Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/340c73-79ee-4926-8e4f-607d4f37f59f/1/v0GJ_2NDj5eycnty9lY3mcZ_KOU.roa
File: v0GJ_2NDj5eycnty9lY3mcZ_KOU.roa (raw, json)
Hash identifier: XksUQ3n+xH+litZ2Pe+ri54/+FFFzj7pI7Fd3J5Plao=
Subject key identifier: BF:41:89:FF:63:43:8F:97:B2:72:7B:72:F6:56:37:99:C6:7F:28:E5
Certificate issuer: /CN=c68c65e699b576ab113a79be8828948f1e6cc260
Certificate serial: 0193923AD505705DC5707003FB3497C53BC8
Authority key identifier: C6:8C:65:E6:99:B5:76:AB:11:3A:79:BE:88:28:94:8F:1E:6C:C2:60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xoxl5pm1dqsROnm-iCiUjx5swmA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/340c73-79ee-4926-8e4f-607d4f37f59f/1/v0GJ_2NDj5eycnty9lY3mcZ_KOU.roa
Signing time: Wed 04 Dec 2024 15:12:29 +0000
ROA not before: Wed 04 Dec 2024 15:12:29 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 396356
IP address blocks: 45.140.208.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:92:3a:d5:05:70:5d:c5:70:70:03:fb:34:97:c5:3b:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c68c65e699b576ab113a79be8828948f1e6cc260
Validity
Not Before: Dec 4 15:12:29 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bf4189ff63438f97b2727b72f6563799c67f28e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:a2:77:35:6a:1e:00:a3:43:69:08:05:a1:14:
01:6f:dd:b2:d0:0b:09:47:30:a3:06:b8:c5:36:0a:
d9:86:5b:65:2f:da:01:fc:69:8c:07:ba:59:7c:9f:
f4:4b:87:ae:84:fa:a9:64:5a:f8:f7:74:25:a2:35:
4e:b2:3a:e1:6e:b0:96:da:3e:20:70:ef:f1:4e:09:
fc:fe:d6:40:b2:6e:74:96:52:66:54:09:f1:29:c7:
93:f9:0c:ea:0a:53:09:32:4c:8d:73:9f:0b:bb:be:
7c:fe:b1:a9:82:87:ca:9d:9c:e4:2f:94:98:67:9a:
29:c7:0a:25:4c:9a:0d:53:3b:ce:d5:31:f7:72:11:
ed:10:ef:73:24:3a:a6:36:aa:48:74:85:b2:c2:e7:
b4:d0:dd:46:07:2c:70:24:48:cb:eb:b3:82:aa:f0:
40:f8:89:6f:85:72:fd:1e:1d:66:c0:11:cd:79:bd:
86:31:1b:8b:1d:90:df:7c:81:6f:6a:df:59:6b:b5:
d2:de:9e:f0:65:aa:bd:68:d9:8c:5d:f2:f6:66:dc:
ef:87:d5:e3:72:6e:49:71:b6:7f:48:90:f1:32:de:
21:b1:e3:84:d6:6c:71:8e:ec:2a:a2:c0:9c:6f:8c:
bf:3c:f8:7d:39:3f:96:45:37:9d:7d:d4:5d:69:3d:
ef:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:41:89:FF:63:43:8F:97:B2:72:7B:72:F6:56:37:99:C6:7F:28:E5
X509v3 Authority Key Identifier:
keyid:C6:8C:65:E6:99:B5:76:AB:11:3A:79:BE:88:28:94:8F:1E:6C:C2:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xoxl5pm1dqsROnm-iCiUjx5swmA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/340c73-79ee-4926-8e4f-607d4f37f59f/1/v0GJ_2NDj5eycnty9lY3mcZ_KOU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/340c73-79ee-4926-8e4f-607d4f37f59f/1/xoxl5pm1dqsROnm-iCiUjx5swmA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.140.208.0/24
Signature Algorithm: sha256WithRSAEncryption
65:48:51:c7:31:e8:03:a9:0c:44:fd:c9:6f:13:8f:6e:92:0c:
8f:1c:15:84:a4:3a:8a:9b:5b:59:1b:9c:d8:89:7b:d7:94:4f:
78:69:ad:5e:5f:73:33:0d:04:c7:66:d5:ee:94:4f:d4:fd:0b:
11:9e:05:6b:78:90:b6:28:d5:37:4c:43:14:fe:bb:55:17:c0:
16:76:9e:3c:1c:a7:6a:74:b6:c4:13:2c:e5:b4:d4:9b:12:3e:
be:b2:d4:c2:51:e8:0f:65:b8:8c:a1:79:a3:57:b2:3c:ad:dd:
37:29:59:af:5f:cd:ba:b8:56:28:b4:7f:7c:f6:c0:dc:77:97:
bd:a8:ab:43:f4:ed:f0:ce:62:a1:82:b0:cb:68:3f:9b:a5:71:
9a:53:44:f7:be:1e:48:10:3e:45:c3:1e:aa:de:4c:22:4d:af:
d6:35:fd:2e:29:14:20:30:78:5e:82:c6:83:5f:6a:4f:d6:8f:
be:b9:18:06:3e:d1:92:7f:80:89:d3:9e:85:be:f2:bd:a1:2f:
42:3f:75:de:93:70:a5:8b:00:27:92:1b:db:70:12:6d:e6:15:
0f:17:5c:84:00:0c:24:5a:d1:e2:5e:64:ea:59:f1:a8:0b:da:
5b:1a:8e:ca:69:2e:9b:b2:a4:bb:01:87:27:38:12:ca:c8:a6:
35:91:1a:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 11:03:41 2025 by rpki-client