Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/39d4b5-b5c9-480a-9405-d9a539b8b7ad/1/xBnPmDluu8xPBNc3MvJ1JJ1Y5f8.roa
File: xBnPmDluu8xPBNc3MvJ1JJ1Y5f8.roa (raw, json)
Hash identifier: Q9qE4BIap4CmlXdBGmmHzRr3Ld+715v9q//ZgmRDsjA=
Subject key identifier: C4:19:CF:98:39:6E:BB:CC:4F:04:D7:37:32:F2:75:24:9D:58:E5:FF
Certificate issuer: /CN=8fd57a75dd7e952bee283935d6df2925d282a070
Certificate serial: 019420D6598BF1831FE93BA81C7F1E56F4DA
Authority key identifier: 8F:D5:7A:75:DD:7E:95:2B:EE:28:39:35:D6:DF:29:25:D2:82:A0:70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j9V6dd1-lSvuKDk11t8pJdKCoHA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/39d4b5-b5c9-480a-9405-d9a539b8b7ad/1/xBnPmDluu8xPBNc3MvJ1JJ1Y5f8.roa
Signing time: Wed 01 Jan 2025 07:48:26 +0000
ROA not before: Wed 01 Jan 2025 07:48:26 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16276
IP address blocks: 45.66.83.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d6:59:8b:f1:83:1f:e9:3b:a8:1c:7f:1e:56:f4:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8fd57a75dd7e952bee283935d6df2925d282a070
Validity
Not Before: Jan 1 07:48:26 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c419cf98396ebbcc4f04d73732f275249d58e5ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:05:a3:0f:b7:5f:e6:31:c3:5b:eb:7b:62:3b:
92:73:43:5e:84:50:37:28:30:b6:10:48:7b:2d:72:
a8:8a:a8:53:08:8b:38:f2:db:13:07:51:2d:c3:e0:
75:a5:c3:ba:e6:d4:b2:a0:0d:e8:54:0e:ac:eb:7e:
f9:30:bd:e2:c2:f5:ea:10:3e:30:91:da:39:46:85:
be:7f:5a:73:76:af:c1:7b:9e:4d:53:35:15:5d:f6:
9d:11:9e:ff:e6:48:53:ab:f0:07:d4:a9:f8:15:4f:
ca:f4:92:3d:11:a4:cd:6b:02:e1:73:3b:d6:a3:67:
b9:2f:30:52:c9:6a:25:07:d3:84:84:16:10:88:9b:
21:7c:f8:5e:7a:77:28:8d:8f:0d:ca:72:05:b3:87:
21:d0:d5:67:30:85:2b:26:ae:ac:3f:f8:21:84:ae:
d1:dd:02:f9:05:cb:bc:d8:dc:42:59:97:8d:4d:a8:
6a:cb:b9:0e:c8:35:cf:82:0b:ab:e9:50:19:86:71:
58:98:9a:b1:30:00:9b:ac:b5:9e:1f:88:30:33:6b:
53:19:a9:9a:c6:92:bf:de:9e:73:e9:80:83:47:b9:
52:ef:eb:f7:31:9b:ef:2e:40:f2:08:c1:74:02:ba:
b7:90:4d:b9:4f:c1:5e:b3:ec:4b:8d:e9:6d:8e:ff:
a1:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:19:CF:98:39:6E:BB:CC:4F:04:D7:37:32:F2:75:24:9D:58:E5:FF
X509v3 Authority Key Identifier:
keyid:8F:D5:7A:75:DD:7E:95:2B:EE:28:39:35:D6:DF:29:25:D2:82:A0:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j9V6dd1-lSvuKDk11t8pJdKCoHA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/39d4b5-b5c9-480a-9405-d9a539b8b7ad/1/xBnPmDluu8xPBNc3MvJ1JJ1Y5f8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/39d4b5-b5c9-480a-9405-d9a539b8b7ad/1/j9V6dd1-lSvuKDk11t8pJdKCoHA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.66.83.0/24
Signature Algorithm: sha256WithRSAEncryption
13:d7:b5:3d:3a:42:96:09:4a:b6:0f:2a:34:2f:a4:ee:6b:77:
ef:39:e3:5e:1a:b1:15:29:1b:b1:b8:14:de:6f:62:e7:9b:25:
b7:ef:70:8a:70:e6:6e:d6:8c:1b:e7:de:12:a9:5c:70:ca:b8:
e2:24:09:cc:86:df:4c:dc:15:66:ef:da:5d:ae:ae:9b:0d:67:
e5:c0:25:cf:64:28:93:f8:0c:ab:17:d0:d5:a6:3e:09:a1:43:
80:9a:22:3e:d0:4c:69:b3:b7:c0:8e:ad:7e:e3:ad:de:e8:2d:
bc:64:bd:68:5f:13:01:ca:86:51:83:2f:99:94:e8:aa:8a:50:
04:b8:fe:03:9b:00:27:6f:66:38:7b:3b:57:3c:de:c3:61:80:
b2:aa:f0:72:9a:36:4b:d1:a5:4e:da:ef:bc:eb:7b:e9:5f:9b:
ce:f2:65:0c:ff:27:02:d1:7b:f6:a9:f3:37:8a:b3:6e:cf:55:
66:07:70:93:9e:6f:10:02:ff:9c:e1:c5:46:44:3b:be:8d:45:
14:fe:6e:05:13:1f:8d:14:50:a2:10:d2:7e:1d:36:7e:8a:a8:
fe:4c:5d:40:2d:18:ec:b4:f1:28:d1:ec:40:d7:2b:cf:d0:83:
62:21:65:df:c0:74:e2:ee:30:d6:e1:d8:1b:78:c2:a6:b1:38:
1a:a2:36:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 21:47:49 2025 by rpki-client