Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/e775eb-7d8a-4835-9456-bd7bf949d9c2/1/1-_89Dez41ndJqEfE120-JHSEVWM.roa
File: 1-_89Dez41ndJqEfE120-JHSEVWM.roa (raw, json)
Hash identifier: xhPooviCXmcqDLUm72T+DijA5Okd0x0AFRzzTPKUvf8=
Subject key identifier: FB:FF:3D:0D:EC:F8:D6:77:49:A8:47:C4:D7:6D:3E:24:74:84:55:63
Certificate issuer: /CN=0212a07ce793a5f0416027bf4aab8bd1ceaf0fce
Certificate serial: 018CC3489CC9D4A2ADBA96AC9A5E685427A5
Authority key identifier: 02:12:A0:7C:E7:93:A5:F0:41:60:27:BF:4A:AB:8B:D1:CE:AF:0F:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AhKgfOeTpfBBYCe_SquL0c6vD84.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/e775eb-7d8a-4835-9456-bd7bf949d9c2/1/1-_89Dez41ndJqEfE120-JHSEVWM.roa
Signing time: Mon 01 Jan 2024 04:29:25 +0000
ROA not before: Mon 01 Jan 2024 04:29:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 16276
IP address blocks: 45.12.52.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:48:9c:c9:d4:a2:ad:ba:96:ac:9a:5e:68:54:27:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0212a07ce793a5f0416027bf4aab8bd1ceaf0fce
Validity
Not Before: Jan 1 04:29:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fbff3d0decf8d67749a847c4d76d3e2474845563
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:bd:8e:df:10:36:67:a9:5f:c3:29:9f:f6:77:
e9:9f:e5:10:26:2b:29:91:d3:c1:e9:0d:06:31:fd:
95:0e:1e:01:99:c0:f4:c0:eb:73:41:5d:02:d0:ba:
60:0c:7f:df:54:34:d7:7e:1d:10:81:74:9c:8b:22:
fe:4b:f0:8b:97:7e:83:5f:83:10:71:8f:94:38:8d:
83:81:60:5d:03:a2:6f:7c:69:b2:95:b3:8d:b6:fb:
0f:6e:cf:bb:5d:33:2b:1f:26:ef:03:bf:94:09:74:
4d:52:7d:4d:38:ac:f1:c7:01:5f:28:66:1f:1c:ac:
d2:cc:00:ec:a4:27:d5:6f:be:4a:f8:75:ea:b9:b5:
0a:3d:8b:73:7e:98:84:e5:22:fe:1d:f5:d7:6b:51:
5b:2b:c5:fb:ac:02:b1:d9:79:70:9c:ad:d2:04:8c:
4c:6d:db:85:55:9c:99:94:6e:80:b0:f6:78:4f:f3:
9f:a0:a6:e9:1f:27:0e:9a:ae:e4:ce:e0:d1:f8:b5:
8a:40:e4:1f:a4:09:71:b6:15:01:11:2a:9d:2c:22:
0c:ae:8e:6d:b8:c4:e9:cd:75:6a:20:2f:18:bd:6c:
c3:a0:83:a1:54:11:c4:81:cf:ff:c7:83:e0:45:ed:
a5:b9:ff:a7:62:ef:1b:46:8e:48:43:22:9b:48:1b:
fe:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:FF:3D:0D:EC:F8:D6:77:49:A8:47:C4:D7:6D:3E:24:74:84:55:63
X509v3 Authority Key Identifier:
keyid:02:12:A0:7C:E7:93:A5:F0:41:60:27:BF:4A:AB:8B:D1:CE:AF:0F:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AhKgfOeTpfBBYCe_SquL0c6vD84.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/e775eb-7d8a-4835-9456-bd7bf949d9c2/1/1-_89Dez41ndJqEfE120-JHSEVWM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/e775eb-7d8a-4835-9456-bd7bf949d9c2/1/AhKgfOeTpfBBYCe_SquL0c6vD84.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.12.52.0/24
Signature Algorithm: sha256WithRSAEncryption
94:27:77:8a:7f:53:31:66:b0:a0:3b:36:c9:55:fc:6a:64:a0:
55:bf:46:a1:a1:b1:6d:24:05:95:ab:dc:18:90:b2:40:d5:f0:
5e:b7:3c:34:3c:02:80:9c:19:61:3f:dd:28:fa:28:7b:c0:70:
e3:83:5a:d5:9f:5e:b6:99:b3:c2:fd:a9:32:be:a0:8c:4a:a4:
c5:85:06:da:34:3e:7f:65:02:e9:bb:69:67:be:39:87:71:98:
b8:f7:d2:5b:5d:3c:53:9a:11:1b:e1:ac:97:20:65:25:b1:ad:
73:15:dc:65:81:34:a8:23:ed:47:65:9c:53:54:0f:5a:96:5b:
74:37:9f:e2:59:06:e2:47:fe:0d:62:c0:d2:42:a1:74:c4:a1:
ee:9e:f2:e2:4d:8e:a3:bf:85:fa:cc:3b:09:d0:94:cf:36:7f:
9d:71:63:be:79:f2:9f:36:47:a0:fe:44:ba:25:e8:6f:c6:e1:
a3:e0:f0:5e:a0:62:25:9c:93:d3:74:f2:b1:43:ab:b7:22:1a:
ea:2a:c2:1d:c7:23:5c:2b:28:d3:14:fc:01:de:28:bb:17:d4:
bc:bd:d9:76:19:e2:f5:a9:89:71:7b:29:b1:99:dd:9b:64:4c:
1a:83:4b:1e:f7:ca:be:e8:36:aa:ed:64:f0:17:36:fa:ae:e1:
1c:2e:16:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 15:19:27 2025 by rpki-client