Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/e0472a-3adf-43cd-bf30-73923daef114/1/tLBGgqRxHab1cwf5fOyMejou4R8.roa
File: tLBGgqRxHab1cwf5fOyMejou4R8.roa (raw, json)
Hash identifier: aXTn6RC5rh/kc4azsa9gGA6B0UGFSr8DFagdYQWCLAc=
Subject key identifier: B4:B0:46:82:A4:71:1D:A6:F5:73:07:F9:7C:EC:8C:7A:3A:2E:E1:1F
Certificate issuer: /CN=8533ef46116fd9d21bfb533e44bde517890c24dc
Certificate serial: 01936879C137629E8A583F90DADD584E12F1
Authority key identifier: 85:33:EF:46:11:6F:D9:D2:1B:FB:53:3E:44:BD:E5:17:89:0C:24:DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hTPvRhFv2dIb-1M-RL3lF4kMJNw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/e0472a-3adf-43cd-bf30-73923daef114/1/tLBGgqRxHab1cwf5fOyMejou4R8.roa
Signing time: Tue 26 Nov 2024 12:37:09 +0000
ROA not before: Tue 26 Nov 2024 12:37:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 55410
IP address blocks: 45.14.82.0/24 maxlen: 24
45.85.128.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:68:79:c1:37:62:9e:8a:58:3f:90:da:dd:58:4e:12:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8533ef46116fd9d21bfb533e44bde517890c24dc
Validity
Not Before: Nov 26 12:37:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b4b04682a4711da6f57307f97cec8c7a3a2ee11f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:20:bc:a4:63:2d:c3:08:74:19:c1:7b:f7:ca:
2e:43:65:4b:b3:81:30:46:4e:2b:0a:4d:25:ac:34:
c1:28:99:5c:d7:da:d0:fd:8e:44:43:18:17:5c:8d:
d9:98:4f:ad:d2:24:ba:6f:7d:a8:e3:29:5b:37:82:
c2:a9:75:34:49:c6:94:6a:75:fe:f7:a7:c9:d4:bf:
e1:ff:84:b2:0e:c0:4c:99:37:db:a0:d6:5e:59:c4:
f3:87:f8:df:b5:d2:55:54:a0:24:7a:6a:59:1f:5f:
4b:a6:4a:30:8e:0b:89:31:ce:ed:d7:80:ff:75:d2:
1e:83:33:8e:7d:5a:b3:47:35:85:fc:13:79:89:07:
a8:60:75:3d:93:a3:ff:53:2c:95:2b:1f:58:3e:42:
7b:72:eb:e8:a9:86:6a:7c:1b:c0:85:6a:d6:f0:8a:
46:db:2f:66:59:19:4c:57:02:25:a6:8c:fd:e8:1a:
a3:65:47:08:53:80:b4:58:77:02:d7:24:6a:9b:3b:
d6:70:7f:d5:c1:40:69:49:83:89:3c:3f:80:00:c0:
e6:4e:f3:0f:a6:09:e0:a7:9f:10:df:e7:fb:5b:b4:
a1:4b:aa:4a:53:7e:f2:4a:bf:0d:f0:97:f6:b9:9c:
fb:c9:59:38:fc:88:ce:e2:69:50:f0:4b:96:f8:fc:
c8:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:B0:46:82:A4:71:1D:A6:F5:73:07:F9:7C:EC:8C:7A:3A:2E:E1:1F
X509v3 Authority Key Identifier:
keyid:85:33:EF:46:11:6F:D9:D2:1B:FB:53:3E:44:BD:E5:17:89:0C:24:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hTPvRhFv2dIb-1M-RL3lF4kMJNw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/e0472a-3adf-43cd-bf30-73923daef114/1/tLBGgqRxHab1cwf5fOyMejou4R8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/e0472a-3adf-43cd-bf30-73923daef114/1/hTPvRhFv2dIb-1M-RL3lF4kMJNw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.14.82.0/24
45.85.128.0/24
Signature Algorithm: sha256WithRSAEncryption
70:83:5a:9b:9d:34:d2:fe:9d:46:1f:36:51:7a:e0:08:a0:9d:
ba:2e:16:6e:37:55:82:7e:38:27:a3:f9:ce:25:18:f4:31:47:
e8:11:cc:8a:36:d5:af:57:fc:e4:10:d7:50:c7:76:c1:bf:48:
35:1d:0e:fc:7f:d0:6a:eb:c1:0d:c7:55:03:23:0e:c5:5a:ae:
3d:43:7a:0b:03:0c:95:d8:1a:1c:0d:7e:2c:6a:cd:92:bb:e8:
87:58:8f:11:f0:ff:0b:c8:15:1e:37:d7:36:07:0c:0d:7c:ab:
c8:12:36:f3:b1:95:63:41:54:af:78:fc:f6:51:06:63:6c:22:
00:c1:8a:db:ff:91:a9:9a:d8:ea:1c:8d:c4:24:64:ca:4e:fb:
58:23:94:61:b3:da:bc:70:1b:78:ac:03:e8:a7:16:11:5d:7e:
3a:79:d2:78:23:7e:60:3a:c4:67:97:bb:25:cd:bf:b1:2d:42:
b3:f3:f6:80:38:a9:a3:dc:a2:93:7a:2c:31:ae:2b:ff:df:bc:
c4:04:b3:1d:fe:07:28:93:11:bb:8b:67:b1:31:61:1e:07:ae:
68:ca:1f:a8:e4:db:01:b1:d2:9f:63:56:03:ec:9a:d6:85:ad:
27:ff:d9:03:31:7e:d1:fc:e1:9c:9e:ae:dd:90:fb:92:fc:d1:
b6:f5:b7:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 16:53:05 2025 by rpki-client