Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/bc7078-1ee4-42f1-bc34-1d21d1bce3fe/1/xBeaVJYrqyxsJyBEwJgsxIF9If8.roa
File: xBeaVJYrqyxsJyBEwJgsxIF9If8.roa (raw, json)
Hash identifier: DlqRMUr9VXZf6onKCEDA/e64PLwtCRuMp+QIX3GytzU=
Subject key identifier: C4:17:9A:54:96:2B:AB:2C:6C:27:20:44:C0:98:2C:C4:81:7D:21:FF
Certificate issuer: /CN=234b54b119a7b3eff153085b7315507cd8513a0f
Certificate serial: 0194266BDB869E418ED0CE9DA61BCAD01CD4
Authority key identifier: 23:4B:54:B1:19:A7:B3:EF:F1:53:08:5B:73:15:50:7C:D8:51:3A:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I0tUsRmns-_xUwhbcxVQfNhROg8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/bc7078-1ee4-42f1-bc34-1d21d1bce3fe/1/xBeaVJYrqyxsJyBEwJgsxIF9If8.roa
Signing time: Thu 02 Jan 2025 09:49:50 +0000
ROA not before: Thu 02 Jan 2025 09:49:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 21859
IP address blocks: 45.87.163.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:db:86:9e:41:8e:d0:ce:9d:a6:1b:ca:d0:1c:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=234b54b119a7b3eff153085b7315507cd8513a0f
Validity
Not Before: Jan 2 09:49:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c4179a54962bab2c6c272044c0982cc4817d21ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:c9:4f:28:8d:2c:fe:55:cb:50:fa:96:da:07:
d5:0d:f7:32:db:78:a1:eb:a8:bd:62:50:d5:42:25:
a9:c1:9d:d1:ee:2e:c7:ee:b6:51:68:db:17:e6:48:
80:62:c4:3e:c7:4b:47:66:45:a0:65:7f:ed:6d:c6:
82:de:d5:53:82:43:f4:fb:c3:12:27:75:94:ff:69:
67:01:5a:14:86:cf:78:05:39:67:f8:b1:36:40:2c:
3e:9f:14:a1:6a:c5:c3:84:2c:77:53:ee:d5:e5:e2:
af:e8:8d:0c:5d:4c:2c:e3:5f:1c:4a:5d:de:26:ec:
18:58:3e:fd:2d:19:8b:0a:4b:62:00:95:8c:c3:f2:
05:e9:52:5f:40:50:d4:58:ab:b4:20:c8:6e:4d:bd:
3c:0b:20:33:d7:6c:f1:54:ca:a4:99:61:08:de:42:
90:2c:fc:f6:a6:84:0e:f4:bd:0d:6b:01:1f:76:1e:
cc:c4:47:6c:b0:9c:f9:f6:4c:b5:db:4b:5b:31:01:
bf:9a:2c:c1:25:d9:2a:9f:40:b9:52:8f:b1:49:a8:
14:c9:7d:5a:62:c4:1d:c5:96:3c:e2:26:bf:09:50:
2a:08:f5:e7:3e:6d:3e:d4:d4:57:4d:d9:b7:d2:63:
f4:d7:53:08:ab:16:fb:bc:94:6f:a5:d6:01:f5:99:
c7:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:17:9A:54:96:2B:AB:2C:6C:27:20:44:C0:98:2C:C4:81:7D:21:FF
X509v3 Authority Key Identifier:
keyid:23:4B:54:B1:19:A7:B3:EF:F1:53:08:5B:73:15:50:7C:D8:51:3A:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I0tUsRmns-_xUwhbcxVQfNhROg8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/bc7078-1ee4-42f1-bc34-1d21d1bce3fe/1/xBeaVJYrqyxsJyBEwJgsxIF9If8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/bc7078-1ee4-42f1-bc34-1d21d1bce3fe/1/I0tUsRmns-_xUwhbcxVQfNhROg8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.87.163.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:5d:05:cb:1a:97:2e:bf:e8:b6:05:fb:6e:24:ad:8d:fe:70:
27:ab:90:f8:4b:2a:54:df:2c:37:ea:66:a8:20:3d:91:6b:24:
71:4c:c1:ae:12:56:85:87:7f:79:87:c3:b7:b6:2c:be:03:ed:
44:80:89:4b:32:e9:8c:dd:d5:f5:67:82:96:7d:b5:bd:15:cd:
ba:7e:b6:84:ee:c3:ba:4e:93:d3:24:12:d3:c8:0d:c0:6b:23:
c0:01:aa:11:de:74:cc:4d:e2:af:a7:4d:29:6b:f9:f0:09:61:
7c:b5:ba:5f:30:b6:db:13:b1:f9:56:7d:25:8b:5f:b2:6c:29:
7d:da:ff:1c:23:a7:a6:70:b6:b0:e9:42:b9:09:e5:36:12:4b:
76:a8:ab:e5:a7:38:9e:7d:b5:d0:8a:55:e9:9e:d2:cf:06:32:
cf:90:9a:8d:b8:02:35:93:59:b9:29:ac:8e:53:ac:e7:4c:aa:
bf:73:f8:ee:d0:7e:e0:f7:10:02:91:1f:51:e4:72:5b:25:09:
d5:24:24:bd:17:b0:99:08:c6:41:40:4c:71:49:8a:82:06:a3:
8a:31:e6:20:7e:9a:82:26:c0:c0:ad:04:e3:f6:34:64:f0:5d:
57:1e:6e:1e:96:af:22:5e:64:06:de:c1:17:50:53:e7:bd:84:
57:a7:7d:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:01:37 2025 by rpki-client