Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/TuKKlp-YU9hH3BDdx-_-iqpSkuQ.roa
File: TuKKlp-YU9hH3BDdx-_-iqpSkuQ.roa (raw, json)
Hash identifier: T0MoII0bHUQVy4/EIU0McUWW03OrtpRdQcw2oGJ90xw=
Subject key identifier: 4E:E2:8A:96:9F:98:53:D8:47:DC:10:DD:C7:EF:FE:8A:AA:52:92:E4
Certificate issuer: /CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc
Certificate serial: 019424B3A7A09A2406BB615DA11CCAAE17A2
Authority key identifier: 17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/TuKKlp-YU9hH3BDdx-_-iqpSkuQ.roa
Signing time: Thu 02 Jan 2025 01:49:01 +0000
ROA not before: Thu 02 Jan 2025 01:49:01 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214766
IP address blocks: 45.134.146.0/23 maxlen: 23
45.134.146.0/24 maxlen: 24
45.134.147.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:a7:a0:9a:24:06:bb:61:5d:a1:1c:ca:ae:17:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc
Validity
Not Before: Jan 2 01:49:01 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4ee28a969f9853d847dc10ddc7effe8aaa5292e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:e9:69:38:0f:fb:ca:39:ae:83:9b:d3:b4:8a:
f3:07:55:aa:e4:6a:16:74:b1:64:e4:f9:63:48:ca:
91:37:a8:4d:8a:6c:37:95:93:95:3e:e7:36:13:c8:
68:16:77:05:fe:89:f3:28:c6:22:d7:03:85:dc:57:
c7:e9:57:d4:57:aa:00:dd:54:4a:57:37:e0:f2:92:
c8:10:7e:6c:0e:c9:17:2c:f3:02:e0:f7:5f:68:95:
03:0d:97:25:65:ce:4f:11:de:7b:c6:ed:c8:38:96:
7d:09:f6:e1:70:f8:19:7c:c3:60:d2:90:c7:4f:d4:
aa:18:a2:02:28:ee:fc:a8:f2:ed:1f:1f:29:fd:7e:
ff:3d:bc:9c:1c:43:90:ee:5a:6f:0b:f7:01:47:7b:
4c:2a:35:2c:95:3c:62:fb:e1:12:b5:59:6f:f3:13:
9c:08:d5:4b:0a:74:15:38:b4:fd:28:c8:f6:f3:18:
af:dc:29:4e:e7:46:76:0c:f2:82:6c:ea:22:81:46:
e2:4c:bf:e6:06:cf:11:f6:e0:19:1f:7c:37:78:ac:
d2:02:a7:6b:fb:21:30:75:6e:41:c9:d7:44:d8:d6:
b7:55:48:7d:7b:46:cd:fd:18:6a:70:4a:b1:66:49:
37:cb:83:be:57:2d:a0:1b:17:7b:2b:10:23:4d:c8:
d5:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:E2:8A:96:9F:98:53:D8:47:DC:10:DD:C7:EF:FE:8A:AA:52:92:E4
X509v3 Authority Key Identifier:
keyid:17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/TuKKlp-YU9hH3BDdx-_-iqpSkuQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.134.146.0/23
Signature Algorithm: sha256WithRSAEncryption
65:6a:00:17:7a:e3:be:1d:16:e6:46:1e:c9:34:fb:16:2e:21:
04:45:8f:47:1e:71:94:00:30:71:96:70:59:93:0f:7a:9f:88:
79:f3:83:56:1d:f0:4f:b5:ce:11:89:44:88:4e:cf:37:7c:4e:
7e:97:a2:c9:49:8b:bc:97:bb:34:1c:16:72:b0:56:cb:81:8e:
51:ef:4e:29:9d:45:d5:96:4e:87:d5:32:79:53:60:28:f3:74:
55:59:9d:38:3b:66:c9:98:7c:ff:f8:60:6c:ca:a1:49:60:98:
75:d3:e4:8f:f0:ab:ab:56:b1:3e:73:dd:2b:b3:1b:2d:c2:3e:
37:9d:92:16:b5:da:7b:97:d5:27:aa:06:95:4b:6b:9e:83:53:
47:b3:87:f0:c8:e0:4e:c4:5c:52:63:e4:58:e9:b2:c3:48:8d:
40:c8:c3:f8:f0:fb:84:94:3c:af:76:06:d9:52:51:60:e3:c4:
ae:90:98:89:ea:a0:20:52:b4:20:70:3b:bd:35:2e:f6:83:50:
78:44:85:89:5d:6b:53:79:90:e7:a9:19:9f:81:7b:54:71:f7:
5a:3f:b0:e5:6d:96:2d:49:33:38:90:3d:66:5f:fd:13:83:6d:
a2:d9:51:93:7d:bd:a9:97:9a:5c:80:b9:3b:b6:b3:0d:77:04:
af:2d:78:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 00:41:28 2025 by rpki-client