Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/f3804d-e8ad-4d08-990e-bd3bebcddeb3/1/Gqb6OgiiPyPHWY86Q4S-zwTF1xY.roa
File: Gqb6OgiiPyPHWY86Q4S-zwTF1xY.roa (raw, json)
Hash identifier: Os7YNQWNXg8f2DoDK3e2S/uuUULEf5X8h6dOyySYafw=
Subject key identifier: 1A:A6:FA:3A:08:A2:3F:23:C7:59:8F:3A:43:84:BE:CF:04:C5:D7:16
Certificate issuer: /CN=b68a994e42e60da4f4a5475b15f5e27516c7cf14
Certificate serial: 019421446DF4D14ACEEE3852FF1B02649B92
Authority key identifier: B6:8A:99:4E:42:E6:0D:A4:F4:A5:47:5B:15:F5:E2:75:16:C7:CF:14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/toqZTkLmDaT0pUdbFfXidRbHzxQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/f3804d-e8ad-4d08-990e-bd3bebcddeb3/1/Gqb6OgiiPyPHWY86Q4S-zwTF1xY.roa
Signing time: Wed 01 Jan 2025 09:48:39 +0000
ROA not before: Wed 01 Jan 2025 09:48:39 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 46616
IP address blocks: 45.149.120.0/22 maxlen: 22
45.149.120.0/24 maxlen: 24
45.149.121.0/24 maxlen: 24
45.149.122.0/24 maxlen: 24
45.149.123.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:44:6d:f4:d1:4a:ce:ee:38:52:ff:1b:02:64:9b:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b68a994e42e60da4f4a5475b15f5e27516c7cf14
Validity
Not Before: Jan 1 09:48:39 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1aa6fa3a08a23f23c7598f3a4384becf04c5d716
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:ac:64:74:ca:4d:a3:04:3c:bf:64:79:0d:be:
2c:9c:f7:26:6d:cb:59:34:b4:1f:19:32:47:63:bc:
c9:20:c9:d4:ee:5a:5b:b5:29:bc:7a:75:91:21:11:
30:0b:78:1c:05:c1:8a:46:11:d2:62:20:db:07:8e:
70:80:45:62:59:ee:7b:de:a2:08:55:aa:2f:44:9a:
f1:d8:65:46:16:09:02:33:20:ab:33:19:67:55:7f:
00:b9:a8:ba:e5:de:ae:09:25:ef:bc:97:9d:cb:27:
d1:d4:dc:25:4b:e7:2a:9f:bd:a1:7d:c3:81:92:b9:
cc:09:4f:68:6e:59:59:c0:f0:8a:f4:fe:25:01:bd:
5f:24:87:af:72:a0:30:e6:9b:69:7b:a3:6e:10:17:
76:36:48:0b:01:ca:fa:98:44:03:d6:59:fb:44:b1:
e2:52:97:b6:14:22:93:bb:e1:52:22:d0:99:a5:f2:
c2:71:3f:34:67:e9:8e:23:d7:10:c0:fe:06:6b:1c:
1e:cc:84:03:30:aa:69:f4:de:89:52:4b:83:08:c2:
da:f3:8a:ef:fa:25:5d:80:9b:a8:2c:6a:1d:2c:b2:
fc:78:78:91:25:71:84:ea:7d:04:d8:75:ca:0c:5c:
b0:d1:8c:a6:77:9f:dc:b5:5a:0f:6d:cd:88:f8:b4:
28:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:A6:FA:3A:08:A2:3F:23:C7:59:8F:3A:43:84:BE:CF:04:C5:D7:16
X509v3 Authority Key Identifier:
keyid:B6:8A:99:4E:42:E6:0D:A4:F4:A5:47:5B:15:F5:E2:75:16:C7:CF:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/toqZTkLmDaT0pUdbFfXidRbHzxQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/f3804d-e8ad-4d08-990e-bd3bebcddeb3/1/Gqb6OgiiPyPHWY86Q4S-zwTF1xY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/f3804d-e8ad-4d08-990e-bd3bebcddeb3/1/toqZTkLmDaT0pUdbFfXidRbHzxQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.149.120.0/22
Signature Algorithm: sha256WithRSAEncryption
4d:8d:f1:82:f5:cd:30:39:f7:72:d6:af:45:0b:81:fb:22:ae:
4c:66:75:5b:74:8d:6c:8e:db:71:ac:c3:eb:8a:b7:bd:90:cf:
50:d1:a5:35:38:69:1e:db:33:06:41:7f:51:84:c3:72:33:45:
f1:4c:6f:ec:02:d8:a8:67:d8:ac:6b:a3:8f:9a:f1:95:df:87:
4b:ca:6d:dd:6a:08:93:7e:02:06:5d:34:55:d0:65:6f:c0:1a:
27:a0:c4:b2:07:45:81:04:23:87:78:0e:e1:9d:b6:25:81:fa:
23:63:d6:a5:06:61:c0:8a:b0:b3:62:a9:b0:a1:92:1f:10:23:
cd:00:33:9d:11:81:1e:ba:36:8a:a6:60:d2:1f:1e:7f:fb:70:
99:1e:46:73:28:3f:6f:98:58:a3:f9:4c:d1:f8:be:2f:9c:b9:
b8:96:8f:53:a5:82:c8:04:66:82:a7:ca:56:d9:de:3c:ed:70:
98:90:41:d1:d5:e2:01:85:10:58:09:aa:9f:5d:bf:b0:e4:86:
37:bb:c2:1c:fc:dd:0d:16:92:09:7c:e9:62:a1:fe:7e:9d:4e:
97:15:20:b4:f1:68:9d:12:c6:3c:6c:72:75:0b:7c:9c:18:5f:
8e:83:cb:d5:63:4d:5e:a7:21:52:d3:2b:87:57:84:0d:be:f6:
b5:ab:fc:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 03:32:03 2025 by rpki-client