Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/abe134-0093-4652-9057-4f4c9b343e90/1/hacEV-MoLT8z9KwMPWss3cGE7Ak.roa
File: hacEV-MoLT8z9KwMPWss3cGE7Ak.roa (raw, json)
Hash identifier: /ljDI2bMRna9vPYEiWkrDiOeR+IfW8BnSxXE9Vp7xXE=
Subject key identifier: 85:A7:04:57:E3:28:2D:3F:33:F4:AC:0C:3D:6B:2C:DD:C1:84:EC:09
Certificate issuer: /CN=d1de124e0f8adb4e7d9576ceae325f668dd224b1
Certificate serial: 0194B3EBDD7CD1D25269BA8E42ED75167096
Authority key identifier: D1:DE:12:4E:0F:8A:DB:4E:7D:95:76:CE:AE:32:5F:66:8D:D2:24:B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0d4STg-K2059lXbOrjJfZo3SJLE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/abe134-0093-4652-9057-4f4c9b343e90/1/hacEV-MoLT8z9KwMPWss3cGE7Ak.roa
Signing time: Wed 29 Jan 2025 21:16:06 +0000
ROA not before: Wed 29 Jan 2025 21:16:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 29802
IP address blocks: 45.140.247.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:b3:eb:dd:7c:d1:d2:52:69:ba:8e:42:ed:75:16:70:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1de124e0f8adb4e7d9576ceae325f668dd224b1
Validity
Not Before: Jan 29 21:16:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=85a70457e3282d3f33f4ac0c3d6b2cddc184ec09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:48:db:5f:2a:8c:b6:7c:0e:83:00:93:3c:b9:
fa:b5:d7:a2:8a:71:72:22:76:3b:41:fc:d8:85:48:
45:26:6a:d2:37:77:cd:4d:3c:76:f9:5f:52:50:c1:
24:1e:3c:90:86:24:2d:06:f3:7c:85:c3:24:4a:bb:
b9:1e:bf:02:10:cc:60:9f:b1:f9:e5:f7:c0:5a:ed:
13:bf:68:af:87:f7:f7:4d:8a:d9:af:7d:6f:08:14:
33:67:28:40:7a:de:fe:36:e3:df:8b:2e:5d:72:99:
77:05:8e:c9:25:de:e6:34:b8:8b:ad:ef:f3:97:c4:
97:e3:84:56:64:0a:0f:b1:bf:ed:53:75:f6:f2:19:
9a:55:98:1b:06:d5:97:f3:65:3f:5f:2f:73:71:b8:
e8:aa:7d:96:a8:03:ec:a8:20:c8:e9:37:3a:ee:9a:
ca:2b:8e:02:74:12:fe:03:d5:ae:e0:67:bc:5b:3d:
97:d4:58:a7:28:5b:3d:fd:8e:e3:b9:ad:c7:c4:98:
ba:e4:cc:d6:d4:00:e4:4a:c2:bd:9d:12:2c:24:bc:
3c:a7:89:b0:62:0b:10:a3:00:2a:30:cf:e5:45:e4:
83:00:6a:46:67:87:1b:82:d7:96:bc:a2:4c:d8:2d:
64:1d:31:6f:48:b7:d7:b8:c0:c8:7b:a5:17:d1:ff:
03:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:A7:04:57:E3:28:2D:3F:33:F4:AC:0C:3D:6B:2C:DD:C1:84:EC:09
X509v3 Authority Key Identifier:
keyid:D1:DE:12:4E:0F:8A:DB:4E:7D:95:76:CE:AE:32:5F:66:8D:D2:24:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d4STg-K2059lXbOrjJfZo3SJLE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/abe134-0093-4652-9057-4f4c9b343e90/1/hacEV-MoLT8z9KwMPWss3cGE7Ak.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/abe134-0093-4652-9057-4f4c9b343e90/1/0d4STg-K2059lXbOrjJfZo3SJLE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.140.247.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:3d:e4:da:23:59:72:9f:e8:bf:7f:98:be:e5:41:3c:32:3c:
80:b4:48:db:a0:42:19:c3:30:31:c8:52:30:e5:81:c1:38:17:
b6:27:43:b7:ed:63:65:a3:ed:3e:4a:9c:ad:6c:00:c6:70:17:
7c:c2:c5:f1:02:09:8b:5e:ce:0f:2a:2f:fb:b1:48:77:ef:bb:
9f:4f:40:a0:fc:e0:6d:72:42:dc:9c:03:30:dc:d3:dd:1d:69:
88:c4:3d:4a:89:8c:17:44:a3:a0:f3:1d:94:b9:bd:56:b2:17:
5a:df:4d:b1:ba:27:88:6f:83:89:56:3c:f8:2b:6d:02:90:ba:
f0:8d:a4:94:fe:ec:5d:ec:57:b6:8f:d0:c5:2e:86:1a:ee:2a:
70:78:83:ed:0b:20:b1:6c:87:ce:fc:60:18:65:87:37:92:d8:
90:70:a1:ff:29:9a:19:1b:29:d4:6c:f1:98:3d:d3:26:c6:54:
96:92:6f:da:20:30:f0:a3:61:8a:4d:93:a9:a5:a2:72:48:a2:
30:9f:e2:92:93:e3:c4:6e:2a:53:66:6f:4a:57:f1:b1:a3:d6:
69:e2:7a:e2:e1:87:45:7e:2c:b1:53:a1:19:15:d9:7a:fe:6b:
cc:12:c9:c1:67:3f:a8:f4:35:fa:ae:80:7b:43:c5:13:ce:64:
0c:30:fa:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 14:35:54 2025 by rpki-client