Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/ogHznGA-eK6m-GhL59WN55jStYs.roa
File: ogHznGA-eK6m-GhL59WN55jStYs.roa (raw, json)
Hash identifier: xVfxQQHhBk6FywZTdvIcLUcQdfsav8AIN3jjkJ5EygI=
Subject key identifier: A2:01:F3:9C:60:3E:78:AE:A6:F8:68:4B:E7:D5:8D:E7:98:D2:B5:8B
Certificate issuer: /CN=002647c801fb58fcfaac135bb48f5e61fea7e566
Certificate serial: 0194258F1524FCBCBF860D123FD0014A6052
Authority key identifier: 00:26:47:C8:01:FB:58:FC:FA:AC:13:5B:B4:8F:5E:61:FE:A7:E5:66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ACZHyAH7WPz6rBNbtI9eYf6n5WY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/ogHznGA-eK6m-GhL59WN55jStYs.roa
Signing time: Thu 02 Jan 2025 05:48:41 +0000
ROA not before: Thu 02 Jan 2025 05:48:41 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 401190
IP address blocks: 45.129.240.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:15:24:fc:bc:bf:86:0d:12:3f:d0:01:4a:60:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=002647c801fb58fcfaac135bb48f5e61fea7e566
Validity
Not Before: Jan 2 05:48:41 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a201f39c603e78aea6f8684be7d58de798d2b58b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:6d:e2:e3:f9:7b:41:f6:08:47:73:a9:11:f3:
f0:9b:02:37:10:82:79:0b:99:86:09:68:73:c5:13:
a2:c7:83:8d:b5:38:3d:98:4b:33:c5:c2:09:a4:ca:
1c:c3:f1:05:fc:1e:4e:7f:ef:03:99:e4:44:5b:58:
9e:49:b5:9d:9f:00:56:08:2a:0b:66:cf:ba:18:aa:
ca:59:45:10:05:5f:bc:ad:9c:c5:da:9d:37:b4:2b:
b3:a8:64:74:fe:65:a1:8e:cd:5c:ee:cd:fb:8e:8d:
b1:c5:86:74:4b:1c:ff:c1:ae:47:f7:98:97:77:62:
43:8d:f9:a5:d0:da:3a:f9:99:fc:6a:21:54:1a:69:
d9:d8:73:0c:6a:16:0a:16:10:11:1b:1f:ab:3a:e1:
99:1e:94:37:4b:be:2e:a9:a2:c2:ca:0a:6d:88:82:
5e:22:71:fb:b0:66:05:aa:8e:80:70:37:8e:6c:62:
3e:08:37:5b:d8:16:18:6e:c6:8f:2e:d7:fa:b6:39:
01:d1:85:4a:3d:cc:82:57:49:94:a3:1c:64:80:bf:
f9:c2:9c:13:ba:5c:2e:e9:6f:ed:88:f2:aa:32:67:
05:6c:fc:e7:2d:c9:42:ed:ba:8a:80:28:3e:ba:7c:
82:dd:14:e9:0b:98:89:32:84:96:9b:fa:df:ec:fc:
9e:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:01:F3:9C:60:3E:78:AE:A6:F8:68:4B:E7:D5:8D:E7:98:D2:B5:8B
X509v3 Authority Key Identifier:
keyid:00:26:47:C8:01:FB:58:FC:FA:AC:13:5B:B4:8F:5E:61:FE:A7:E5:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ACZHyAH7WPz6rBNbtI9eYf6n5WY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/ogHznGA-eK6m-GhL59WN55jStYs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/ACZHyAH7WPz6rBNbtI9eYf6n5WY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.129.240.0/23
Signature Algorithm: sha256WithRSAEncryption
57:a8:9f:f7:09:c6:1e:9f:6b:b5:f5:c8:09:5c:88:cb:33:0c:
ac:fe:b1:e6:15:a4:a1:1e:48:d0:5f:5c:c4:57:d8:21:af:94:
7e:84:00:a0:a1:aa:a1:15:41:cc:6e:69:f9:c9:9d:b4:ca:fe:
32:b6:22:7c:4f:25:b3:33:dc:e9:f0:cc:30:c1:c6:d4:23:09:
4c:58:d6:e0:02:8b:b1:13:88:39:dc:f3:03:ef:cf:cc:ba:1a:
af:e4:1e:18:da:fa:38:eb:43:ef:e7:7c:0d:12:ad:22:56:1b:
6e:0f:04:33:ca:11:b4:0f:70:11:5f:82:97:cc:9e:b4:f3:f8:
b9:ee:5f:63:ae:1e:40:89:6c:2f:51:00:9e:a5:11:a6:b1:1e:
9f:ad:67:d3:29:c7:fd:39:c6:c2:ef:0c:83:77:7b:c2:cc:c6:
3c:fc:6d:8d:e7:b9:ea:76:55:9d:a1:84:0c:ec:37:59:1e:d5:
01:da:9a:2c:60:a8:70:26:4d:a7:92:7b:b8:51:dc:bb:47:15:
a8:66:f4:fa:be:1b:fb:df:c9:7e:ae:c5:30:2f:38:cc:17:4d:
0c:b6:ba:89:61:ff:fa:9a:33:ee:dd:c7:b5:25:a4:20:97:93:
fe:34:3f:2f:77:ee:ad:41:08:74:6f:1f:c0:34:13:05:e6:e1:
3c:c3:93:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 22:29:09 2025 by rpki-client