Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/8S9TckYMQov5oiiWug0DZjKuCOc.roa
File: 8S9TckYMQov5oiiWug0DZjKuCOc.roa (raw, json)
Hash identifier: 92kUpIXbrkkCV9MuEV771IRCYbEG1j+E6CGDnKJYUYc=
Subject key identifier: F1:2F:53:72:46:0C:42:8B:F9:A2:28:96:BA:0D:03:66:32:AE:08:E7
Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Certificate serial: 0194B77BB9DBA43653A92C9370B8F3E65DC1
Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/8S9TckYMQov5oiiWug0DZjKuCOc.roa
Signing time: Thu 30 Jan 2025 13:52:06 +0000
ROA not before: Thu 30 Jan 2025 13:52:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213488
IP address blocks: 45.13.190.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:b7:7b:b9:db:a4:36:53:a9:2c:93:70:b8:f3:e6:5d:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Validity
Not Before: Jan 30 13:52:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f12f5372460c428bf9a22896ba0d036632ae08e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:9b:fe:58:f7:80:8e:b9:dd:03:b4:17:cf:06:
fc:de:d7:1d:ec:bb:8a:fc:ee:25:f0:dc:ee:14:50:
45:7c:98:9e:3b:fe:73:07:e8:39:e2:07:8b:54:b3:
ff:bb:54:76:b6:ce:08:8f:0e:7d:27:bc:5b:3d:8f:
11:d5:fc:b0:d5:da:fb:61:6e:8a:e9:02:28:95:48:
cd:f2:83:e6:17:43:93:e4:f5:49:ee:71:de:8d:a6:
eb:be:96:2d:98:a8:72:ac:3b:7c:19:c4:58:46:c7:
ca:08:02:32:ae:ce:0a:9a:4c:37:08:07:68:e4:07:
49:c3:43:e6:26:83:39:89:00:bd:8d:bf:af:fe:86:
41:96:22:84:82:78:bd:5f:3f:31:2c:cc:db:32:e0:
1e:63:fc:b9:2f:ab:d1:c9:4c:cf:d8:dd:aa:06:85:
7e:fd:10:17:14:03:9d:bc:44:a5:93:f9:20:1f:65:
10:24:89:35:9b:e5:bc:0b:cb:fa:c9:56:72:cc:93:
c6:bc:b0:4d:cf:2b:08:b2:fc:dd:ef:f4:4b:a6:2a:
a3:1c:74:26:66:24:d7:75:81:f9:d1:02:7a:c2:b9:
1f:49:a2:25:f7:c9:14:07:93:e1:0f:18:c0:6b:47:
03:40:1c:b5:53:4c:bc:96:eb:3f:8c:fb:c6:44:cc:
c3:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:2F:53:72:46:0C:42:8B:F9:A2:28:96:BA:0D:03:66:32:AE:08:E7
X509v3 Authority Key Identifier:
keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/8S9TckYMQov5oiiWug0DZjKuCOc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.13.190.0/24
Signature Algorithm: sha256WithRSAEncryption
45:09:7d:5a:b8:66:f6:06:f1:48:bf:46:30:86:b5:c7:97:d9:
b9:95:db:f8:05:a0:4c:2a:89:97:da:68:de:04:32:0e:8a:c6:
24:00:e6:db:42:43:ee:08:f2:25:97:ba:81:cf:b3:5a:cb:07:
6d:a0:2a:b7:e4:96:6e:1f:74:dc:d9:0e:48:76:72:c3:ac:4b:
10:b0:1b:9f:72:ca:33:85:db:9a:d6:33:21:1a:95:05:6e:30:
07:cb:3c:fe:cf:a1:c8:80:dc:74:a3:4e:e0:aa:36:8b:61:ba:
a4:a7:24:df:68:31:25:fc:c3:22:4d:1c:8c:4e:a8:f6:ba:e9:
b8:4e:07:22:78:61:99:91:86:8b:34:63:30:19:eb:53:3a:10:
9b:26:88:55:87:9a:77:cf:26:31:d4:6c:b7:9e:2f:e8:e4:80:
4f:1f:75:5a:fb:2c:fc:8d:56:c0:02:78:e2:ce:de:6e:b5:03:
b1:19:b5:d7:89:24:98:0b:ef:38:b0:52:a3:cd:b7:54:57:93:
ae:6e:27:05:0f:d7:05:cf:58:cc:c3:07:0a:29:76:ca:5c:9f:
9c:48:84:5d:a3:2a:76:6f:ab:5f:11:d8:77:21:00:22:08:71:
0d:49:1c:64:2c:35:48:1e:95:38:5a:b1:57:10:ac:61:5f:99:
cb:f7:ff:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 03:34:27 2025 by rpki-client