Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/3e3126-3f4f-48e9-abef-5cb11a368d10/1/RE9aFykceNUyqQ5Yh55JiiN859A.roa
File: RE9aFykceNUyqQ5Yh55JiiN859A.roa (raw, json)
Hash identifier: h9rNiKJSEqsRDhT3jZgfTnHK3ITCLzU3oznaGDO3rok=
Subject key identifier: 44:4F:5A:17:29:1C:78:D5:32:A9:0E:58:87:9E:49:8A:23:7C:E7:D0
Certificate issuer: /CN=8ad37a9933b052c2f12ef1b8f14d74f05fddb611
Certificate serial: 0194236A329573027121EDBC2261DBF225B5
Authority key identifier: 8A:D3:7A:99:33:B0:52:C2:F1:2E:F1:B8:F1:4D:74:F0:5F:DD:B6:11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/itN6mTOwUsLxLvG48U108F_dthE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/3e3126-3f4f-48e9-abef-5cb11a368d10/1/RE9aFykceNUyqQ5Yh55JiiN859A.roa
Signing time: Wed 01 Jan 2025 19:49:09 +0000
ROA not before: Wed 01 Jan 2025 19:49:09 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 34939
IP address blocks: 45.90.28.0/23 maxlen: 24
45.90.30.0/23 maxlen: 24
146.19.14.0/24 maxlen: 24
2a07:a8c0::/32 maxlen: 33
2a07:a8c1::/32 maxlen: 33
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:6a:32:95:73:02:71:21:ed:bc:22:61:db:f2:25:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ad37a9933b052c2f12ef1b8f14d74f05fddb611
Validity
Not Before: Jan 1 19:49:09 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=444f5a17291c78d532a90e58879e498a237ce7d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:ad:a0:68:b8:b8:c4:31:b5:c7:df:23:e3:28:
4d:f7:56:23:12:68:80:86:ec:2e:cc:c4:bd:32:0d:
01:c1:da:d7:b9:9c:31:99:b0:56:af:ab:e6:9a:40:
61:b9:cc:31:00:f1:e8:eb:90:3c:88:97:61:d1:29:
bb:31:f2:26:86:73:08:99:dd:9e:e0:d5:7c:e0:6e:
2f:74:48:b1:a9:62:47:95:80:b8:b1:f4:b5:85:17:
81:32:8c:f2:ff:0a:4c:ca:bd:8f:6e:88:11:9d:66:
3c:19:cc:60:4c:cd:fd:33:5d:04:f5:9f:70:c8:2a:
4e:41:aa:f2:0a:ce:82:d8:34:ab:30:0a:83:62:54:
c0:88:bc:cb:c2:0f:b0:b7:db:ae:aa:99:ce:a8:d3:
e9:bd:1a:2e:e8:41:6b:58:32:0f:ea:d4:7d:a0:68:
5b:62:c9:c5:21:66:ab:1c:e3:74:6c:7e:d6:bd:c9:
88:19:9a:c9:d0:4a:a1:28:f4:5f:fe:85:49:40:1e:
64:fd:ea:01:17:3e:62:71:95:db:5e:a1:8a:d1:fa:
6e:99:8b:0f:73:89:2e:63:9e:41:bb:8c:9a:c0:d9:
32:0a:45:b8:82:64:f1:55:fd:40:7e:c6:e2:c1:1a:
92:a7:c8:a0:a7:7d:2e:a2:f6:a9:1a:1f:2f:73:bc:
3c:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:4F:5A:17:29:1C:78:D5:32:A9:0E:58:87:9E:49:8A:23:7C:E7:D0
X509v3 Authority Key Identifier:
keyid:8A:D3:7A:99:33:B0:52:C2:F1:2E:F1:B8:F1:4D:74:F0:5F:DD:B6:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/itN6mTOwUsLxLvG48U108F_dthE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/3e3126-3f4f-48e9-abef-5cb11a368d10/1/RE9aFykceNUyqQ5Yh55JiiN859A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/3e3126-3f4f-48e9-abef-5cb11a368d10/1/itN6mTOwUsLxLvG48U108F_dthE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.90.28.0/22
146.19.14.0/24
IPv6:
2a07:a8c0::/31
Signature Algorithm: sha256WithRSAEncryption
32:e6:d4:15:6a:01:84:24:4a:d5:f6:af:41:e6:cb:ed:1c:fd:
76:31:09:2e:32:d0:1c:83:61:bc:1f:ca:a0:3e:e4:b0:a0:e8:
42:ec:7e:e5:f3:70:7a:a7:32:b1:3d:e0:c1:d9:74:44:94:fc:
70:c7:d0:81:4c:29:c6:b6:97:44:2e:95:58:28:8c:00:15:02:
9e:3e:84:8f:3a:ba:df:cf:a8:9a:ea:7f:c5:d3:cc:3c:e1:37:
ca:a2:30:f4:cc:df:ac:fe:8d:41:1e:11:f2:e3:57:20:23:fc:
c1:b9:5a:e2:3c:ca:0c:1c:83:95:4b:0b:83:fc:24:f4:8f:51:
19:2e:00:9e:1f:a1:12:67:62:1d:a3:27:32:f0:fc:fb:cb:27:
fe:43:dd:5a:38:c4:34:c1:7c:80:68:60:20:2e:db:04:d2:d5:
9a:22:4f:b9:bf:90:06:95:2c:a0:ee:c2:9d:3d:dc:a0:f1:40:
19:81:14:67:fe:ec:54:91:99:46:ca:30:8e:4a:3a:5a:c3:c1:
1a:81:ae:f4:5f:cb:d6:42:42:76:eb:57:21:5c:81:e7:c7:82:
45:7d:15:90:ae:59:f7:57:81:76:bf:d1:3d:5d:b1:fb:73:5d:
29:a9:31:5c:6a:c5:f3:d3:bc:0c:b4:91:4d:c0:de:cf:e0:34:
7d:c9:bf:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:33:07 2025 by rpki-client