Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/9a0981-0ad8-48a5-bfec-8cc9833611e6/1/9tPvRIgWOFQGF5ALiDiBtpjalf0.roa
File: 9tPvRIgWOFQGF5ALiDiBtpjalf0.roa (raw, json)
Hash identifier: CNi9LKlhqfclz9Oir048bs7o3/W9+fUSyftDkxngReE=
Subject key identifier: F6:D3:EF:44:88:16:38:54:06:17:90:0B:88:38:81:B6:98:DA:95:FD
Certificate issuer: /CN=91f5fcedbdb84dd52fc6770d7ccfd3fc6684fa41
Certificate serial: 0194252218098BCD95F7C50DE011A8BEFCB8
Authority key identifier: 91:F5:FC:ED:BD:B8:4D:D5:2F:C6:77:0D:7C:CF:D3:FC:66:84:FA:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kfX87b24TdUvxncNfM_T_GaE-kE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/9a0981-0ad8-48a5-bfec-8cc9833611e6/1/9tPvRIgWOFQGF5ALiDiBtpjalf0.roa
Signing time: Thu 02 Jan 2025 03:49:38 +0000
ROA not before: Thu 02 Jan 2025 03:49:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 203217
IP address blocks: 45.82.60.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:22:18:09:8b:cd:95:f7:c5:0d:e0:11:a8:be:fc:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91f5fcedbdb84dd52fc6770d7ccfd3fc6684fa41
Validity
Not Before: Jan 2 03:49:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f6d3ef44881638540617900b883881b698da95fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:79:b0:15:ce:b6:74:fa:9b:7e:cc:a1:7f:6e:
91:a8:12:a6:f5:a4:4d:01:d0:58:f0:73:c9:04:ce:
51:fd:99:95:d9:4e:ac:74:0e:8d:02:97:1e:f1:98:
63:ca:81:e5:c1:75:c3:b5:a1:79:1a:4a:ea:2e:6e:
39:cb:5a:c4:5c:38:91:b5:64:ae:cf:0c:b4:8a:44:
47:40:ea:70:00:7b:56:1a:b1:b4:92:56:f8:05:86:
ef:8e:c8:ba:c7:ac:a6:84:79:19:f0:55:9c:d8:f9:
0b:33:fe:cb:1c:36:59:28:f4:96:bb:da:3e:f1:b7:
15:1e:a1:7a:11:b1:ab:e2:ea:21:5f:e6:79:e7:29:
01:c7:89:e2:88:58:bb:b2:9b:9d:55:f6:af:f7:1b:
ff:e0:71:a5:5c:d3:a2:9c:bc:d4:e4:c7:4b:47:45:
e2:bd:9d:3f:6d:14:da:fa:60:18:2e:e4:93:50:28:
2a:31:7f:61:12:70:86:f9:6b:3e:4d:f1:33:de:ca:
ec:df:e5:94:5a:84:6f:03:3c:3c:a8:03:3a:40:08:
ba:db:e3:08:d5:a5:40:93:d4:e6:72:68:44:b6:3d:
93:60:96:f1:81:b6:b9:d8:a9:c4:41:ea:be:48:38:
63:f6:f8:c3:36:39:9e:ad:9f:1c:19:0d:a1:90:43:
f2:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:D3:EF:44:88:16:38:54:06:17:90:0B:88:38:81:B6:98:DA:95:FD
X509v3 Authority Key Identifier:
keyid:91:F5:FC:ED:BD:B8:4D:D5:2F:C6:77:0D:7C:CF:D3:FC:66:84:FA:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kfX87b24TdUvxncNfM_T_GaE-kE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/9a0981-0ad8-48a5-bfec-8cc9833611e6/1/9tPvRIgWOFQGF5ALiDiBtpjalf0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/9a0981-0ad8-48a5-bfec-8cc9833611e6/1/kfX87b24TdUvxncNfM_T_GaE-kE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.82.60.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:1d:92:2b:1a:d7:ce:40:6a:c7:d9:30:dd:47:ba:8a:34:f0:
53:38:2d:41:5d:97:6c:f9:dc:35:42:32:8a:30:8d:dc:10:4a:
7d:e4:5a:38:45:2b:c7:25:86:e3:13:ea:d1:fb:d1:39:d0:78:
25:31:a4:f1:45:a7:47:79:78:a0:44:8c:23:1b:52:2b:65:0d:
ad:10:68:e7:26:48:76:f9:9d:86:fc:00:81:f6:6c:11:e4:d9:
33:89:67:fb:f9:21:45:dd:3c:86:22:76:e0:7b:1f:74:0a:95:
49:db:c9:5b:27:c9:a4:2d:a9:94:31:21:7b:59:79:a6:3c:83:
d9:23:74:82:ca:2c:b0:a2:07:2f:36:b9:ec:7e:ec:54:81:b1:
df:28:37:63:0c:47:ed:e5:75:d7:06:b3:46:a5:cb:c1:d5:8b:
38:85:75:13:53:12:2c:67:fc:08:ac:16:2c:a1:16:13:db:e3:
58:93:21:58:88:9f:73:59:f7:cc:72:67:78:ae:5a:8a:ef:df:
13:9b:33:3c:0f:25:9c:48:5d:95:62:6f:0f:29:0a:83:b0:41:
96:f0:6d:7a:8a:99:a3:8d:33:df:20:52:cf:5e:75:6b:b1:f0:
cc:bc:4d:5b:e1:75:cd:07:36:3c:71:2e:06:64:5c:1f:56:8f:
ef:3c:d1:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 05:48:47 2025 by rpki-client