Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/2599f9-6f76-4db6-bca7-c1331f49fc09/1/I7bRp2vZ3RbrhhKUKOmFr8bTJzo.roa
File: I7bRp2vZ3RbrhhKUKOmFr8bTJzo.roa (raw, json)
Hash identifier: AZx1yPV7v0204nnrhDxa3tWJoguxJZGcuqHPYDdtiSU=
Subject key identifier: 23:B6:D1:A7:6B:D9:DD:16:EB:86:12:94:28:E9:85:AF:C6:D3:27:3A
Certificate issuer: /CN=bd19d4535c7e62b921e859e6557b821f278e716a
Certificate serial: 0194258F80672D1651A53DA4988A15C73EDE
Authority key identifier: BD:19:D4:53:5C:7E:62:B9:21:E8:59:E6:55:7B:82:1F:27:8E:71:6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vRnUU1x-Yrkh6FnmVXuCHyeOcWo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/2599f9-6f76-4db6-bca7-c1331f49fc09/1/I7bRp2vZ3RbrhhKUKOmFr8bTJzo.roa
Signing time: Thu 02 Jan 2025 05:49:08 +0000
ROA not before: Thu 02 Jan 2025 05:49:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 400529
IP address blocks: 45.134.10.0/24 maxlen: 24
45.134.11.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:80:67:2d:16:51:a5:3d:a4:98:8a:15:c7:3e:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd19d4535c7e62b921e859e6557b821f278e716a
Validity
Not Before: Jan 2 05:49:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=23b6d1a76bd9dd16eb86129428e985afc6d3273a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:e4:75:86:88:98:1c:e5:ee:43:dc:a9:a5:99:
1b:83:52:ad:97:ae:ac:eb:77:d6:f8:81:63:31:b0:
e6:48:9f:e9:fa:99:9a:93:ec:0b:5b:fc:b5:db:65:
14:83:cc:b8:98:54:84:af:13:5b:8f:b0:68:ec:66:
bb:e3:e8:19:b5:de:82:4c:bc:17:af:6b:93:03:a8:
b5:c4:2b:a9:e8:c4:d3:a5:55:c4:e9:f4:63:13:32:
0e:9b:dd:b8:e7:87:77:80:6d:1c:c2:86:c6:e9:d0:
e8:e2:5f:9b:9d:1e:a9:65:c7:66:a3:ed:e8:0e:2f:
c9:dd:46:10:0c:a1:ef:2f:69:f8:e4:8b:1d:b5:aa:
c8:07:74:f0:f4:ce:8f:43:5a:20:c2:a0:6e:2e:d4:
5e:d8:00:2c:e6:46:f7:b8:20:0f:fd:86:92:3f:06:
a0:19:34:16:dc:21:99:00:e3:c0:69:a3:3e:54:46:
27:54:d9:e1:7d:3c:22:04:d0:5d:e7:9c:c1:1d:86:
5e:d7:8c:c7:0f:fb:23:f7:52:a3:0b:08:d2:d8:ea:
2f:aa:96:93:93:1e:2d:87:39:3c:eb:80:2f:71:9a:
ca:e1:43:d4:bf:f1:cf:40:bd:4a:d6:77:9f:e0:27:
ad:15:c6:4d:80:34:5d:a0:0c:95:1a:32:53:a6:a3:
57:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:B6:D1:A7:6B:D9:DD:16:EB:86:12:94:28:E9:85:AF:C6:D3:27:3A
X509v3 Authority Key Identifier:
keyid:BD:19:D4:53:5C:7E:62:B9:21:E8:59:E6:55:7B:82:1F:27:8E:71:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vRnUU1x-Yrkh6FnmVXuCHyeOcWo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/2599f9-6f76-4db6-bca7-c1331f49fc09/1/I7bRp2vZ3RbrhhKUKOmFr8bTJzo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/2599f9-6f76-4db6-bca7-c1331f49fc09/1/vRnUU1x-Yrkh6FnmVXuCHyeOcWo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.134.10.0/23
Signature Algorithm: sha256WithRSAEncryption
19:9f:eb:30:0d:49:94:10:77:8d:56:07:19:cf:e3:6c:64:b1:
cc:bb:96:ac:cc:4a:9b:b7:42:27:cf:06:9f:a1:f0:d8:b7:c9:
c2:18:af:2e:fa:dd:be:99:5a:ef:97:e4:ca:30:aa:3e:6c:3a:
da:b8:96:6e:ce:38:f5:14:49:2d:e2:2b:46:70:63:d9:2e:76:
51:a7:34:a9:d2:3a:46:95:b7:ae:83:0d:8b:4e:e2:44:8b:f3:
18:c0:ba:b9:ba:83:b2:1a:ed:12:cc:ad:34:9f:a7:0a:64:35:
fa:9f:75:1a:c2:04:50:28:ff:7c:47:5e:da:88:0a:bc:3b:95:
74:b9:aa:a7:49:a2:34:6b:97:60:fc:e4:2a:a7:c5:ce:f6:b8:
e2:61:d8:e6:50:34:e3:18:9e:cb:08:08:1d:e4:e7:08:7a:b8:
ce:58:0e:7b:d7:3a:25:06:6d:ae:ac:59:2a:28:e4:74:3a:25:
d9:2e:3d:62:76:a0:dd:80:25:39:cf:b9:df:69:5c:72:a8:6c:
65:58:53:7c:00:b0:71:02:3e:71:d3:1a:f6:fb:e3:e1:1b:cd:
85:ed:78:1a:9e:95:b7:a8:a5:73:94:3d:62:eb:7b:5a:5a:8f:
e8:b2:b4:33:99:74:d0:b3:7b:a2:a8:b1:1f:48:4e:87:fe:48:
30:1c:73:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 22:35:40 2025 by rpki-client