Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/5rIeuHWtH8yu4biA9JtwWPp6MuE.roa
File: 5rIeuHWtH8yu4biA9JtwWPp6MuE.roa (raw, json)
Hash identifier: siMvcky3cvMun2YkaQXVSYL1TTM6RnbrDQWn8L9dEp0=
Subject key identifier: E6:B2:1E:B8:75:AD:1F:CC:AE:E1:B8:80:F4:9B:70:58:FA:7A:32:E1
Certificate issuer: /CN=89ac0acbfdb7a274ef36c16f5860ada2a2470697
Certificate serial: 019426D9BEB80C86F04347C24D56A25F7602
Authority key identifier: 89:AC:0A:CB:FD:B7:A2:74:EF:36:C1:6F:58:60:AD:A2:A2:47:06:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iawKy_23onTvNsFvWGCtoqJHBpc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/5rIeuHWtH8yu4biA9JtwWPp6MuE.roa
Signing time: Thu 02 Jan 2025 11:49:51 +0000
ROA not before: Thu 02 Jan 2025 11:49:51 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 19318
IP address blocks: 45.151.99.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:be:b8:0c:86:f0:43:47:c2:4d:56:a2:5f:76:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89ac0acbfdb7a274ef36c16f5860ada2a2470697
Validity
Not Before: Jan 2 11:49:51 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e6b21eb875ad1fccaee1b880f49b7058fa7a32e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:1e:c5:82:bc:66:b9:f9:da:90:1a:45:94:42:
38:85:07:15:ff:ee:f3:06:a9:be:a3:bb:18:f2:60:
52:77:51:a4:ae:18:b3:f3:2b:80:1e:77:92:73:6b:
58:9d:dc:74:c3:0d:45:05:b2:25:4c:1a:9f:3d:06:
59:47:cf:b2:1b:e0:25:46:e5:83:68:5b:9c:6b:8c:
61:67:f7:cf:8b:78:c4:be:cf:8a:72:20:f1:1e:ae:
5c:30:dd:51:77:a0:2a:ab:7a:97:44:5a:73:77:68:
e1:e0:21:8d:6b:4a:59:09:02:08:11:c4:d5:71:86:
84:f4:8c:34:a0:10:73:7b:94:51:34:af:a8:bb:17:
6c:55:75:9f:f4:dc:9e:87:c3:b3:93:d3:45:8b:c0:
f6:bd:18:74:87:ef:c9:bb:85:36:bc:34:22:90:da:
0b:62:9c:18:08:3b:09:fd:4b:e9:70:3e:d4:5d:f8:
b8:cd:f3:32:8e:e7:8b:01:f7:f7:8a:4a:a6:40:09:
45:f3:da:b0:33:57:b6:02:4e:60:b7:d2:ce:14:ba:
05:e3:ca:df:65:d6:cc:1e:c8:ce:89:cb:94:e9:57:
8c:fc:26:63:8a:a9:85:6e:21:6f:f0:9d:5f:62:de:
4e:de:60:1b:e1:ef:65:dc:2f:75:ee:46:e5:51:4e:
49:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:B2:1E:B8:75:AD:1F:CC:AE:E1:B8:80:F4:9B:70:58:FA:7A:32:E1
X509v3 Authority Key Identifier:
keyid:89:AC:0A:CB:FD:B7:A2:74:EF:36:C1:6F:58:60:AD:A2:A2:47:06:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iawKy_23onTvNsFvWGCtoqJHBpc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/5rIeuHWtH8yu4biA9JtwWPp6MuE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/iawKy_23onTvNsFvWGCtoqJHBpc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.151.99.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:68:44:48:be:58:f4:e6:f7:2d:6a:fe:cb:bd:04:b1:52:08:
47:0d:a4:c7:c6:a7:d2:38:53:7f:22:29:cd:34:c0:c1:b5:ec:
f1:4a:ff:ac:f7:3a:fa:84:4b:55:4c:ac:cc:e9:54:cb:f5:92:
36:d8:d0:06:41:9d:c6:60:f1:1e:6a:27:f3:42:42:43:47:80:
e8:c5:9f:1c:c4:c1:50:fa:c5:43:8d:22:78:f2:9f:7e:60:51:
46:8b:53:e6:bd:e9:31:b8:77:2c:40:12:71:bf:73:ef:6e:90:
8b:d0:1e:29:48:23:79:27:77:2c:ca:7a:41:8a:c9:62:a5:e3:
bd:b5:72:2a:81:0c:7e:a8:50:9c:7f:74:b5:2a:01:c9:ea:a6:
b6:4e:6a:00:c4:17:d7:c3:b3:20:ea:c8:8a:8a:a9:0a:0b:b9:
f3:bb:98:39:03:33:91:84:8d:e2:cd:3a:29:f2:76:69:65:23:
4c:17:06:f4:85:ed:dc:39:c1:f2:71:74:07:d2:42:29:d9:30:
2b:61:0c:20:ed:06:6b:90:41:55:f0:c1:4c:79:8e:66:cf:44:
3b:32:60:b6:78:65:f9:a2:88:74:a8:13:f2:4c:b9:ef:d7:a8:
27:ea:41:76:23:cd:08:14:b5:91:8f:38:7d:b1:de:77:62:d8:
b4:56:eb:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:17:52 2025 by rpki-client