Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/971cc4-54d5-4c28-a1c3-e63e94cba09f/1/xYoPVdeORK2ZQiW2GlbCO-8lIBI.roa
File: xYoPVdeORK2ZQiW2GlbCO-8lIBI.roa (raw, json)
Hash identifier: TuTgDwSUWT8RbMljlNfWIOMyDanPcwbkfBjvaDeRVso=
Subject key identifier: C5:8A:0F:55:D7:8E:44:AD:99:42:25:B6:1A:56:C2:3B:EF:25:20:12
Certificate issuer: /CN=7d04c25c2f8b47e5daf52d1c4c5a50999dd0a0a9
Certificate serial: 018CC7955644F9AB05A74499C9D07844215C
Authority key identifier: 7D:04:C2:5C:2F:8B:47:E5:DA:F5:2D:1C:4C:5A:50:99:9D:D0:A0:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fQTCXC-LR-Xa9S0cTFpQmZ3QoKk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/971cc4-54d5-4c28-a1c3-e63e94cba09f/1/xYoPVdeORK2ZQiW2GlbCO-8lIBI.roa
Signing time: Tue 02 Jan 2024 00:31:42 +0000
ROA not before: Tue 02 Jan 2024 00:31:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 142594
IP address blocks: 45.139.226.0/24 maxlen: 24
45.139.227.0/24 maxlen: 24
2a04:ff00:800::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:95:56:44:f9:ab:05:a7:44:99:c9:d0:78:44:21:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d04c25c2f8b47e5daf52d1c4c5a50999dd0a0a9
Validity
Not Before: Jan 2 00:31:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c58a0f55d78e44ad994225b61a56c23bef252012
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:11:0f:62:0c:49:1b:3b:f8:8c:ba:1f:22:00:
d4:b0:97:e8:03:13:97:a5:b4:42:e6:e1:6a:fb:0f:
51:55:0d:1d:b9:b5:6e:b8:5a:4f:96:c0:9a:04:43:
78:98:82:39:f4:33:a1:01:11:4c:62:3a:e4:3d:93:
e4:76:2b:32:f0:fb:00:76:56:51:9a:c0:e2:6b:21:
44:cf:3c:a5:5c:fc:ab:c9:61:9e:bf:d0:c3:9d:13:
5d:a7:7b:24:7a:b0:0b:94:46:b5:ae:42:f9:25:72:
9f:9f:a4:16:e0:d9:20:2c:cd:31:18:49:43:5c:70:
2e:fb:61:96:a4:25:a1:79:ba:1a:86:cb:9b:9a:02:
7e:39:b5:75:19:2d:0b:e0:c4:c8:7c:c7:a9:1c:03:
1e:f6:18:63:9e:63:36:57:9e:0e:07:33:6b:d4:52:
7f:98:73:85:aa:a4:14:42:98:5a:25:20:75:61:8d:
c9:89:4d:b5:8d:a5:31:3b:8e:e5:08:30:38:8b:1d:
d8:5c:d0:ef:70:66:c3:fb:51:9a:cb:0c:b7:13:20:
aa:68:9d:57:dc:8b:c4:07:7e:f5:78:7f:81:72:49:
7f:0e:76:7e:a2:e7:77:f5:a8:9c:51:db:47:e6:61:
1b:2a:8a:bb:37:c1:86:e3:4e:79:bc:ea:8e:41:bc:
a6:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:8A:0F:55:D7:8E:44:AD:99:42:25:B6:1A:56:C2:3B:EF:25:20:12
X509v3 Authority Key Identifier:
keyid:7D:04:C2:5C:2F:8B:47:E5:DA:F5:2D:1C:4C:5A:50:99:9D:D0:A0:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fQTCXC-LR-Xa9S0cTFpQmZ3QoKk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/971cc4-54d5-4c28-a1c3-e63e94cba09f/1/xYoPVdeORK2ZQiW2GlbCO-8lIBI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/971cc4-54d5-4c28-a1c3-e63e94cba09f/1/fQTCXC-LR-Xa9S0cTFpQmZ3QoKk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.139.226.0/23
IPv6:
2a04:ff00:800::/40
Signature Algorithm: sha256WithRSAEncryption
76:e8:cc:8c:b2:82:7a:2f:11:62:2d:bb:27:df:4d:1c:91:8b:
52:b6:34:13:82:8f:44:d3:6b:4e:06:fc:27:79:f1:60:99:3b:
48:51:a0:8e:3d:82:09:a1:8d:ef:9d:bc:24:4c:e5:a4:4a:68:
dc:e2:d9:5c:cb:16:c1:eb:34:ca:ca:2a:e1:43:87:30:79:40:
bc:74:dd:5a:bf:e3:10:72:6e:21:92:92:83:87:ad:86:88:6d:
f6:31:3c:ee:18:6d:17:bc:c5:8a:38:31:ee:1f:09:ad:7c:76:
21:6c:a8:d6:31:56:b4:76:1d:08:a3:05:1c:18:fc:6d:ea:c6:
8b:e7:c1:23:22:67:b0:b3:3c:ae:19:d3:af:8a:2c:17:90:55:
58:05:b8:4e:67:20:00:29:dc:48:32:8d:0a:0c:37:37:c5:fc:
ba:43:92:1d:0e:fe:9e:1a:f6:ce:e3:83:1c:69:9a:82:ce:65:
7a:59:8c:47:19:12:ab:a3:61:fb:3d:c7:af:d8:6d:c7:65:3a:
58:62:db:77:c7:76:f9:28:e2:00:11:a2:60:5f:a4:cb:e6:0f:
4a:94:72:b9:ce:81:ad:14:18:c8:ff:e7:d5:51:00:a4:de:e2:
dd:c7:3b:aa:57:c9:53:bb:fd:83:03:15:11:bb:fa:15:b9:61:
30:ed:6e:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:01:14 2025 by rpki-client