Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/c45a9b-5096-4e75-9389-bd9b42f48dde/1/tUkh-Rs8cAkYxFggoEak6w8Lb0I.roa
File: tUkh-Rs8cAkYxFggoEak6w8Lb0I.roa (raw, json)
Hash identifier: tjheBCWOBBk1ktjRU3XtRS0SQ6bX7aw0B9P16BUGHHo=
Subject key identifier: B5:49:21:F9:1B:3C:70:09:18:C4:58:20:A0:46:A4:EB:0F:0B:6F:42
Certificate issuer: /CN=13ecf10b887f085887de8b2db64917ee2e424545
Certificate serial: 0185714C124346A783F8BBE409E5E4D22CB8
Authority key identifier: 13:EC:F1:0B:88:7F:08:58:87:DE:8B:2D:B6:49:17:EE:2E:42:45:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E-zxC4h_CFiH3osttkkX7i5CRUU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/c45a9b-5096-4e75-9389-bd9b42f48dde/1/tUkh-Rs8cAkYxFggoEak6w8Lb0I.roa
Signing time: Mon 02 Jan 2023 07:04:48 +0000
ROA not before: Mon 02 Jan 2023 07:04:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 35913
IP address blocks: 45.148.140.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:4c:12:43:46:a7:83:f8:bb:e4:09:e5:e4:d2:2c:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13ecf10b887f085887de8b2db64917ee2e424545
Validity
Not Before: Jan 2 07:04:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b54921f91b3c700918c45820a046a4eb0f0b6f42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:99:65:fe:9b:95:3d:c6:62:32:a5:bf:4e:80:
74:c1:98:06:c9:de:68:e0:eb:01:c8:30:eb:b5:9f:
be:cc:ac:dc:90:6d:0f:90:55:e0:e7:5d:84:81:49:
d3:9b:65:d9:4b:8f:74:a9:f4:d5:e5:2d:56:d3:c2:
85:5f:5f:c1:5f:d6:be:64:c9:8b:b3:d8:3a:6c:31:
f0:48:22:d5:6d:b7:be:8c:a9:a4:a5:23:a8:9a:6f:
69:7a:d5:60:e2:35:d9:99:5c:57:4f:46:d2:68:93:
b8:f5:4a:22:d2:e7:63:20:fa:29:44:79:37:3b:9b:
a6:5f:29:54:97:c8:87:e7:68:78:d4:07:b0:1a:bc:
e1:4f:73:c9:15:de:38:0d:5a:29:9b:fe:93:00:78:
bd:b1:88:f5:48:26:ea:be:df:76:92:50:ba:4f:32:
9d:0b:cc:4f:ea:8a:e6:49:a1:5e:18:7e:16:a0:4f:
e6:66:3b:0e:d5:ed:0b:73:69:43:e0:1f:d3:f3:cf:
da:79:b1:c5:08:b3:62:56:36:c4:2b:38:55:63:4e:
af:fe:a1:5a:d6:88:25:c1:fe:2d:1f:7d:fe:2c:a4:
12:f3:31:16:06:a2:79:19:af:45:cd:77:7c:68:6a:
85:43:0a:d6:7f:4a:39:ef:d1:10:1f:fa:8b:04:33:
d1:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:49:21:F9:1B:3C:70:09:18:C4:58:20:A0:46:A4:EB:0F:0B:6F:42
X509v3 Authority Key Identifier:
keyid:13:EC:F1:0B:88:7F:08:58:87:DE:8B:2D:B6:49:17:EE:2E:42:45:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E-zxC4h_CFiH3osttkkX7i5CRUU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/c45a9b-5096-4e75-9389-bd9b42f48dde/1/tUkh-Rs8cAkYxFggoEak6w8Lb0I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/c45a9b-5096-4e75-9389-bd9b42f48dde/1/E-zxC4h_CFiH3osttkkX7i5CRUU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.148.140.0/24
Signature Algorithm: sha256WithRSAEncryption
74:43:84:07:38:1b:73:49:11:04:1b:84:4b:c2:67:66:e7:78:
a3:18:18:9b:45:e4:cb:4a:37:90:4c:b3:88:65:f5:0f:af:9b:
8f:7c:1e:df:12:7b:b5:0b:df:48:9d:86:a6:19:72:5d:2d:e2:
80:4f:27:0b:ff:b4:0d:42:6f:d0:c0:01:0f:a9:13:a3:82:92:
01:53:44:2c:97:b6:e6:67:7b:63:87:fc:cc:31:ef:38:1a:b2:
bb:12:16:45:c7:07:08:e6:7b:9f:e0:4a:94:e7:d1:4e:84:ae:
cf:db:72:98:25:0a:7f:3b:28:07:97:dd:08:ec:10:9f:3c:2a:
f3:0f:06:d5:4a:a2:cd:b1:65:a6:56:9b:df:53:20:13:72:72:
95:93:f5:27:21:d7:f2:ee:79:95:b4:95:4d:ab:c1:bf:3a:39:
9a:3a:e4:5e:2d:2e:07:7c:7a:80:0b:46:8a:e7:bd:bb:33:03:
2c:0b:3e:42:dd:1a:40:1f:12:d9:41:b4:6e:69:f2:ff:06:a1:
25:2e:2a:28:67:28:ff:6d:ec:b6:09:fe:44:b5:a6:00:e9:42:
e8:5e:6a:59:98:53:e7:1b:71:d5:ad:1f:09:02:15:15:dd:18:
bf:4a:21:75:49:96:4a:2c:47:fe:a9:1b:f2:fa:4d:38:bf:62:
da:a7:21:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 06:07:30 2025 by rpki-client