Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/340c73-79ee-4926-8e4f-607d4f37f59f/1/ZtiS9Pto6VHvMUHwUiqh0R5TY5s.roa
File: ZtiS9Pto6VHvMUHwUiqh0R5TY5s.roa (raw, json)
Hash identifier: LS84CtdfUD65sIZiV3Ayic6gxW4afu2zea6JfhhyLEk=
Subject key identifier: 66:D8:92:F4:FB:68:E9:51:EF:31:41:F0:52:2A:A1:D1:1E:53:63:9B
Certificate issuer: /CN=c68c65e699b576ab113a79be8828948f1e6cc260
Certificate serial: 0194266C2A35CD49A560236A04D4BBF9CC7A
Authority key identifier: C6:8C:65:E6:99:B5:76:AB:11:3A:79:BE:88:28:94:8F:1E:6C:C2:60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xoxl5pm1dqsROnm-iCiUjx5swmA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/340c73-79ee-4926-8e4f-607d4f37f59f/1/ZtiS9Pto6VHvMUHwUiqh0R5TY5s.roa
Signing time: Thu 02 Jan 2025 09:50:10 +0000
ROA not before: Thu 02 Jan 2025 09:50:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 61317
IP address blocks: 45.140.209.0/24 maxlen: 24
45.140.210.0/24 maxlen: 24
45.140.211.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6c:2a:35:cd:49:a5:60:23:6a:04:d4:bb:f9:cc:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c68c65e699b576ab113a79be8828948f1e6cc260
Validity
Not Before: Jan 2 09:50:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=66d892f4fb68e951ef3141f0522aa1d11e53639b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:15:13:9e:9e:89:15:f4:45:48:1d:92:f5:c1:
3c:c8:8f:56:a8:43:e2:cd:20:62:ad:cb:3b:66:e2:
e6:ef:6f:31:2e:c7:3a:10:21:27:90:a5:6d:a7:7d:
0e:38:50:bc:d4:87:e3:69:e4:39:03:ad:7b:18:c2:
49:4c:32:9e:9b:3d:75:95:b0:4a:83:d6:f7:05:22:
3c:99:4f:58:fc:93:2f:1b:21:94:45:bc:66:b8:6c:
84:d2:74:ef:d0:89:57:74:f4:56:29:5b:f9:19:63:
30:e4:13:9f:2c:52:ab:70:d9:55:78:dc:1b:fa:6c:
54:d7:cc:b9:be:c5:db:78:ac:18:30:aa:86:d1:0b:
78:e5:38:85:c3:be:d7:0b:23:c1:93:46:1d:7e:39:
58:21:f8:82:97:d4:71:74:cb:e4:f0:06:8f:45:08:
6d:9d:02:af:71:11:21:6c:e7:80:2b:0d:ab:93:db:
86:ba:55:6f:08:bc:c5:bc:da:21:6d:78:44:04:35:
76:5c:a6:3e:13:d3:68:ab:34:6e:72:97:ab:72:9e:
b4:03:81:71:f7:45:9c:84:f3:28:d5:7b:4f:b4:29:
3d:cb:63:52:6e:ab:98:82:71:17:d4:ba:7c:57:38:
d5:c0:06:6c:61:2e:c7:3f:9a:94:50:c7:f6:f5:ff:
60:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:D8:92:F4:FB:68:E9:51:EF:31:41:F0:52:2A:A1:D1:1E:53:63:9B
X509v3 Authority Key Identifier:
keyid:C6:8C:65:E6:99:B5:76:AB:11:3A:79:BE:88:28:94:8F:1E:6C:C2:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xoxl5pm1dqsROnm-iCiUjx5swmA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/340c73-79ee-4926-8e4f-607d4f37f59f/1/ZtiS9Pto6VHvMUHwUiqh0R5TY5s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/340c73-79ee-4926-8e4f-607d4f37f59f/1/xoxl5pm1dqsROnm-iCiUjx5swmA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.140.209.0-45.140.211.255
Signature Algorithm: sha256WithRSAEncryption
bd:b9:a0:f3:17:b5:3b:38:4a:8a:9c:de:79:d6:76:e0:d0:ab:
0f:6d:5b:58:e1:16:60:1b:63:57:de:c1:99:e0:f2:98:ed:b4:
ec:ed:f6:16:6a:3c:39:f6:0c:03:7d:50:a6:07:66:d9:13:17:
76:8d:39:14:95:fc:52:e8:09:2c:ad:ca:bd:a1:36:e3:fc:ec:
5e:4c:bb:35:16:b1:df:40:3d:36:e2:d0:c7:78:47:07:18:33:
57:ca:82:7c:f8:a7:de:bc:31:ab:0a:f9:e5:db:cd:35:82:2e:
cb:77:7e:99:6b:da:20:30:82:f2:a3:db:57:f1:5b:5b:9e:16:
b7:18:46:48:65:e6:e2:18:10:27:78:b3:9e:c2:3c:50:ee:ff:
a8:ee:11:7a:09:01:4b:4a:1a:0a:36:94:1e:a0:47:56:3c:eb:
00:a4:90:22:b5:6b:dd:83:5e:7f:41:40:8c:9d:76:82:b8:ee:
23:cd:c8:17:5b:4d:52:4a:3a:59:bd:86:9e:e8:1d:b5:ef:9b:
83:ac:f0:8a:13:1f:0b:bd:79:36:59:c1:43:87:09:1f:e8:c9:
08:97:d4:6f:18:98:ad:b7:30:e1:d4:fb:59:14:75:78:1f:f4:
70:c2:9c:7f:56:2d:92:83:5b:74:27:69:86:89:25:12:00:0e:
c8:fe:5e:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 08:59:31 2025 by rpki-client