Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/brMk3gl69Me1_usejlq7n_aFcbs.roa
File: brMk3gl69Me1_usejlq7n_aFcbs.roa (raw, json)
Hash identifier: XIBruDiDrzwuJ2km6f10dEO4egVqiOzQXAOAx/azAoI=
Subject key identifier: 6E:B3:24:DE:09:7A:F4:C7:B5:FE:EB:1E:8E:5A:BB:9F:F6:85:71:BB
Certificate issuer: /CN=002647c801fb58fcfaac135bb48f5e61fea7e566
Certificate serial: 0194258F0EA627270FB4C09B72F3DE6B3B50
Authority key identifier: 00:26:47:C8:01:FB:58:FC:FA:AC:13:5B:B4:8F:5E:61:FE:A7:E5:66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ACZHyAH7WPz6rBNbtI9eYf6n5WY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/brMk3gl69Me1_usejlq7n_aFcbs.roa
Signing time: Thu 02 Jan 2025 05:48:39 +0000
ROA not before: Thu 02 Jan 2025 05:48:39 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48925
IP address blocks: 45.129.243.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:0e:a6:27:27:0f:b4:c0:9b:72:f3:de:6b:3b:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=002647c801fb58fcfaac135bb48f5e61fea7e566
Validity
Not Before: Jan 2 05:48:39 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6eb324de097af4c7b5feeb1e8e5abb9ff68571bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:95:5b:b7:1c:2c:2c:9b:1a:4f:16:a1:0d:28:
40:c1:df:e3:67:f6:03:2c:f9:d5:39:76:fe:75:4f:
e4:ac:fe:bd:f8:3f:71:cb:1e:7a:65:e9:3c:83:8e:
28:7c:8f:b3:a9:4a:a7:57:aa:cc:60:67:2c:2e:ba:
f9:63:d1:e8:8a:ef:c1:d3:fd:43:4b:8d:b1:41:06:
02:85:bf:69:73:5e:d4:ef:c2:d5:c0:e8:20:e0:ac:
df:8b:b0:87:c1:2c:3f:ba:ea:05:3d:e3:4d:c6:90:
49:3a:8e:1c:54:ad:0c:32:1b:b3:da:3e:f0:12:33:
76:84:b4:eb:85:5b:85:9f:42:06:7a:c7:24:b1:3d:
31:21:2f:e5:fd:10:49:5a:fd:72:80:e6:48:6b:10:
0d:ec:ee:74:47:88:b7:7b:87:06:19:9f:a9:20:c5:
fa:25:0a:40:be:6f:05:12:3f:8e:cd:d0:40:29:f6:
04:c7:89:d4:cc:27:17:db:c4:fd:e7:ae:13:6b:0f:
47:90:bf:81:41:64:57:b1:12:06:56:8d:05:5d:30:
56:cf:8d:24:5f:73:a8:de:4c:38:69:60:02:85:bb:
cf:b6:67:ea:5e:9f:09:57:51:97:33:06:76:1d:48:
1e:f9:65:f0:83:8c:49:74:68:bc:66:29:19:79:8c:
d4:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:B3:24:DE:09:7A:F4:C7:B5:FE:EB:1E:8E:5A:BB:9F:F6:85:71:BB
X509v3 Authority Key Identifier:
keyid:00:26:47:C8:01:FB:58:FC:FA:AC:13:5B:B4:8F:5E:61:FE:A7:E5:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ACZHyAH7WPz6rBNbtI9eYf6n5WY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/brMk3gl69Me1_usejlq7n_aFcbs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/ACZHyAH7WPz6rBNbtI9eYf6n5WY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.129.243.0/24
Signature Algorithm: sha256WithRSAEncryption
24:72:6f:3c:ed:3c:d8:c3:82:ac:ee:90:35:c9:59:40:bf:e3:
c0:30:fe:c6:77:cb:4e:36:3a:e6:a7:46:2f:f7:2b:42:c8:a3:
33:2a:d2:be:14:75:ce:2e:08:18:ae:93:0c:c2:78:ad:ca:ef:
25:10:cb:10:09:4f:79:46:a2:57:9e:7a:0c:ed:9a:c9:df:3f:
29:5c:ba:92:32:48:f7:50:c7:68:bc:91:ad:bb:a6:c1:1e:e8:
6b:d5:4c:86:ba:2c:ae:a7:9a:d3:d3:e4:eb:01:b8:3c:eb:f4:
60:d7:da:73:93:81:d8:9c:f8:8d:c8:d7:8d:60:c4:4c:b6:99:
4f:e4:f6:dd:d0:db:5e:0d:a2:d6:f4:52:c6:89:ca:13:3f:44:
f6:79:19:55:11:94:6e:17:2e:af:2e:38:90:a8:33:48:08:b2:
30:fe:39:38:01:c9:fa:65:fb:58:b9:61:61:0e:35:c0:42:2a:
28:0e:b8:33:f4:64:17:e8:82:d2:f6:e7:84:74:0d:32:37:db:
87:b8:a0:a7:08:9c:f9:0f:14:e2:1b:8f:66:8a:f3:04:e4:d1:
78:0c:a7:cc:93:a2:6c:be:6c:52:75:c8:ac:fa:b9:0d:e9:54:
74:de:87:54:1e:39:7f:ed:7d:d2:0c:02:2e:c7:65:14:e5:e1:
b2:f0:e2:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 15:31:35 2025 by rpki-client