Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/my_Dg076AxzrDdy4zgN6LphjLmE.roa
File: my_Dg076AxzrDdy4zgN6LphjLmE.roa (raw, json)
Hash identifier: Ff7BxGoGNJ5MLVCQDBjzhj5tjk+/e8j+V/bVQVUvALA=
Subject key identifier: 9B:2F:C3:83:4E:FA:03:1C:EB:0D:DC:B8:CE:03:7A:2E:98:63:2E:61
Certificate issuer: /CN=86d648bdba965461b1e8c11b9dd436c61382873c
Certificate serial: 019420685F798F0FC504FD04B0AC415BA0ED
Authority key identifier: 86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/my_Dg076AxzrDdy4zgN6LphjLmE.roa
Signing time: Wed 01 Jan 2025 05:48:18 +0000
ROA not before: Wed 01 Jan 2025 05:48:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 400992
IP address blocks: 147.45.124.0/24 maxlen: 24
147.45.125.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:68:5f:79:8f:0f:c5:04:fd:04:b0:ac:41:5b:a0:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86d648bdba965461b1e8c11b9dd436c61382873c
Validity
Not Before: Jan 1 05:48:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9b2fc3834efa031ceb0ddcb8ce037a2e98632e61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:04:57:a7:dc:a3:df:be:67:0d:5c:87:f4:72:
13:2c:9a:a6:7e:14:80:15:c1:8b:df:93:41:c5:fe:
1f:0e:f5:50:db:55:fa:f1:b5:05:38:58:66:66:2e:
26:da:2b:85:d1:6e:22:82:eb:82:b2:fb:7a:09:8b:
ed:fe:5f:53:30:86:45:0f:d9:32:c9:e1:25:85:a7:
e4:f0:59:85:c8:1f:02:9f:91:54:54:17:84:0d:5a:
f1:d9:e5:8b:e2:62:86:9d:7c:c8:4a:1b:8b:1a:f7:
5b:4f:1f:77:41:56:58:5a:c2:b5:d4:14:ac:1c:85:
f4:bf:8f:53:e0:7c:e4:1d:da:92:18:31:bb:0a:8e:
28:42:4e:f8:a7:d8:7a:e0:e0:d1:45:90:a2:e8:6a:
2d:0c:43:94:e8:4b:41:5e:9a:f0:cf:75:8b:a9:43:
f0:63:80:68:cb:5e:17:7f:ea:f8:f6:50:5a:7c:8f:
ee:fe:cd:13:3c:8a:45:3e:d0:7b:a2:8f:9e:b6:bb:
73:09:30:ab:39:60:57:b4:95:06:6d:b9:e1:fd:54:
4a:ea:79:16:da:3b:14:56:cf:93:49:20:68:76:a9:
46:7e:cc:ec:02:82:9e:9b:50:07:5b:37:40:3e:9a:
d7:a1:8c:2f:f8:d5:56:94:b8:97:e2:12:ec:9a:0b:
a8:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:2F:C3:83:4E:FA:03:1C:EB:0D:DC:B8:CE:03:7A:2E:98:63:2E:61
X509v3 Authority Key Identifier:
keyid:86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/my_Dg076AxzrDdy4zgN6LphjLmE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.45.124.0/23
Signature Algorithm: sha256WithRSAEncryption
0a:76:a3:80:c4:7c:b9:67:ab:89:30:12:23:66:3a:6e:e2:57:
d8:88:da:0f:fe:25:e1:7c:77:c3:19:5b:56:2d:58:55:94:ba:
8c:aa:8f:63:09:e3:95:90:83:46:b7:2f:1f:3c:1a:1d:1c:db:
9b:30:1d:85:ef:ff:44:22:77:89:e3:80:be:1e:67:98:f0:e2:
6a:dc:67:b7:95:bd:92:1b:ad:af:dd:fb:4c:e6:8a:cd:81:13:
33:0d:31:59:c6:c7:25:05:ae:29:75:19:0d:bf:ed:13:c6:3b:
ed:11:bb:30:eb:2a:2f:40:fe:8d:3f:b3:a5:ae:e2:b5:ee:53:
02:23:71:44:aa:68:c6:a4:43:f9:09:e5:14:1d:6d:dd:f8:c7:
aa:a7:06:83:6a:a1:c2:e0:70:96:70:63:12:b6:23:12:03:ed:
11:0e:85:81:8d:92:f5:f0:96:5e:09:bd:23:9d:ed:44:b6:1c:
04:fb:16:6e:02:e2:58:c1:28:f1:2a:d6:5f:17:1c:92:b5:9a:
a3:be:6b:56:f2:a8:45:ea:40:d7:4b:ec:33:b7:31:8b:62:96:
58:1b:1d:fb:53:4b:bc:b9:e8:74:ab:53:61:57:30:1d:d4:75:
ad:e0:c6:89:5a:a8:ce:72:cc:e4:2e:51:fc:10:d4:28:35:33:
84:4a:61:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 02:50:37 2025 by rpki-client