Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/c3a85d-9d0b-4562-9238-46ee0cd7fcba/1/kw0uZTx7n5NT55NNgp7YJmoV9Go.roa
File: kw0uZTx7n5NT55NNgp7YJmoV9Go.roa (raw, json)
Hash identifier: 8XlRvDMZFDhRr5qjjN+VGMeejBbNLMwpbYD6/C4LFwY=
Subject key identifier: 93:0D:2E:65:3C:7B:9F:93:53:E7:93:4D:82:9E:D8:26:6A:15:F4:6A
Certificate issuer: /CN=4eca105ce4af6c21cd429e992d06ea7d06d8a56d
Certificate serial: 019425217251F26EA8C2CA81D084BB61C0EA
Authority key identifier: 4E:CA:10:5C:E4:AF:6C:21:CD:42:9E:99:2D:06:EA:7D:06:D8:A5:6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TsoQXOSvbCHNQp6ZLQbqfQbYpW0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/c3a85d-9d0b-4562-9238-46ee0cd7fcba/1/kw0uZTx7n5NT55NNgp7YJmoV9Go.roa
Signing time: Thu 02 Jan 2025 03:48:56 +0000
ROA not before: Thu 02 Jan 2025 03:48:56 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 47169
IP address blocks: 45.10.92.0/23 maxlen: 23
185.143.200.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:72:51:f2:6e:a8:c2:ca:81:d0:84:bb:61:c0:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4eca105ce4af6c21cd429e992d06ea7d06d8a56d
Validity
Not Before: Jan 2 03:48:56 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=930d2e653c7b9f9353e7934d829ed8266a15f46a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:ae:7e:cd:1e:80:93:42:b0:04:97:ec:bd:85:
41:86:99:cd:13:e3:c1:d9:59:0e:e2:8d:48:ee:19:
20:9e:e7:d4:bf:5f:da:66:a8:a1:44:8f:5f:3d:0d:
db:ce:6f:2f:ec:02:5b:7a:80:e5:a5:fb:54:78:fe:
bf:a0:77:93:ac:5b:43:d6:d2:b2:b2:28:ff:1c:ee:
00:b2:f5:e7:3a:28:44:ff:9b:f2:02:6e:8f:b7:f8:
a1:2d:f1:e7:f3:0f:03:d2:1f:fd:90:57:76:95:ee:
f6:60:89:d2:b1:a0:73:c9:ef:8a:77:8c:ea:05:0a:
68:50:42:fa:89:c5:82:87:fb:a7:df:de:77:00:24:
2a:4c:ae:79:61:e3:e8:5a:bd:ed:45:33:3b:71:07:
e7:88:13:b2:74:b5:75:cb:ee:0e:53:96:e9:f0:f7:
21:58:09:af:dc:1b:6e:ba:1a:a1:9e:1d:0f:9d:45:
3e:8b:ac:06:d1:ad:61:ca:51:e7:38:44:e5:0c:60:
d7:d2:f2:9e:4d:ce:39:0c:3a:c4:5b:88:6c:6a:fa:
e6:39:73:59:f5:ff:4c:10:6b:98:20:9d:77:84:68:
3a:cb:5a:6b:de:95:2d:42:49:e1:f9:a2:c8:da:78:
10:3e:a4:2b:e9:1e:fb:6f:68:63:ce:a8:1f:11:09:
51:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:0D:2E:65:3C:7B:9F:93:53:E7:93:4D:82:9E:D8:26:6A:15:F4:6A
X509v3 Authority Key Identifier:
keyid:4E:CA:10:5C:E4:AF:6C:21:CD:42:9E:99:2D:06:EA:7D:06:D8:A5:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TsoQXOSvbCHNQp6ZLQbqfQbYpW0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/c3a85d-9d0b-4562-9238-46ee0cd7fcba/1/kw0uZTx7n5NT55NNgp7YJmoV9Go.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/c3a85d-9d0b-4562-9238-46ee0cd7fcba/1/TsoQXOSvbCHNQp6ZLQbqfQbYpW0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.10.92.0/23
185.143.200.0/23
Signature Algorithm: sha256WithRSAEncryption
bc:df:f8:c1:cb:32:3d:f0:07:d7:8f:e0:c7:51:b9:f4:58:ca:
a0:8a:b4:9a:75:2c:29:f2:e1:53:f1:cd:5e:6c:0c:8d:cd:12:
4b:87:f9:38:4d:19:fd:1e:8c:ef:97:28:12:b7:9f:ac:77:8a:
63:db:52:c3:4c:4a:7b:fe:9b:a8:cf:f5:10:cc:4a:81:e1:eb:
3f:e9:74:ef:1e:70:42:d2:68:d4:92:06:58:46:c3:56:35:8e:
94:3b:9f:de:14:5c:b6:52:63:ed:08:ed:71:0b:ce:af:f3:34:
34:56:d7:6d:74:69:62:e0:63:78:78:41:40:70:99:60:a5:5b:
87:be:2e:f1:57:6b:d4:37:c0:a1:d6:62:b1:b6:31:da:66:c4:
4e:ed:fd:f4:4a:92:2c:1a:29:8e:35:5e:ee:77:a6:cd:6a:75:
cf:24:8d:41:19:d5:bb:12:4a:6a:f4:d3:0a:af:5c:c8:9c:38:
4a:c7:63:1e:14:25:ec:90:10:6b:7d:48:8c:6c:08:9e:40:cf:
4c:8a:2d:08:f9:d9:a6:ac:b4:16:53:b3:85:58:59:ae:74:61:
0d:c0:d0:c7:2a:f9:ea:83:da:ad:f2:48:f7:4a:cd:00:8b:c5:
69:8b:a7:70:5c:c4:1b:20:3b:a9:be:f2:2d:48:e1:c2:e9:86:
b3:65:83:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 13:18:26 2025 by rpki-client