Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/L1-u_c8bf1dD8B9bOmVv5ISG07A.roa
File: L1-u_c8bf1dD8B9bOmVv5ISG07A.roa (raw, json)
Hash identifier: 8ADBgqsPooQCw6j27xrWL3GwvCIYr1+OMS53T44MMtQ=
Subject key identifier: 2F:5F:AE:FD:CF:1B:7F:57:43:F0:1F:5B:3A:65:6F:E4:84:86:D3:B0
Certificate issuer: /CN=1e9fdc7fb39ebbbed4ee54f703d3ac6153ddee69
Certificate serial: 019421B1AB4D671AE236EEC0AD2F002BDC38
Authority key identifier: 1E:9F:DC:7F:B3:9E:BB:BE:D4:EE:54:F7:03:D3:AC:61:53:DD:EE:69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/L1-u_c8bf1dD8B9bOmVv5ISG07A.roa
Signing time: Wed 01 Jan 2025 11:47:59 +0000
ROA not before: Wed 01 Jan 2025 11:47:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48031
IP address blocks: 45.134.158.0/24 maxlen: 24
45.134.159.0/24 maxlen: 24
185.232.16.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b1:ab:4d:67:1a:e2:36:ee:c0:ad:2f:00:2b:dc:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e9fdc7fb39ebbbed4ee54f703d3ac6153ddee69
Validity
Not Before: Jan 1 11:47:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2f5faefdcf1b7f5743f01f5b3a656fe48486d3b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:12:4a:e4:23:29:4a:f6:c0:b6:23:eb:b5:e7:
35:39:b6:43:1e:c5:14:ba:5d:7f:d9:ba:31:93:2c:
55:45:f4:46:ec:29:4b:01:18:63:97:00:3c:e8:36:
1d:ed:74:46:9e:96:bc:f7:f1:d6:38:0b:20:42:c3:
2e:ec:6c:83:31:0b:cd:0c:67:f4:67:b0:3d:9b:08:
83:e1:1d:26:e4:28:9b:8d:fa:31:b4:03:f3:16:45:
bd:b7:69:85:c2:49:73:1c:a6:45:29:33:a3:61:8e:
7c:f4:be:c8:c1:55:47:f4:cc:cc:31:06:8c:6c:85:
72:f3:4d:0e:56:11:65:18:89:6d:aa:0a:b5:24:7a:
e6:53:86:3c:31:19:f4:e6:7c:ce:a4:85:e0:c3:c0:
66:b7:36:c7:e6:10:10:a8:03:0d:e4:41:fe:8a:1d:
a5:a0:02:20:86:74:0f:3f:73:1c:fa:48:19:3a:35:
9b:7a:27:50:92:a8:2f:de:cf:6b:dc:d2:95:b8:77:
37:bd:3c:cf:35:ed:c8:db:4b:a1:6c:91:48:59:13:
f7:82:bc:e8:24:db:c1:43:2d:1e:a2:2a:fc:c3:58:
f9:95:9f:ce:41:1d:81:ee:23:2b:ee:c4:b5:5b:b9:
3a:4e:57:05:d3:53:ae:03:35:b7:ae:e6:74:89:c7:
5d:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:5F:AE:FD:CF:1B:7F:57:43:F0:1F:5B:3A:65:6F:E4:84:86:D3:B0
X509v3 Authority Key Identifier:
keyid:1E:9F:DC:7F:B3:9E:BB:BE:D4:EE:54:F7:03:D3:AC:61:53:DD:EE:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/L1-u_c8bf1dD8B9bOmVv5ISG07A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.134.158.0/23
185.232.16.0/24
Signature Algorithm: sha256WithRSAEncryption
30:98:dc:05:29:f8:d2:02:8a:da:24:43:61:cc:2e:29:c8:30:
86:c1:84:ec:bf:9a:58:5a:c3:6b:3c:d9:a3:02:86:e3:c0:cf:
9b:a2:80:36:f5:fb:ae:8f:17:b1:2b:8d:5d:26:ca:ba:38:c0:
49:aa:7f:85:62:32:04:51:3a:3e:0b:bb:d5:1a:be:f4:36:0d:
d0:f7:6b:2d:cc:75:7e:e2:bd:64:52:16:85:5b:02:d4:1d:4a:
c0:8d:98:22:aa:17:70:87:ee:1a:20:57:fe:ef:84:f0:1d:93:
e1:da:85:8b:aa:14:2d:11:ba:bb:d9:d7:40:ca:0a:97:d0:6c:
4f:ce:0a:b5:06:2a:9f:be:34:18:c1:af:87:5c:6d:df:99:a8:
35:dc:a5:5a:e9:44:0f:f3:39:9d:1a:63:6d:c5:68:4a:c2:57:
79:4b:69:3b:81:0e:e8:a2:9d:9a:28:ee:a5:14:9b:f8:da:91:
3d:c8:8f:ee:72:13:34:f4:c0:8a:6a:68:de:5a:ef:88:43:b4:
aa:3b:9d:ef:9b:6d:c5:cf:ba:5a:70:2f:52:a9:64:ae:e2:66:
6f:43:e8:d5:a8:28:4e:d9:5a:f2:96:69:a6:dc:07:fb:7e:65:
0e:99:5b:31:38:f5:37:07:89:20:ee:d9:ef:9a:30:3e:0d:89:
6a:b2:79:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:37:56 2025 by rpki-client