Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/cByXM-fUu87shFlXsTHOaib42tw.roa
File: cByXM-fUu87shFlXsTHOaib42tw.roa (raw, json)
Hash identifier: b9JxZgfd0W9BCfcmQHMc+ZmeYxnrwgj8P2yIipgxe+E=
Subject key identifier: 70:1C:97:33:E7:D4:BB:CE:EC:84:59:57:B1:31:CE:6A:26:F8:DA:DC
Certificate issuer: /CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Certificate serial: 019422FC22A67E5B4EEC24DA390E46ED7333
Authority key identifier: 8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/cByXM-fUu87shFlXsTHOaib42tw.roa
Signing time: Wed 01 Jan 2025 17:48:56 +0000
ROA not before: Wed 01 Jan 2025 17:48:56 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209961
IP address blocks: 45.150.44.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fc:22:a6:7e:5b:4e:ec:24:da:39:0e:46:ed:73:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Validity
Not Before: Jan 1 17:48:56 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=701c9733e7d4bbceec845957b131ce6a26f8dadc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:32:54:a5:07:dd:a3:34:a5:d2:33:28:18:b4:
dc:75:73:72:84:f4:5c:31:f1:3e:0c:98:9b:95:d7:
70:21:2b:cf:db:d6:13:59:8d:62:35:c7:f7:d2:0d:
f0:fc:2d:0a:24:fa:b8:c7:5d:73:75:09:95:eb:b5:
bd:6c:69:ed:f5:d3:fd:f2:3b:b5:53:90:72:a0:09:
60:01:32:5f:14:9b:e0:f8:bc:25:30:ef:84:c4:da:
b8:00:1b:41:68:92:7f:f3:89:c4:4a:88:71:9e:2b:
79:7d:f8:7b:e9:25:af:2a:78:f2:bc:25:24:d9:cd:
94:ab:45:3d:61:07:35:08:8f:38:5a:d3:20:1d:6a:
7a:7c:85:12:a6:d8:e9:a1:28:8c:d4:96:af:9c:bb:
9b:6e:21:6b:f4:2b:aa:30:ff:fb:e6:25:1d:82:e6:
20:99:3c:40:30:25:9a:32:c2:c1:0d:d0:2e:7c:47:
e6:9b:e1:7e:a9:d5:42:ae:98:2d:e6:e6:28:7e:1e:
92:31:65:7f:14:a8:27:00:04:a8:fc:92:50:05:4d:
6e:fe:ae:6b:11:d3:cc:ff:f6:ad:6f:c1:78:bd:98:
c1:1b:d8:a9:a0:6b:88:38:1a:a2:b4:79:97:91:50:
a0:2a:56:5a:12:7a:e6:0f:dd:8b:a4:c8:73:c0:9b:
16:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:1C:97:33:E7:D4:BB:CE:EC:84:59:57:B1:31:CE:6A:26:F8:DA:DC
X509v3 Authority Key Identifier:
keyid:8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/cByXM-fUu87shFlXsTHOaib42tw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.150.44.0/22
Signature Algorithm: sha256WithRSAEncryption
20:24:58:5f:64:a6:15:74:52:de:70:18:32:74:fe:db:04:cd:
c5:b0:a1:1d:53:35:7d:8f:95:d1:79:ed:8f:ca:cb:b0:9e:60:
80:23:c9:0b:05:7b:66:ad:18:92:54:e9:dc:2b:e8:ea:e8:68:
81:a3:49:c3:fa:a9:49:80:fc:83:88:a1:9b:96:28:0b:76:ad:
be:e5:ec:00:64:1b:9d:b0:bc:b9:70:3d:81:f2:8f:f4:98:e7:
d3:7a:38:8b:48:1b:a3:87:d1:19:16:2e:67:94:13:1f:c8:62:
a6:d9:33:ea:b0:cf:2f:a0:af:af:dc:db:b1:a3:00:ee:6c:3b:
5f:cf:27:04:07:fd:73:4f:a6:2e:8a:b4:32:4b:31:06:e7:21:
e7:45:ad:7a:3f:a4:22:24:b1:c4:2f:d9:a3:6f:b2:02:ef:1d:
78:34:8b:94:eb:a3:8d:11:bf:39:dc:ec:20:d3:bc:c7:03:bd:
c7:12:70:2a:48:51:ea:b0:85:c8:06:12:36:1a:be:d2:65:f9:
5b:22:e2:eb:1d:f1:f0:96:af:06:46:ad:ea:18:c4:5e:4b:cc:
5b:60:03:5d:3a:25:ea:2d:fc:03:5b:6f:f4:c5:53:f0:fd:23:
f5:58:c9:7d:85:f3:81:9b:e2:3a:9e:dd:46:98:87:92:6f:b8:
34:24:ee:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:21:32 2025 by rpki-client