Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/33da71-0b4e-4b16-a9dc-beed916eb140/1/5fp4REhZrqUt_jGwUghdFogNJ4s.roa
File: 5fp4REhZrqUt_jGwUghdFogNJ4s.roa (raw, json)
Hash identifier: XHIsP9GAsLpSqaROasGsDdk80cNjcNRUOKOHhRVGrsU=
Subject key identifier: E5:FA:78:44:48:59:AE:A5:2D:FE:31:B0:52:08:5D:16:88:0D:27:8B
Certificate issuer: /CN=06dbc24e08b2c26ada90ad638f1adc747f69a45f
Certificate serial: 01941F8C7CCBB32974ED9D732BB5453A287A
Authority key identifier: 06:DB:C2:4E:08:B2:C2:6A:DA:90:AD:63:8F:1A:DC:74:7F:69:A4:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BtvCTgiywmrakK1jjxrcdH9ppF8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/33da71-0b4e-4b16-a9dc-beed916eb140/1/5fp4REhZrqUt_jGwUghdFogNJ4s.roa
Signing time: Wed 01 Jan 2025 01:48:08 +0000
ROA not before: Wed 01 Jan 2025 01:48:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 3223
IP address blocks: 45.149.124.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:7c:cb:b3:29:74:ed:9d:73:2b:b5:45:3a:28:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06dbc24e08b2c26ada90ad638f1adc747f69a45f
Validity
Not Before: Jan 1 01:48:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e5fa78444859aea52dfe31b052085d16880d278b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:a6:8f:6b:54:f9:2d:64:a5:79:ff:28:12:70:
e9:f3:2b:fa:08:8f:e5:e4:24:10:20:d0:3b:00:f2:
e6:f7:19:a4:6b:88:f4:a1:1e:e6:86:36:8c:e3:45:
9f:16:bb:6c:9f:ba:b4:cc:47:33:fc:a5:b1:76:14:
44:c7:f8:6c:65:56:28:14:74:4b:36:b0:9c:09:4c:
38:74:8d:1f:46:4b:6b:60:32:04:fa:de:18:4e:6e:
0e:52:ba:d9:e4:b7:1b:2f:ef:64:7c:e7:b8:a8:98:
f9:a0:90:59:dd:db:2f:09:27:56:71:f3:da:7c:7b:
45:b4:6c:ec:30:ab:73:2f:2f:e3:e8:f8:b5:5f:36:
93:67:01:2e:ac:8f:63:ad:94:c0:09:46:9f:aa:4b:
96:a8:42:56:35:db:d2:37:5d:d2:44:e7:2d:07:51:
b7:c9:b3:30:94:05:33:a3:5b:30:c6:0a:4f:5b:4c:
24:16:a5:82:a3:4c:a3:c4:d2:90:3f:4c:4c:5d:62:
9a:86:ef:4c:74:3f:3a:b7:bf:df:7f:1b:54:f0:54:
4e:f0:11:f8:cb:4f:14:be:04:df:1a:e1:93:77:96:
92:5e:98:ed:2b:cd:45:5f:56:fb:a5:69:73:90:3b:
72:90:fe:74:6e:7f:f5:17:a4:38:97:27:ca:6d:8c:
bc:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:FA:78:44:48:59:AE:A5:2D:FE:31:B0:52:08:5D:16:88:0D:27:8B
X509v3 Authority Key Identifier:
keyid:06:DB:C2:4E:08:B2:C2:6A:DA:90:AD:63:8F:1A:DC:74:7F:69:A4:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BtvCTgiywmrakK1jjxrcdH9ppF8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/33da71-0b4e-4b16-a9dc-beed916eb140/1/5fp4REhZrqUt_jGwUghdFogNJ4s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/33da71-0b4e-4b16-a9dc-beed916eb140/1/BtvCTgiywmrakK1jjxrcdH9ppF8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.149.124.0/22
Signature Algorithm: sha256WithRSAEncryption
23:ad:13:19:0b:dd:1d:d9:de:d7:e9:1b:8c:b0:c8:19:1d:70:
5f:63:58:a1:fb:35:7a:86:ad:5f:43:a2:29:f6:a0:20:ed:bd:
f0:57:52:f4:3c:98:64:e0:03:33:7a:e2:c5:79:a2:3b:2f:75:
e7:34:bc:7c:b8:61:9b:be:d2:4a:79:49:d3:d2:6d:62:c3:c0:
4f:53:14:3c:23:95:7a:30:58:df:f7:f5:05:fd:fc:9f:28:c5:
4d:fb:ed:4f:e6:df:46:a7:d8:b2:7a:3d:22:ed:7f:77:75:d4:
02:af:50:cd:98:71:bf:3c:ff:26:c4:fd:aa:1b:5e:87:41:87:
58:6f:6d:68:1c:9c:60:72:68:9d:8c:68:05:d6:f8:f8:97:b2:
34:31:7d:d6:d8:ba:1e:72:92:27:4b:a6:eb:ed:12:fd:f4:ef:
d6:d6:45:5a:86:ba:15:92:f7:90:e7:4b:38:a8:61:6a:09:9d:
0a:63:32:2e:ff:c8:51:3f:be:19:13:f6:16:29:d0:92:4a:6f:
12:95:21:89:b7:c7:31:6e:5b:85:3e:6c:9a:96:02:43:24:ff:
6f:c5:eb:32:ac:9b:85:16:9e:45:a0:35:02:61:44:6e:70:95:
cd:39:7f:73:be:fe:a3:98:be:3f:71:39:c7:af:57:6e:6a:6b:
9f:08:55:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 13:25:04 2025 by rpki-client