Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/8db67a-c4fc-4c2c-9978-a7be5fa0ff65/1/vZaHpkts3TjqsPjS8msZ10JjtWU.roa
File: vZaHpkts3TjqsPjS8msZ10JjtWU.roa (raw, json)
Hash identifier: G1otwZGxfTUi6xjTYZ7QeCW5+jjbNs8UtP3BujI7U6M=
Subject key identifier: BD:96:87:A6:4B:6C:DD:38:EA:B0:F8:D2:F2:6B:19:D7:42:63:B5:65
Certificate issuer: /CN=ed624c590027a5a8c9eeb369726e4a630cdf414c
Certificate serial: 019421B21D086108443B0CDD39101AEE22F9
Authority key identifier: ED:62:4C:59:00:27:A5:A8:C9:EE:B3:69:72:6E:4A:63:0C:DF:41:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7WJMWQAnpajJ7rNpcm5KYwzfQUw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/8db67a-c4fc-4c2c-9978-a7be5fa0ff65/1/vZaHpkts3TjqsPjS8msZ10JjtWU.roa
Signing time: Wed 01 Jan 2025 11:48:28 +0000
ROA not before: Wed 01 Jan 2025 11:48:28 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16509
IP address blocks: 45.89.128.0/22 maxlen: 22
2a0b:a200::/48 maxlen: 48
2a0b:a200:1::/48 maxlen: 48
2a0b:a200:2::/48 maxlen: 48
2a0b:a200:3::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b2:1d:08:61:08:44:3b:0c:dd:39:10:1a:ee:22:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed624c590027a5a8c9eeb369726e4a630cdf414c
Validity
Not Before: Jan 1 11:48:28 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bd9687a64b6cdd38eab0f8d2f26b19d74263b565
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:b3:1e:be:49:49:fb:05:3d:13:0c:ef:0c:00:
6e:60:4e:38:ef:1e:9a:83:d3:37:2d:f4:f4:07:31:
c2:4a:aa:dd:14:7e:71:06:f4:3e:ce:3d:d8:e2:92:
c7:b6:d7:d7:21:94:86:54:b9:da:eb:29:5c:55:c9:
e0:08:ef:01:71:3a:c6:7b:73:b9:2c:6a:51:1d:1e:
89:88:f6:c0:23:af:02:14:6d:ee:a6:b8:90:98:5a:
77:36:6d:37:9c:bb:22:63:b1:26:14:7c:e7:14:0e:
c7:f6:77:ac:d7:79:ac:95:56:b8:58:8d:ec:d1:de:
38:eb:8f:bd:04:00:30:7f:38:16:26:34:fa:0d:0f:
d9:b4:d8:2b:dc:ed:3c:a8:2c:03:16:50:b6:34:26:
2c:14:b9:da:20:b2:6d:7f:cf:b5:87:e5:3d:c0:cb:
be:25:d0:55:89:2f:69:13:a7:21:d2:05:e7:9e:7c:
5d:b9:86:16:14:1c:d4:bb:b6:67:a7:34:63:5f:bb:
f6:bf:80:0a:b5:0c:82:ed:72:28:68:b2:72:fc:5b:
bf:82:86:e1:da:2b:56:40:49:dc:3c:91:c1:a4:98:
1c:21:33:3f:fe:1a:ff:92:74:e9:66:2b:78:d2:f4:
a6:92:26:73:69:75:58:e2:91:2b:6c:f7:aa:fb:8b:
47:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:96:87:A6:4B:6C:DD:38:EA:B0:F8:D2:F2:6B:19:D7:42:63:B5:65
X509v3 Authority Key Identifier:
keyid:ED:62:4C:59:00:27:A5:A8:C9:EE:B3:69:72:6E:4A:63:0C:DF:41:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7WJMWQAnpajJ7rNpcm5KYwzfQUw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/8db67a-c4fc-4c2c-9978-a7be5fa0ff65/1/vZaHpkts3TjqsPjS8msZ10JjtWU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/8db67a-c4fc-4c2c-9978-a7be5fa0ff65/1/7WJMWQAnpajJ7rNpcm5KYwzfQUw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.89.128.0/22
IPv6:
2a0b:a200::/46
Signature Algorithm: sha256WithRSAEncryption
57:52:11:ab:f0:35:a1:22:02:6b:f5:9f:8f:41:e6:93:d3:90:
a3:e5:d4:9e:f5:a8:27:be:ba:86:41:c3:67:1a:65:d9:bf:ba:
57:4a:28:25:21:03:59:30:ef:2e:6c:60:b5:1d:83:73:98:5c:
28:12:b8:bc:84:c6:b5:bf:e2:09:98:07:7a:a2:04:3d:97:af:
64:c2:ad:0e:db:98:6f:b8:07:0e:a6:40:ba:b1:5b:da:95:be:
d9:2f:00:a3:c0:4a:90:2a:ab:00:f1:b6:b9:74:0d:03:ec:2e:
cd:eb:15:7e:e2:2f:6b:a1:03:d6:e7:31:7e:1a:44:e0:1e:e9:
2b:fd:b8:98:f6:fd:b2:ab:50:01:3f:c2:94:4c:49:43:ec:81:
31:04:13:ef:1b:84:c0:7d:b6:1e:8b:5a:97:34:9b:40:5f:e1:
1b:2a:27:d7:6a:2e:80:a6:d5:f0:a7:c1:af:85:83:c4:96:bd:
69:46:7d:4b:2f:fc:af:84:2f:fc:4f:4d:8c:cd:b5:dd:17:79:
c3:58:fb:ad:b6:0f:e7:89:e7:0d:26:2e:70:51:be:80:33:db:
4b:0e:0f:16:c7:4b:90:68:3c:27:5c:2c:b0:9c:80:c3:b2:05:
d6:e6:ac:91:0e:bb:d5:dc:91:88:6a:5c:8c:44:ff:3f:ef:ae:
89:4d:f7:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:12:53 2025 by rpki-client