Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/7_TdGKKCoK_9jWCdTmmCekvbfCQ.roa
File: 7_TdGKKCoK_9jWCdTmmCekvbfCQ.roa (raw, json)
Hash identifier: HbghibngFDGtOfz6Wsr4Cw9pgoP/60Kf7azLlTYIjUA=
Subject key identifier: EF:F4:DD:18:A2:82:A0:AF:FD:8D:60:9D:4E:69:82:7A:4B:DB:7C:24
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 0194282488039FFBB276866C7B2D1BE47A0D
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/7_TdGKKCoK_9jWCdTmmCekvbfCQ.roa
Signing time: Thu 02 Jan 2025 17:51:10 +0000
ROA not before: Thu 02 Jan 2025 17:51:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50053
IP address blocks: 45.128.232.0/24 maxlen: 24
45.144.154.0/24 maxlen: 24
45.149.234.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:24:88:03:9f:fb:b2:76:86:6c:7b:2d:1b:e4:7a:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jan 2 17:51:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=eff4dd18a282a0affd8d609d4e69827a4bdb7c24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:b4:13:2f:ad:0d:bb:a3:92:5e:8b:4c:62:8f:
da:ce:87:26:f1:ca:98:f9:6e:b4:68:94:a2:ce:c4:
a9:96:af:68:f5:97:05:ec:3a:c1:05:9e:fe:ca:94:
b5:75:ae:c9:96:91:e2:4e:68:cd:da:8c:7f:48:4d:
78:ba:c9:63:57:a5:cf:4b:a7:4e:ad:cd:68:20:4a:
5f:bc:92:29:ba:ed:5e:a0:b9:56:05:db:85:1f:44:
25:f6:ec:44:f2:21:83:1d:0d:92:12:c9:9c:74:5a:
08:8c:f9:7c:a8:4b:2e:81:43:fd:a6:02:a9:21:87:
86:7c:49:eb:ea:ca:44:6d:62:f9:4d:d3:11:2c:2f:
1f:fa:99:c6:98:42:85:f4:7e:d9:4b:d3:5d:2a:f3:
56:53:bf:c9:d2:6a:31:d0:40:72:3c:49:c8:64:e9:
ee:6d:a4:ec:0c:54:31:38:35:14:7d:fa:a8:d1:c5:
c9:6c:a8:5d:21:1c:ba:82:aa:ad:13:b4:4d:68:9d:
c8:89:3b:16:0d:0f:1d:d9:38:96:14:3d:bd:35:fd:
04:01:55:77:fd:e5:55:1f:ed:f5:3d:8f:6e:6b:07:
f4:8d:7b:14:26:54:bd:9e:9b:d4:30:ec:83:51:28:
c4:d8:3d:ee:f7:5c:0a:24:c3:f6:27:54:d4:d7:f3:
21:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:F4:DD:18:A2:82:A0:AF:FD:8D:60:9D:4E:69:82:7A:4B:DB:7C:24
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/7_TdGKKCoK_9jWCdTmmCekvbfCQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.128.232.0/24
45.144.154.0/24
45.149.234.0/24
Signature Algorithm: sha256WithRSAEncryption
16:b3:d2:f4:7d:08:28:9c:de:cc:a7:4f:f1:ef:95:fb:92:c0:
58:92:95:10:17:33:9d:2c:9c:e1:46:a1:b8:c2:8c:9a:9a:66:
65:78:fc:ec:50:38:ef:d0:4c:a3:53:03:3b:da:9b:c2:10:a8:
26:f6:93:cd:09:95:1b:ac:0d:4f:36:ab:6a:a7:c9:96:f7:89:
bb:b6:3f:58:7d:c3:ea:10:01:25:91:64:21:c0:a4:d1:97:7c:
0e:ef:ed:61:dc:a5:ef:f1:d4:a4:38:f7:13:65:c4:0d:ec:2d:
8e:c6:84:97:35:a8:8c:e6:b6:21:78:31:0a:35:ee:76:2a:34:
43:3e:e4:08:ad:49:67:67:f3:00:dd:55:37:e8:69:ae:8e:92:
1f:d2:14:a0:9d:06:ea:d4:9f:51:f4:a2:2c:77:a3:5c:74:e0:
41:1f:b3:12:a7:59:cd:6c:dc:79:bb:ec:75:b0:6a:39:16:6a:
80:b0:95:c8:c1:77:ef:ca:e2:ce:9b:85:7e:48:94:1b:55:8d:
cd:d2:55:76:fa:52:5a:f3:c0:bb:62:f2:2a:1c:14:58:35:fa:
00:97:88:d5:2c:2a:7e:5c:4d:00:70:44:b9:97:5f:dd:0d:b2:
03:a5:21:22:11:a2:7a:8a:ee:db:1d:e6:d9:3a:42:07:82:92:
f2:87:a9:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:56:12 2025 by rpki-client