Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/6b1e95-bc53-48ca-a1ee-b543f853ff25/1/2nPpzAxKBEn57Sndexy-wXpc4H4.roa
File: 2nPpzAxKBEn57Sndexy-wXpc4H4.roa (raw, json)
Hash identifier: 1euZi1zjNsk0T/ChvSNHQz6t1W4qTlZHAVH5bzlpjtg=
Subject key identifier: DA:73:E9:CC:0C:4A:04:49:F9:ED:29:DD:7B:1C:BE:C1:7A:5C:E0:7E
Certificate issuer: /CN=d834ed2f9e2cef4701021e75ff454164fedc7c51
Certificate serial: 018E7614E757A4E74E6FEEBA94ED23E34C5D
Authority key identifier: D8:34:ED:2F:9E:2C:EF:47:01:02:1E:75:FF:45:41:64:FE:DC:7C:51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2DTtL54s70cBAh51_0VBZP7cfFE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/6b1e95-bc53-48ca-a1ee-b543f853ff25/1/2nPpzAxKBEn57Sndexy-wXpc4H4.roa
Signing time: Mon 25 Mar 2024 14:47:45 +0000
ROA not before: Mon 25 Mar 2024 14:47:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 200845
IP address blocks: 45.8.48.0/22 maxlen: 24
45.8.49.0/24 maxlen: 24
45.8.50.0/23 maxlen: 23
45.8.50.0/24 maxlen: 24
45.8.51.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:76:14:e7:57:a4:e7:4e:6f:ee:ba:94:ed:23:e3:4c:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d834ed2f9e2cef4701021e75ff454164fedc7c51
Validity
Not Before: Mar 25 14:47:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=da73e9cc0c4a0449f9ed29dd7b1cbec17a5ce07e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:8d:26:a7:61:f0:6a:ee:c9:eb:bf:e3:94:c4:
96:3f:a2:3f:9a:02:2d:8d:de:c8:05:bf:32:35:f5:
43:d2:d5:0e:47:3a:82:96:4e:ee:09:23:ec:a8:0e:
8d:1c:0c:04:7c:96:15:11:49:65:5f:6b:87:6b:18:
3b:be:96:fc:d4:0d:33:70:60:9c:86:2c:28:e5:61:
45:05:b3:58:8b:1b:53:a8:25:98:07:8e:f1:a1:2a:
e3:ae:7e:ab:a6:5d:d4:47:96:0e:a5:db:0a:fa:d3:
10:36:fa:bc:51:f8:02:cc:85:ae:83:a9:88:a5:fd:
e3:ac:42:dd:cb:94:a5:1c:92:f9:c3:ec:8b:fe:e0:
26:f7:5a:79:84:c8:24:4e:82:71:78:29:5a:b1:06:
e7:8c:74:77:b6:0a:97:98:c1:0e:09:6c:ac:65:90:
ce:34:d1:21:6c:49:a5:ba:a4:25:30:a3:74:8c:53:
cf:cd:2b:15:c7:69:29:09:19:aa:06:b7:66:f8:9f:
25:a2:cd:e1:4f:42:71:12:c3:1e:a6:3a:6b:36:d8:
fd:78:c3:fd:97:ab:16:aa:d6:1d:4d:30:f7:74:03:
7e:74:7a:82:20:68:ae:eb:3a:38:fb:2d:f7:33:11:
3b:9c:e8:04:51:96:cd:61:34:4f:84:49:b6:b8:89:
91:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:73:E9:CC:0C:4A:04:49:F9:ED:29:DD:7B:1C:BE:C1:7A:5C:E0:7E
X509v3 Authority Key Identifier:
keyid:D8:34:ED:2F:9E:2C:EF:47:01:02:1E:75:FF:45:41:64:FE:DC:7C:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2DTtL54s70cBAh51_0VBZP7cfFE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/6b1e95-bc53-48ca-a1ee-b543f853ff25/1/2nPpzAxKBEn57Sndexy-wXpc4H4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/6b1e95-bc53-48ca-a1ee-b543f853ff25/1/2DTtL54s70cBAh51_0VBZP7cfFE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.8.48.0/22
Signature Algorithm: sha256WithRSAEncryption
2d:44:06:00:6d:f0:3c:ea:76:af:49:f0:73:83:e9:c1:91:f0:
ac:8e:d5:b3:ee:f7:61:3f:33:ff:d1:22:85:ad:2b:01:b0:0a:
4f:aa:b2:5e:2a:40:c8:90:ef:9e:e7:b0:d9:c8:9c:d0:0a:79:
1b:dd:f8:4f:84:b6:bf:97:2c:02:89:3d:09:92:f5:45:7c:00:
9b:b1:79:69:76:93:5b:49:c3:59:11:ab:0d:bb:10:a2:55:30:
5c:13:fd:eb:82:cc:f6:25:d1:9f:7c:b4:48:7c:16:b3:5f:05:
0a:21:95:e9:bf:9b:ff:16:2b:86:4d:c3:ea:55:ba:98:3f:b6:
1b:4d:ba:99:06:71:39:7b:b6:29:1f:cb:60:43:fe:60:c6:c8:
10:20:45:de:60:f0:3c:6c:64:31:0e:c5:25:67:6e:7a:11:10:
2a:65:2e:56:b2:2a:5d:ee:dc:1a:65:85:a6:f5:9f:d1:5d:33:
2e:4c:1b:e6:af:1e:23:5a:72:0c:0c:98:2b:94:af:86:88:60:
1a:54:6e:88:86:5d:fc:8d:83:79:47:fd:2c:71:3a:e0:d1:3b:
df:42:7f:f4:b7:99:aa:0b:f1:12:5e:7c:55:8f:a1:cd:8f:53:
a0:5c:b2:d3:57:7a:60:2f:42:8a:9e:c9:f8:46:d1:c0:90:8f:
67:e8:bd:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:15:23 2025 by rpki-client