Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/39d4b5-b5c9-480a-9405-d9a539b8b7ad/1/rM1Y2sEPJhDAcT03hS-KCRgpepQ.roa
File: rM1Y2sEPJhDAcT03hS-KCRgpepQ.roa (raw, json)
Hash identifier: wYDQoNr38fN2VMwFRW0HV9EWF7i5Q9UBwcXGGYjLePQ=
Subject key identifier: AC:CD:58:DA:C1:0F:26:10:C0:71:3D:37:85:2F:8A:09:18:29:7A:94
Certificate issuer: /CN=8fd57a75dd7e952bee283935d6df2925d282a070
Certificate serial: 019420D65AB1D8A8BFD5A17462094E9FE7BB
Authority key identifier: 8F:D5:7A:75:DD:7E:95:2B:EE:28:39:35:D6:DF:29:25:D2:82:A0:70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j9V6dd1-lSvuKDk11t8pJdKCoHA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/39d4b5-b5c9-480a-9405-d9a539b8b7ad/1/rM1Y2sEPJhDAcT03hS-KCRgpepQ.roa
Signing time: Wed 01 Jan 2025 07:48:26 +0000
ROA not before: Wed 01 Jan 2025 07:48:26 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 396982
IP address blocks: 45.66.81.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d6:5a:b1:d8:a8:bf:d5:a1:74:62:09:4e:9f:e7:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8fd57a75dd7e952bee283935d6df2925d282a070
Validity
Not Before: Jan 1 07:48:26 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=accd58dac10f2610c0713d37852f8a0918297a94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:5c:e2:e3:76:3a:04:ef:f3:bc:56:07:a8:fa:
6b:da:9f:a3:b5:7e:f5:03:16:54:2a:fa:55:bf:8d:
a4:67:55:3e:81:12:60:1b:1a:f1:31:64:87:a5:7d:
ef:07:ec:e2:21:45:9c:50:59:0e:51:4a:93:43:40:
3d:bb:e9:ef:43:ff:26:cb:7b:3f:16:ee:69:2f:04:
1c:8e:57:5f:bb:35:f2:96:9d:94:10:3d:b4:7e:db:
1c:d9:81:13:4e:63:b0:29:a5:62:21:a2:d5:92:9c:
f2:c5:1e:f1:c2:3f:44:f7:20:9b:80:a1:1b:79:11:
69:18:39:73:2b:a9:f0:48:bf:9e:46:a5:e8:17:1e:
67:53:f2:64:a2:56:e2:93:12:40:e6:0b:de:f7:fd:
6a:55:a3:f4:b7:b0:5b:a2:c7:1c:6d:85:fd:d5:d3:
d4:8e:c9:7e:7a:d1:74:ae:7f:d8:b1:3a:9c:a4:55:
bd:68:f0:bc:28:f2:03:5b:fa:5c:48:26:f8:99:71:
ea:12:4c:c1:d6:f6:fc:10:9e:fe:ee:18:3a:3c:65:
ee:ba:29:13:aa:2f:1a:91:f7:63:f7:0f:a8:f4:5d:
09:6b:f6:44:fe:71:87:bc:2a:46:a7:83:b3:96:0d:
35:ab:13:1b:3e:67:c1:ef:6d:46:d7:39:f3:b8:38:
e4:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:CD:58:DA:C1:0F:26:10:C0:71:3D:37:85:2F:8A:09:18:29:7A:94
X509v3 Authority Key Identifier:
keyid:8F:D5:7A:75:DD:7E:95:2B:EE:28:39:35:D6:DF:29:25:D2:82:A0:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j9V6dd1-lSvuKDk11t8pJdKCoHA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/39d4b5-b5c9-480a-9405-d9a539b8b7ad/1/rM1Y2sEPJhDAcT03hS-KCRgpepQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/39d4b5-b5c9-480a-9405-d9a539b8b7ad/1/j9V6dd1-lSvuKDk11t8pJdKCoHA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.66.81.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:3d:e6:6a:c2:2b:4f:13:5f:20:c2:8c:3c:83:06:b4:42:1e:
d7:15:5e:a0:9e:cb:ca:d4:51:f3:ca:49:b2:4b:17:d9:db:e2:
6f:11:31:1a:58:67:e7:2e:b3:ab:cf:a2:56:3a:b1:b7:1f:be:
27:d3:7f:9c:14:a5:81:4f:6a:47:2d:63:3c:1b:17:86:31:05:
9a:28:d5:32:d8:c3:bc:ad:30:36:c2:5b:ff:2a:36:8e:79:8c:
74:5d:e5:ec:8d:92:fe:ee:f4:50:80:9f:9e:51:71:a8:6c:78:
fb:5c:d0:5d:5d:6e:70:bc:2c:c7:92:3c:e2:bc:f2:45:de:fe:
78:da:56:8e:9b:c5:bb:a4:af:ce:70:16:4f:e1:df:c1:1d:26:
6b:db:31:3c:5e:67:f9:03:3d:6c:40:68:ef:fa:f9:c2:d9:dc:
c6:af:05:84:56:c1:4a:e2:81:3d:c4:ad:8d:20:a7:e8:c8:3a:
01:84:7c:22:cf:52:3a:30:7f:7a:40:f8:c5:cc:cb:32:98:80:
f0:41:4c:c2:b1:35:89:5e:f3:8c:c2:3c:80:fa:d7:25:77:5c:
78:d7:13:7b:3c:1b:31:e2:3a:59:10:e2:20:fe:28:58:b1:a4:
66:a3:5f:86:06:75:fc:a4:81:ba:12:d3:74:fa:9f:42:db:7d:
e3:39:f7:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 21:40:44 2025 by rpki-client