Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/53a947-fd03-4014-9827-c5d8950818ec/1/1-cpyjHU8WHBS-JnYyweRG_JlxsQ.roa
File: 1-cpyjHU8WHBS-JnYyweRG_JlxsQ.roa (raw, json)
Hash identifier: Bc2YUgBN1eHG7yUrAAjgkxLZbgg1NrbTbKbM93kzdXo=
Subject key identifier: F9:CA:72:8C:75:3C:58:70:52:F8:99:D8:CB:07:91:1B:F2:65:C6:C4
Certificate issuer: /CN=ff44dbaca56dac319401f68a50d917f5424611ad
Certificate serial: 019421438B9C285B63ADACE9D14CA456D469
Authority key identifier: FF:44:DB:AC:A5:6D:AC:31:94:01:F6:8A:50:D9:17:F5:42:46:11:AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_0TbrKVtrDGUAfaKUNkX9UJGEa0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/53a947-fd03-4014-9827-c5d8950818ec/1/1-cpyjHU8WHBS-JnYyweRG_JlxsQ.roa
Signing time: Wed 01 Jan 2025 09:47:42 +0000
ROA not before: Wed 01 Jan 2025 09:47:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212384
IP address blocks: 45.12.104.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:43:8b:9c:28:5b:63:ad:ac:e9:d1:4c:a4:56:d4:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff44dbaca56dac319401f68a50d917f5424611ad
Validity
Not Before: Jan 1 09:47:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f9ca728c753c587052f899d8cb07911bf265c6c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:cc:7e:60:7b:2d:d4:3e:72:25:8b:cf:fc:39:
ca:1a:92:ef:d5:33:e4:6d:84:b1:63:47:40:3c:5f:
a3:fc:d7:74:2c:35:db:1b:a3:b6:95:3c:2a:06:9c:
5c:12:b5:e6:ea:e8:7f:97:f4:d7:aa:d5:a1:dd:39:
85:05:ea:b6:f1:5d:34:3c:32:9d:76:b7:29:e1:a7:
e1:65:48:c0:72:1b:63:ba:2d:ba:88:7f:fe:26:0b:
0c:02:f2:da:71:2a:c2:c5:09:a8:72:d8:2f:a2:9d:
f4:92:cd:f6:35:08:0f:39:21:d4:60:55:f7:62:1e:
94:23:62:ce:05:dd:89:1e:6b:92:59:04:af:86:0f:
13:55:07:2a:56:46:28:29:e6:28:68:1f:ef:17:16:
7f:c8:ab:da:cd:29:53:6c:60:5c:49:a5:3e:5d:a1:
db:41:64:dd:f6:b7:e3:5c:29:7d:23:b8:f1:1f:f5:
46:ed:5e:fb:f7:18:60:f5:20:4b:97:e7:49:af:69:
fe:03:d8:d0:a6:31:1e:37:86:82:99:26:8e:fa:c4:
a9:80:8e:07:8d:08:c0:f0:18:d7:b2:75:5d:4b:db:
85:fc:67:f0:a9:0e:c2:c2:d1:7e:d9:16:c5:98:65:
69:bf:74:0c:74:62:e4:5b:2a:6e:07:63:48:b7:67:
aa:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:CA:72:8C:75:3C:58:70:52:F8:99:D8:CB:07:91:1B:F2:65:C6:C4
X509v3 Authority Key Identifier:
keyid:FF:44:DB:AC:A5:6D:AC:31:94:01:F6:8A:50:D9:17:F5:42:46:11:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_0TbrKVtrDGUAfaKUNkX9UJGEa0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/53a947-fd03-4014-9827-c5d8950818ec/1/1-cpyjHU8WHBS-JnYyweRG_JlxsQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/53a947-fd03-4014-9827-c5d8950818ec/1/_0TbrKVtrDGUAfaKUNkX9UJGEa0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.12.104.0/22
Signature Algorithm: sha256WithRSAEncryption
00:48:0b:e4:c6:2c:88:e8:90:3f:73:17:52:75:88:bb:c0:a1:
a9:c3:f9:ae:ca:ca:63:3a:ff:6b:84:ed:20:5b:d4:12:27:ed:
10:12:01:d1:15:99:3b:cf:ee:4f:6f:e8:c3:1f:b9:1f:d3:52:
37:e3:e0:c7:22:82:48:bc:3f:b9:e8:c9:63:2f:c5:5a:d5:50:
4b:08:cc:be:a8:cd:1d:ba:d8:5a:d4:1f:d1:28:90:37:a8:01:
79:cc:58:19:6e:9f:33:e2:b1:a3:f5:44:d9:e6:b8:31:27:99:
10:f3:8e:17:f2:df:24:5a:e3:24:6d:b4:ce:ad:43:73:b8:ee:
b2:70:39:e9:68:2f:fc:80:b1:2d:f6:b8:62:8a:6e:18:12:57:
94:80:a7:9a:49:19:64:8d:95:62:3f:eb:ba:d3:01:e4:4d:9e:
5a:dc:04:f8:34:ff:6a:46:b0:b2:24:2a:00:7f:58:e2:98:b1:
a6:22:f2:7f:05:6f:58:0e:34:98:61:f8:ce:13:eb:6c:7a:fe:
a1:f4:01:e3:7b:b1:f6:1a:b2:7d:f0:2d:94:e3:c7:3b:f2:2a:
87:e1:5d:1f:5d:0c:6e:d9:92:9b:f5:80:02:bd:fc:30:b3:f0:
99:1c:76:d8:bd:52:bc:4c:2e:a7:5e:3a:01:ff:a8:8f:c4:15:
2b:ff:51:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 21:58:45 2025 by rpki-client