Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/410e39-b8a6-46ca-acdc-3f12aff274da/1/IPUd7GCIW2gsU9xakT1oNUwSIio.roa
File: IPUd7GCIW2gsU9xakT1oNUwSIio.roa (raw, json)
Hash identifier: dGuEAfVSkLkoM8KnSMOWFIaomaZjWrbWxTVDngrHaFg=
Subject key identifier: 20:F5:1D:EC:60:88:5B:68:2C:53:DC:5A:91:3D:68:35:4C:12:22:2A
Certificate issuer: /CN=da980a45fe487366e386b6064c2c652519f9fc93
Certificate serial: 0194258FB04B8312052F1E9FAA4043E54130
Authority key identifier: DA:98:0A:45:FE:48:73:66:E3:86:B6:06:4C:2C:65:25:19:F9:FC:93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2pgKRf5Ic2bjhrYGTCxlJRn5_JM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/410e39-b8a6-46ca-acdc-3f12aff274da/1/IPUd7GCIW2gsU9xakT1oNUwSIio.roa
Signing time: Thu 02 Jan 2025 05:49:21 +0000
ROA not before: Thu 02 Jan 2025 05:49:21 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209894
IP address blocks: 45.154.111.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:b0:4b:83:12:05:2f:1e:9f:aa:40:43:e5:41:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da980a45fe487366e386b6064c2c652519f9fc93
Validity
Not Before: Jan 2 05:49:21 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=20f51dec60885b682c53dc5a913d68354c12222a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:1e:7c:f0:ee:5a:52:e6:29:de:5e:9d:b8:8b:
9f:52:3a:88:e7:b0:f4:1e:69:57:e8:eb:cc:c5:55:
6d:b7:34:16:bf:db:64:b0:df:5b:9b:ea:30:7a:62:
ff:86:ae:94:71:d4:78:3e:80:b2:0a:e1:e4:ad:69:
0e:c0:d2:f7:65:cb:f3:87:fa:db:18:bc:4a:a6:b0:
84:3b:60:13:24:39:ec:b0:0d:25:40:e1:a5:14:ef:
3a:32:68:8f:89:86:f6:7a:83:77:e9:fb:8b:17:67:
e9:13:34:d2:2e:fb:e9:4a:a4:08:48:06:d0:fd:7c:
87:d1:c5:2b:d5:5c:98:96:49:19:7d:44:d9:c0:68:
29:6c:1e:7e:9a:0f:19:f7:6d:23:88:96:ff:a5:e6:
d3:c8:29:84:9f:70:df:c5:34:a0:d1:09:ef:96:5b:
f1:be:26:93:fe:10:6f:a1:3d:c6:b3:f3:2e:ab:8a:
cd:98:13:3b:2a:f6:57:2f:7a:f7:76:da:e0:a5:68:
5c:d6:f2:48:32:fc:63:22:37:d7:ee:aa:f2:57:7e:
37:b9:5f:b4:58:5c:ff:6a:37:99:7f:ac:a4:c8:ed:
eb:58:75:39:de:23:da:ed:ec:3d:ca:ab:98:5e:58:
a8:fd:a5:28:18:65:8c:af:46:f5:f5:c4:bd:0b:c1:
4a:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:F5:1D:EC:60:88:5B:68:2C:53:DC:5A:91:3D:68:35:4C:12:22:2A
X509v3 Authority Key Identifier:
keyid:DA:98:0A:45:FE:48:73:66:E3:86:B6:06:4C:2C:65:25:19:F9:FC:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2pgKRf5Ic2bjhrYGTCxlJRn5_JM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/410e39-b8a6-46ca-acdc-3f12aff274da/1/IPUd7GCIW2gsU9xakT1oNUwSIio.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/410e39-b8a6-46ca-acdc-3f12aff274da/1/2pgKRf5Ic2bjhrYGTCxlJRn5_JM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.154.111.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:3b:1f:1a:de:9d:45:28:9c:58:0e:12:ee:7a:9b:81:73:7d:
85:43:42:60:91:ea:3f:bf:cd:46:d0:07:1f:a9:4a:be:46:bc:
f8:7b:84:63:a4:b1:2f:68:cf:1e:43:7b:f9:09:c1:6a:18:77:
7d:95:17:d7:cd:31:91:97:82:f9:6e:64:e7:e9:2f:df:60:e0:
28:fb:12:b1:6a:45:e3:16:70:9c:5a:3e:45:b1:55:1f:0d:17:
80:19:c4:4f:61:ca:02:81:8d:cd:77:e8:3f:e0:57:a5:dc:bf:
49:bd:29:80:2b:db:3c:87:79:f5:a6:86:d5:7e:eb:04:b2:3d:
5e:bb:d2:7c:a5:e9:d5:1f:34:a0:40:e6:ce:70:9d:09:5d:45:
00:39:9f:75:f5:3f:97:aa:8b:7c:c4:28:30:ef:9d:d9:61:1d:
f2:16:dc:92:40:20:c9:31:16:d2:95:b6:0c:8f:e6:04:6f:64:
26:58:85:a2:14:46:47:04:a3:40:02:54:91:cf:73:23:97:66:
02:9a:31:f9:2c:cb:7a:29:60:a9:e6:bd:ac:22:c6:c1:2b:ce:
8c:03:00:98:81:ba:cc:c7:af:f6:dd:af:2c:40:d5:19:cd:04:
a5:a5:2c:73:b8:dc:99:05:2c:f6:c8:07:6f:58:64:7c:a7:2d:
c0:18:5e:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 08:33:52 2025 by rpki-client