Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/a67996-54f1-4f1e-a760-8e0d5293aac8/1/A2BB-bUfq8rHrVvMAjMXuxgV2NI.roa
File: A2BB-bUfq8rHrVvMAjMXuxgV2NI.roa (raw, json)
Hash identifier: 7XJxitmC1kIRuONMVjJagRLhfwDYAR2U4gOedbbgQtU=
Subject key identifier: 03:60:41:F9:B5:1F:AB:CA:C7:AD:5B:CC:02:33:17:BB:18:15:D8:D2
Certificate issuer: /CN=d2ba2618ab4b6042ee25c4679e0775e4306d71c6
Certificate serial: 018CC801F1AE9BBA3D46761541A5EC73FCDF
Authority key identifier: D2:BA:26:18:AB:4B:60:42:EE:25:C4:67:9E:07:75:E4:30:6D:71:C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0romGKtLYELuJcRnngd15DBtccY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/a67996-54f1-4f1e-a760-8e0d5293aac8/1/A2BB-bUfq8rHrVvMAjMXuxgV2NI.roa
Signing time: Tue 02 Jan 2024 02:30:19 +0000
ROA not before: Tue 02 Jan 2024 02:30:19 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 1239
IP address blocks: 45.145.176.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:f1:ae:9b:ba:3d:46:76:15:41:a5:ec:73:fc:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2ba2618ab4b6042ee25c4679e0775e4306d71c6
Validity
Not Before: Jan 2 02:30:19 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=036041f9b51fabcac7ad5bcc023317bb1815d8d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:0e:07:05:99:f8:a2:e7:37:bd:43:09:76:95:
66:77:9b:28:d0:12:48:60:de:cf:78:c0:e2:cb:b2:
69:30:45:99:05:30:2f:23:e2:a3:ee:a9:4d:48:06:
b7:07:65:62:87:22:fe:ae:89:46:ff:a6:45:3d:f5:
12:be:6b:9b:d7:bb:be:7c:a5:4f:86:0c:fd:d0:1e:
46:cc:2e:bc:09:10:74:3b:38:c1:49:0c:a9:0d:ee:
60:bf:af:14:1c:c0:d8:71:4b:62:e4:d2:b3:be:67:
5a:cf:3f:cc:40:c3:6d:10:41:f6:19:56:2e:ee:0f:
4c:61:b7:5b:42:d1:52:df:ba:9e:87:58:10:9a:20:
f8:11:20:77:4d:9f:63:7a:82:a5:2a:a3:e1:88:b1:
69:48:9a:e7:5a:59:c8:32:da:b5:15:5c:80:ff:03:
11:45:b7:61:db:da:14:ff:0f:c9:35:75:84:7c:a0:
b7:a2:7b:f5:5f:5b:f6:10:a4:41:46:4a:18:eb:27:
29:1b:36:c6:2d:2c:6a:df:fd:74:6c:e4:93:d5:de:
bd:e6:ea:31:ce:9a:7a:d7:81:e6:f2:80:e1:38:9b:
f3:ad:47:68:01:c9:73:88:f4:23:be:dc:d0:9f:67:
7c:ad:62:22:c4:fd:93:c4:fb:98:cb:f9:30:27:6c:
00:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:60:41:F9:B5:1F:AB:CA:C7:AD:5B:CC:02:33:17:BB:18:15:D8:D2
X509v3 Authority Key Identifier:
keyid:D2:BA:26:18:AB:4B:60:42:EE:25:C4:67:9E:07:75:E4:30:6D:71:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0romGKtLYELuJcRnngd15DBtccY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/a67996-54f1-4f1e-a760-8e0d5293aac8/1/A2BB-bUfq8rHrVvMAjMXuxgV2NI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/a67996-54f1-4f1e-a760-8e0d5293aac8/1/0romGKtLYELuJcRnngd15DBtccY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.145.176.0/22
Signature Algorithm: sha256WithRSAEncryption
2a:a9:20:d9:33:0a:65:ad:d3:49:6d:68:96:37:a0:8f:b4:45:
64:21:05:e2:29:2d:72:62:d9:c7:43:8b:af:84:11:66:02:e4:
82:52:5c:43:ca:1f:fa:63:74:db:a3:14:9a:79:68:69:be:e3:
60:5e:ca:b5:e1:d7:cb:5f:43:27:66:94:db:ad:1f:30:e8:5e:
bd:d7:a6:35:44:25:d7:1a:81:14:0f:e4:08:d2:a6:2c:a2:52:
f9:df:01:b2:01:ed:48:3b:f4:20:98:fd:db:86:a3:37:4c:e5:
bf:4e:ab:9e:c8:a2:be:4b:6e:82:4a:bd:18:f0:54:fa:82:9e:
ca:06:97:6c:b5:66:95:76:08:ee:c1:fa:e7:3f:26:72:6f:e1:
fb:26:41:ff:25:0b:c9:14:04:2b:20:47:12:c8:1a:3f:98:89:
2b:7a:e2:35:63:51:4d:b1:27:c6:64:80:10:f9:ff:51:54:3e:
46:79:0f:0a:a2:1f:86:9a:1e:a4:57:9f:5c:3e:cd:40:39:75:
f2:80:cd:9c:0a:1f:87:a5:58:8d:0c:6b:2a:60:82:77:8e:bf:
2b:bb:e4:73:e5:2e:94:35:44:d2:e2:8c:3f:19:e0:3c:d1:5e:
7f:0c:44:95:d2:55:e8:ff:7d:35:2c:5d:2c:bb:60:67:e9:2d:
87:4b:e5:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 14:05:28 2025 by rpki-client