Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/3ebb46-b9dd-4695-815c-46ee578a0bfe/1/YDOdld9RmYz2PRyjYNM1d4ds5kc.roa
File: YDOdld9RmYz2PRyjYNM1d4ds5kc.roa (raw, json)
Hash identifier: qlkhj4pixGAPKJWcUmScKUZDdgHUh6fpodHtYyriwRM=
Subject key identifier: 60:33:9D:95:DF:51:99:8C:F6:3D:1C:A3:60:D3:35:77:87:6C:E6:47
Certificate issuer: /CN=c2c12b527a5d1f8b8bcf230eb611f52f11d52bbf
Certificate serial: 0194221FA35C5A557405EA50B9083A2AE738
Authority key identifier: C2:C1:2B:52:7A:5D:1F:8B:8B:CF:23:0E:B6:11:F5:2F:11:D5:2B:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wsErUnpdH4uLzyMOthH1LxHVK78.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/3ebb46-b9dd-4695-815c-46ee578a0bfe/1/YDOdld9RmYz2PRyjYNM1d4ds5kc.roa
Signing time: Wed 01 Jan 2025 13:48:06 +0000
ROA not before: Wed 01 Jan 2025 13:48:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208046
IP address blocks: 45.129.13.0/24 maxlen: 24
45.148.11.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:a3:5c:5a:55:74:05:ea:50:b9:08:3a:2a:e7:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2c12b527a5d1f8b8bcf230eb611f52f11d52bbf
Validity
Not Before: Jan 1 13:48:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=60339d95df51998cf63d1ca360d33577876ce647
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:87:4e:b4:6d:b3:1d:9a:f6:bb:c9:6e:13:1a:
cf:5a:0a:3f:eb:47:c8:c6:dc:dd:f6:f5:b8:d1:fa:
d8:a7:5d:7d:be:f6:fb:aa:0b:58:f0:02:6b:ba:7b:
0c:ff:49:6d:f5:01:53:e9:cf:8e:c3:aa:a3:0d:51:
59:43:ac:e9:34:49:11:60:2d:3b:ac:32:b8:b9:0c:
b1:3c:89:e0:d4:28:61:6b:8f:a1:3a:f1:a2:1c:70:
f0:a1:7b:ca:7b:ef:bd:39:1c:5c:d8:f0:89:97:e5:
af:50:ed:72:22:4e:1e:9d:16:9b:d1:6a:89:d3:66:
69:fd:e4:67:7a:71:de:3d:ea:d8:9e:32:ac:f7:f5:
6b:2f:fd:3f:1c:89:a9:62:df:8f:73:00:f6:b2:63:
8a:d0:8b:89:68:f1:a4:9b:99:d7:ba:6c:72:7c:f1:
3e:40:db:d6:34:b4:5f:04:30:2b:57:bb:98:8c:17:
eb:ce:f3:06:96:93:43:b8:76:9a:5f:cd:a7:75:cd:
b7:01:f2:d4:f1:68:b2:20:d3:e0:32:d6:cd:2c:ef:
6a:e5:a3:7e:28:e5:36:95:e2:bf:b4:79:50:88:9d:
a9:8b:66:b5:93:75:de:d1:eb:2b:df:75:a1:90:6f:
08:36:52:d8:14:7d:05:54:48:59:92:ec:f6:0a:d4:
d3:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:33:9D:95:DF:51:99:8C:F6:3D:1C:A3:60:D3:35:77:87:6C:E6:47
X509v3 Authority Key Identifier:
keyid:C2:C1:2B:52:7A:5D:1F:8B:8B:CF:23:0E:B6:11:F5:2F:11:D5:2B:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wsErUnpdH4uLzyMOthH1LxHVK78.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/3ebb46-b9dd-4695-815c-46ee578a0bfe/1/YDOdld9RmYz2PRyjYNM1d4ds5kc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/3ebb46-b9dd-4695-815c-46ee578a0bfe/1/wsErUnpdH4uLzyMOthH1LxHVK78.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.129.13.0/24
45.148.11.0/24
Signature Algorithm: sha256WithRSAEncryption
b9:29:c8:e7:0d:06:82:03:da:0c:a8:ad:51:77:25:d4:68:62:
00:e7:af:f4:e7:d3:58:42:88:8a:12:59:a5:77:16:9b:fc:4f:
e8:78:c6:ea:11:b6:c6:89:5a:ed:01:31:86:6b:d9:29:89:fe:
48:59:c2:cb:2c:d3:05:f0:b6:64:95:58:d7:a9:a9:a2:3b:11:
82:a4:0b:c7:63:4b:03:06:ab:89:de:89:cc:9b:60:ed:42:a6:
70:f5:a7:fa:c1:6a:27:55:68:1c:b0:49:9f:a6:24:a5:0e:64:
ed:6e:bc:3d:aa:6d:1c:6a:a9:30:7c:9e:8a:c4:9a:76:d5:33:
d0:29:cf:17:27:e9:7b:8a:2d:d5:00:5e:12:3e:d7:99:c8:82:
2f:5b:53:63:2b:e2:89:f6:13:b1:5a:b6:51:43:f7:1c:27:84:
cb:d5:30:9b:98:58:7b:12:57:c9:a6:ac:0e:4e:b9:6a:2c:2e:
a3:1d:7e:60:ad:b2:15:7c:83:29:da:84:22:d5:20:cc:4d:43:
03:8c:c4:7f:e9:79:f7:a9:51:13:ad:89:2c:21:aa:82:92:f7:
07:f3:f9:81:b4:a9:65:a2:b5:49:2b:f6:51:20:fc:2c:39:f1:
7d:84:04:b3:b8:ee:11:95:98:3d:8c:f4:6a:f6:cb:6f:59:2a:
1b:69:c5:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:37:47 2025 by rpki-client