:E6:50:ED:AB:90:7F:B1:A3
X509v3 Authority Key Identifier:
keyid:6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/PufZgMOjQU7u5zh55lDtq5B_saM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.138.210.0/23
Signature Algorithm: sha256WithRSAEncryption
27:61:01:bd:2e:71:f5:01:6c:a7:6d:62:7b:07:60:d7:3d:72:
0f:df:01:b4:6f:43:2e:34:8f:7d:55:46:21:3b:11:db:a7:2e:
18:79:05:21:2e:7e:5b:9c:29:1a:07:b1:7e:18:c2:07:5d:c9:
6a:07:84:41:c0:8a:36:67:eb:11:98:e2:1d:9e:f0:5f:f7:e1:
a4:50:e0:3c:b8:0a:03:8a:11:b8:be:5e:42:01:28:48:7e:29:
87:88:be:b5:33:a0:1e:8a:53:d7:37:9b:cf:8f:b9:03:7b:e4:
e6:e4:a8:06:91:c8:6e:37:56:29:3d:16:dd:e6:4a:d0:3f:fe:
2e:65:69:7d:a6:5d:ce:78:f1:1c:1f:7b:07:bf:b8:e0:4f:69:
fa:61:aa:f0:ef:8e:c1:ca:cb:cf:f3:41:92:3f:8b:96:27:d0:
4d:e5:d6:1b:fe:3d:77:fd:22:22:d1:e0:8b:6c:6f:85:b3:66:
21:92:1e:a3:52:d3:f2:fb:52:39:00:05:bb:2e:4b:da:c5:9e:
e9:af:ed:ee:b5:5c:3c:9b:b4:7a:f1:de:ac:4f:4a:33:5c:8d:
da:fd:3e:eb:93:48:21:1d:7c:c3:e9:d4:f1:ac:57:05:f3:19:
3a:7e:46:50:b1:f2:ba:30:f0:8d:cd:55:15:1b:3e:d5:ff:65:
d4:ea:e6:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 01:19:46 2025 by rpki-client