Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/814ec5-9e41-4b5a-a6fe-477231191a35/1/8wknUCvN7dL5Ngyq2oYeYw2qKaA.roa
File: 8wknUCvN7dL5Ngyq2oYeYw2qKaA.roa (raw, json)
Hash identifier: 2x+7TMLohOium2m4btHhUYg1HhvZTp1KUAyfNFsWp/s=
Subject key identifier: F3:09:27:50:2B:CD:ED:D2:F9:36:0C:AA:DA:86:1E:63:0D:AA:29:A0
Certificate issuer: /CN=71bddeaf0f30fbdaf9e75b92ac7d5bd13f285de7
Certificate serial: 019428269F61DEC800F83B46F9715E5EEF8D
Authority key identifier: 71:BD:DE:AF:0F:30:FB:DA:F9:E7:5B:92:AC:7D:5B:D1:3F:28:5D:E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cb3erw8w-9r551uSrH1b0T8oXec.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/814ec5-9e41-4b5a-a6fe-477231191a35/1/8wknUCvN7dL5Ngyq2oYeYw2qKaA.roa
Signing time: Thu 02 Jan 2025 17:53:27 +0000
ROA not before: Thu 02 Jan 2025 17:53:27 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 199458
IP address blocks: 45.159.92.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:26:9f:61:de:c8:00:f8:3b:46:f9:71:5e:5e:ef:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71bddeaf0f30fbdaf9e75b92ac7d5bd13f285de7
Validity
Not Before: Jan 2 17:53:27 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f30927502bcdedd2f9360caada861e630daa29a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:4e:de:2e:60:e1:5d:78:ad:0b:86:87:80:b0:
8b:53:2e:7d:1d:63:19:3d:2e:27:a4:64:23:16:d6:
4a:a7:44:f0:87:6b:89:e9:cc:97:af:c7:5c:0e:29:
7d:29:86:29:44:d9:8f:88:c4:ab:f1:cc:b8:73:11:
b2:be:a6:0c:8a:9a:5f:d0:04:8b:d5:05:45:fa:c5:
86:92:3b:d6:e4:57:dc:bd:dc:91:f3:ca:4c:e1:00:
53:3c:f9:67:90:73:92:df:80:b3:3a:60:52:c6:53:
4f:75:e5:3c:1e:76:c9:77:dd:cf:d4:a5:0b:cf:6c:
b6:b0:66:e8:fc:49:6b:7d:4c:2b:8f:a3:88:8d:46:
0e:95:13:29:15:94:d9:cd:f2:a9:fb:48:d9:85:73:
43:f5:df:4d:9f:62:dc:63:1c:07:dc:28:13:ee:91:
c8:53:9a:c1:b6:09:53:00:bb:8c:79:fb:60:77:e3:
34:4f:ae:4a:0a:4f:b1:cc:e0:09:ef:da:81:39:11:
61:b7:e6:a8:14:dd:15:f4:c4:22:28:bf:1b:81:93:
b4:ca:46:15:d4:5e:b0:48:6e:94:ac:4b:8a:9b:e0:
2b:91:26:32:86:15:c7:7d:6e:12:a4:53:8e:ff:8f:
3f:bc:fd:09:1c:6e:22:5e:9b:9e:36:4d:2b:2a:be:
8a:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:09:27:50:2B:CD:ED:D2:F9:36:0C:AA:DA:86:1E:63:0D:AA:29:A0
X509v3 Authority Key Identifier:
keyid:71:BD:DE:AF:0F:30:FB:DA:F9:E7:5B:92:AC:7D:5B:D1:3F:28:5D:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb3erw8w-9r551uSrH1b0T8oXec.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/814ec5-9e41-4b5a-a6fe-477231191a35/1/8wknUCvN7dL5Ngyq2oYeYw2qKaA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/814ec5-9e41-4b5a-a6fe-477231191a35/1/cb3erw8w-9r551uSrH1b0T8oXec.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.159.92.0/22
Signature Algorithm: sha256WithRSAEncryption
30:8a:9d:ab:7b:4f:e3:5a:23:6d:a4:05:0c:5a:42:6b:f1:37:
76:e9:16:11:7c:0d:f7:55:95:d2:16:03:02:84:e7:c6:85:63:
b8:b4:51:5c:7e:7b:4e:c6:a2:8c:a0:ce:76:ff:94:52:31:42:
f2:09:f0:a8:53:c6:76:9b:16:27:88:5c:0a:53:31:b0:c8:41:
69:28:a3:ed:93:a0:35:ae:90:60:f7:16:01:30:fa:26:a9:2b:
2e:6c:df:af:ef:10:e0:99:f8:8e:18:ec:39:fe:6c:60:d2:52:
de:0f:64:f8:6d:a5:a0:29:23:a6:cd:84:d0:f2:f5:97:99:7b:
9a:04:08:bf:04:f2:cd:3f:4a:8d:d8:ea:d9:9c:69:6e:76:1f:
71:f3:6a:d8:af:17:6d:1f:05:9a:87:b7:dc:b2:87:86:b2:cc:
8b:6b:1b:b2:b8:71:53:b0:1b:9d:a7:6b:0c:e0:60:98:0d:6a:
a4:0e:c2:94:a2:14:37:5b:95:64:88:67:e0:b6:3d:cc:82:48:
43:d1:79:4b:cd:d1:79:7b:6e:32:20:cd:a1:88:f7:9a:47:1c:
41:21:6a:c8:fa:1d:4d:03:6f:c4:c3:bd:0c:dd:4d:34:b2:26:
ea:ae:53:df:83:8b:db:b5:66:da:77:7e:16:35:ec:8f:40:00:
81:2a:45:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:32:15 2025 by rpki-client