Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/afa34c-f3f0-405c-b083-a35fc438d4ca/1/CqNmCGGQsBrEt7zh-VfcGtUv9RA.roa
File: CqNmCGGQsBrEt7zh-VfcGtUv9RA.roa (raw, json)
Hash identifier: 7HTEUHavuiaMXQtqJhG62cD/8gu3Fv5evoWWikvAioM=
Subject key identifier: 0A:A3:66:08:61:90:B0:1A:C4:B7:BC:E1:F9:57:DC:1A:D5:2F:F5:10
Certificate issuer: /CN=0bf543e23e29fb03748d0939726f30fe9affa19e
Certificate serial: 019424B3E355351A4BD05E58EFA5B5C52941
Authority key identifier: 0B:F5:43:E2:3E:29:FB:03:74:8D:09:39:72:6F:30:FE:9A:FF:A1:9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C_VD4j4p-wN0jQk5cm8w_pr_oZ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/afa34c-f3f0-405c-b083-a35fc438d4ca/1/CqNmCGGQsBrEt7zh-VfcGtUv9RA.roa
Signing time: Thu 02 Jan 2025 01:49:16 +0000
ROA not before: Thu 02 Jan 2025 01:49:16 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 5413
IP address blocks: 45.132.148.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:e3:55:35:1a:4b:d0:5e:58:ef:a5:b5:c5:29:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bf543e23e29fb03748d0939726f30fe9affa19e
Validity
Not Before: Jan 2 01:49:16 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0aa366086190b01ac4b7bce1f957dc1ad52ff510
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:52:61:37:84:34:27:19:21:e4:d1:10:d3:bb:
d3:10:57:06:b3:8f:63:1f:13:a8:2f:40:cf:82:62:
cb:70:a6:06:3e:90:2c:78:8f:00:4f:89:30:3b:90:
a1:85:65:06:7a:03:c2:0f:06:e2:c4:f6:65:36:72:
88:d5:0e:9b:d7:b1:08:9d:4f:48:20:be:86:cd:dd:
ee:95:27:64:dd:08:b5:a5:0e:ad:93:2e:5f:12:a9:
11:19:5f:3f:6e:ba:d1:dd:32:79:89:3c:28:56:34:
52:b7:77:ce:2b:e7:82:e0:1e:98:0f:22:7a:20:12:
c8:c3:46:87:66:5e:c9:bf:c3:27:41:f3:40:ef:9a:
88:63:a7:bf:0f:77:b6:05:a5:38:53:96:88:17:c9:
2f:e5:74:7e:fe:9b:b0:06:32:36:67:a4:14:65:ea:
c4:4b:d3:d5:7e:6f:ea:31:61:77:9b:8f:9f:01:23:
eb:8c:d6:1c:cb:9e:ac:47:69:8c:13:7c:77:00:ab:
e7:12:39:f5:eb:79:81:ed:8c:2d:cf:11:97:c2:bd:
1c:0b:86:17:c4:c3:6c:38:87:e1:42:ac:e2:82:bc:
2b:2b:68:33:2f:c4:82:76:94:a6:3e:f4:df:c4:da:
a9:f1:b0:33:67:4a:35:20:5a:6d:1b:18:84:a8:f5:
25:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:A3:66:08:61:90:B0:1A:C4:B7:BC:E1:F9:57:DC:1A:D5:2F:F5:10
X509v3 Authority Key Identifier:
keyid:0B:F5:43:E2:3E:29:FB:03:74:8D:09:39:72:6F:30:FE:9A:FF:A1:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C_VD4j4p-wN0jQk5cm8w_pr_oZ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/afa34c-f3f0-405c-b083-a35fc438d4ca/1/CqNmCGGQsBrEt7zh-VfcGtUv9RA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/afa34c-f3f0-405c-b083-a35fc438d4ca/1/C_VD4j4p-wN0jQk5cm8w_pr_oZ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.132.148.0/23
Signature Algorithm: sha256WithRSAEncryption
44:e1:ac:4c:c0:a3:9f:4f:66:2b:5a:58:ba:1f:3f:f9:34:d5:
7e:46:85:6a:55:df:0a:49:4c:98:54:c6:c1:eb:05:c6:c5:15:
a3:7b:c4:41:47:09:bc:ef:b5:33:b6:ef:c7:b7:07:5c:91:38:
f9:1b:08:98:d9:16:28:88:a9:cb:95:05:fa:10:32:01:d6:a1:
9e:30:68:4b:5a:c2:db:e6:ab:86:51:24:73:a2:e0:c1:f6:26:
78:1a:f9:8e:57:e0:01:03:de:bd:24:0f:a4:68:28:16:82:6b:
9c:dd:76:13:17:c5:65:6a:cc:45:5b:b4:b1:c0:8b:20:15:86:
48:f9:6a:7d:3f:36:c6:60:c0:b0:c3:b4:43:45:6a:54:65:a5:
cc:cc:9f:4e:09:9f:4d:da:09:26:f9:15:32:87:ca:95:09:e9:
3a:47:53:b1:c9:66:fa:d7:e3:19:5e:37:6e:64:da:d3:09:f7:
90:6d:8e:a3:9d:aa:58:42:6e:4c:55:76:b9:aa:12:db:d7:1e:
e4:e7:c4:f5:b8:84:08:d9:4d:3b:b1:e3:96:79:c8:ca:11:78:
a3:ec:f9:42:7f:0e:ee:25:d9:60:38:b9:ff:35:d4:dc:1c:67:
91:33:67:f1:8d:8a:10:22:41:e6:6c:c9:dc:df:90:c9:46:59:
7a:d2:ff:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 00:01:51 2025 by rpki-client