Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/375ebc-bafb-4e0b-b549-77635a22eb96/1/DVTN6UDTMLciD2vdICL_CmxW5h0.roa
File: DVTN6UDTMLciD2vdICL_CmxW5h0.roa (raw, json)
Hash identifier: lGGJwHWs8Ee+gESMD4HQV9LD4VTGYiiCY92mtSXN+g4=
Subject key identifier: 0D:54:CD:E9:40:D3:30:B7:22:0F:6B:DD:20:22:FF:0A:6C:56:E6:1D
Certificate issuer: /CN=b7c40a747e3ac1acc611a4c403b6007398e7d79f
Certificate serial: 01941FFA718956A301285421F29C2E1B28F7
Authority key identifier: B7:C4:0A:74:7E:3A:C1:AC:C6:11:A4:C4:03:B6:00:73:98:E7:D7:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t8QKdH46wazGEaTEA7YAc5jn158.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/375ebc-bafb-4e0b-b549-77635a22eb96/1/DVTN6UDTMLciD2vdICL_CmxW5h0.roa
Signing time: Wed 01 Jan 2025 03:48:14 +0000
ROA not before: Wed 01 Jan 2025 03:48:14 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 216395
IP address blocks: 45.67.14.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:71:89:56:a3:01:28:54:21:f2:9c:2e:1b:28:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b7c40a747e3ac1acc611a4c403b6007398e7d79f
Validity
Not Before: Jan 1 03:48:14 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0d54cde940d330b7220f6bdd2022ff0a6c56e61d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:86:a2:d5:8a:4c:07:f6:f4:1b:12:b9:fe:12:
16:12:cd:2a:ed:d6:bc:a1:dc:83:45:e9:b2:8c:48:
73:1c:4a:9d:0b:d0:d2:e1:88:bf:ca:07:4a:05:de:
31:51:6e:98:48:50:6a:c4:da:5c:db:ad:b3:68:1a:
1a:94:b3:c2:02:62:6d:d1:f9:19:f3:68:05:16:2e:
fc:31:d2:89:f6:aa:0e:67:e1:b3:8d:8a:7e:0f:c4:
60:39:42:09:96:ed:0b:22:67:aa:88:be:27:e8:55:
f7:33:f1:d9:a4:5f:bc:f0:28:3c:91:44:e6:d5:83:
2e:c2:36:c4:7c:82:12:d3:39:9a:db:d0:8d:cf:0c:
4f:29:a8:6e:ac:cd:c2:38:4d:2a:e6:42:6e:97:97:
dc:e3:55:3c:9d:45:42:a7:1b:50:79:97:37:1b:93:
0f:a5:29:4f:17:48:e8:2a:c7:1d:72:3a:60:2b:42:
82:0e:21:b9:b0:b2:26:eb:fd:a5:05:d0:a0:48:3b:
40:38:b8:ab:a9:52:70:ef:e0:e0:08:1d:75:74:8d:
8b:84:33:69:c4:e4:32:d8:31:be:c9:62:94:0f:57:
c6:0d:49:b1:f8:54:58:09:b6:56:ac:3c:2b:1f:da:
10:b4:0d:1c:77:0c:d1:96:c2:b9:3c:87:06:ee:76:
ac:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:54:CD:E9:40:D3:30:B7:22:0F:6B:DD:20:22:FF:0A:6C:56:E6:1D
X509v3 Authority Key Identifier:
keyid:B7:C4:0A:74:7E:3A:C1:AC:C6:11:A4:C4:03:B6:00:73:98:E7:D7:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t8QKdH46wazGEaTEA7YAc5jn158.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/375ebc-bafb-4e0b-b549-77635a22eb96/1/DVTN6UDTMLciD2vdICL_CmxW5h0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/375ebc-bafb-4e0b-b549-77635a22eb96/1/t8QKdH46wazGEaTEA7YAc5jn158.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.67.14.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:82:76:94:0e:1b:6c:97:23:ec:3d:a5:11:2f:9f:b4:aa:7f:
e9:d3:46:a7:22:fb:44:50:0a:ea:33:cb:da:3c:47:e8:af:a9:
b0:12:cc:e4:8d:df:40:cf:4e:1b:25:17:7c:88:4f:1d:3d:f9:
de:50:0b:90:1b:74:60:68:0f:71:e3:50:fb:2b:20:3a:be:55:
8e:6c:bc:27:99:e3:19:f8:3d:e8:88:6c:42:fa:61:ed:c6:12:
3f:73:f6:a5:38:39:3a:f9:38:15:2b:a5:89:5d:8a:46:16:7c:
7b:69:8e:f9:52:e8:b5:76:3a:10:8b:0a:08:71:26:20:49:2c:
84:9e:b5:62:8b:89:31:82:f1:95:68:e3:a6:9c:ea:5b:65:85:
e2:35:4e:1e:d2:99:92:96:51:e3:f8:b4:1b:9b:15:fe:b3:22:
2e:0f:e0:1a:7a:34:b2:7c:0e:5e:cf:ae:8f:33:2c:96:eb:56:
11:af:b7:ae:43:c3:59:d4:a7:fc:b5:fd:5b:c1:3a:b3:07:9b:
4d:d7:92:bb:ae:ca:5c:0f:8a:79:cb:e4:3b:bd:67:8d:14:61:
c0:ba:b4:e3:16:21:77:14:cc:fa:6c:54:54:f5:eb:ca:75:9c:
2a:52:36:d9:08:b1:ab:15:60:5e:08:77:ea:25:7d:19:76:81:
ce:2d:cd:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 02:12:33 2025 by rpki-client