Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/bTm16kB84Zrpw6KkFp2ZXFp43Kw.roa
File: bTm16kB84Zrpw6KkFp2ZXFp43Kw.roa (raw, json)
Hash identifier: yzKiwUQKEUF9bEGGiyWTm6vduekBJRTu4O5ba0Sxlgk=
Subject key identifier: 6D:39:B5:EA:40:7C:E1:9A:E9:C3:A2:A4:16:9D:99:5C:5A:78:DC:AC
Certificate issuer: /CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Certificate serial: 019424451A16617A9CF54E23F51A83F8B866
Authority key identifier: D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/bTm16kB84Zrpw6KkFp2ZXFp43Kw.roa
Signing time: Wed 01 Jan 2025 23:48:15 +0000
ROA not before: Wed 01 Jan 2025 23:48:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48347
IP address blocks: 45.142.36.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:45:1a:16:61:7a:9c:f5:4e:23:f5:1a:83:f8:b8:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Validity
Not Before: Jan 1 23:48:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6d39b5ea407ce19ae9c3a2a4169d995c5a78dcac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:47:c5:c9:84:55:41:d5:99:97:ef:b5:1d:a4:
82:90:b6:f6:03:71:d9:4e:ca:cf:9f:a7:8c:38:e5:
76:67:12:ea:19:b6:00:e0:34:fc:63:7a:6f:e2:3f:
55:45:28:4a:8b:5f:74:cb:e3:f8:43:95:18:09:d8:
50:0f:60:b7:aa:cf:14:83:26:b0:58:fe:0a:c1:a9:
06:1e:b4:0c:4d:4e:c3:75:20:84:ee:6f:4f:56:92:
64:46:74:29:9e:a1:79:fc:2a:cf:26:1a:1d:2a:b5:
2e:51:9a:53:19:e1:b5:c4:d0:5c:09:2c:bc:ad:b4:
07:af:4e:9e:58:dc:b0:b3:bf:23:48:31:77:6b:ed:
3e:20:f3:96:9b:ca:de:3b:86:30:6d:c3:74:07:9b:
a4:f5:be:53:0e:9f:3f:42:b5:9e:4f:b1:62:c6:80:
02:af:d5:cf:3a:d6:29:eb:16:f7:5d:ab:ee:63:3f:
bb:ea:cd:54:5d:38:67:41:07:d1:08:ee:0d:00:fe:
cc:f5:90:df:29:3d:84:b5:3d:bb:dd:ca:56:06:16:
20:9c:42:e9:1e:fc:2b:f0:55:fd:1e:55:45:a4:48:
2c:5c:4b:ab:80:2d:50:a9:e9:71:0c:83:57:9b:d6:
06:9f:2b:fb:94:e6:28:77:25:b7:99:4d:44:30:56:
62:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:39:B5:EA:40:7C:E1:9A:E9:C3:A2:A4:16:9D:99:5C:5A:78:DC:AC
X509v3 Authority Key Identifier:
keyid:D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/bTm16kB84Zrpw6KkFp2ZXFp43Kw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.142.36.0/24
Signature Algorithm: sha256WithRSAEncryption
36:46:7e:52:6c:92:dd:20:b2:b0:80:58:55:17:da:e3:ee:d7:
26:c1:e6:68:5f:ca:e1:11:36:3a:df:05:17:a8:a5:91:47:b2:
13:54:9b:f3:02:44:67:36:88:f9:ac:9a:af:23:00:43:06:cc:
8e:af:d4:dc:1c:64:96:95:e9:54:7e:73:0a:4d:8e:70:76:6d:
4f:6b:82:09:1e:be:c8:53:59:6e:48:da:95:a9:8b:8f:66:cb:
f8:e2:85:40:be:f3:7f:d0:83:9f:5d:15:63:98:26:41:80:fb:
35:3f:df:b4:0b:26:ea:0a:1b:99:32:e5:a5:37:e1:ca:49:9b:
b4:2e:dd:34:12:c0:40:fd:d8:d0:7e:02:b8:c3:70:5a:15:66:
f5:4b:27:0f:2a:af:ad:34:a7:31:97:f8:fd:28:a6:09:94:44:
a1:02:64:1f:44:d5:9f:83:cf:d7:da:60:0d:17:db:83:28:fc:
57:7a:32:8a:e0:53:9a:3a:7a:45:8d:95:7b:e5:c5:60:73:34:
e3:b3:10:4c:d7:81:ab:06:fe:79:ab:cb:4b:ac:f9:4f:fd:f9:
6c:75:22:9d:44:6a:2d:64:6b:9c:bb:40:27:79:ad:81:0c:f3:
25:da:ca:95:6b:ed:66:97:b3:86:38:0c:a7:06:21:57:11:51:
14:73:28:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 17:36:45 2025 by rpki-client