Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/CZKNcCBZhgcPDrbkdgCEL6XzQUg.roa
File: CZKNcCBZhgcPDrbkdgCEL6XzQUg.roa (raw, json)
Hash identifier: lelom6wT2zOiXS4aMH5OacBgbrtd7B457VJKd5blgxo=
Subject key identifier: 09:92:8D:70:20:59:86:07:0F:0E:B6:E4:76:00:84:2F:A5:F3:41:48
Certificate issuer: /CN=60581e673d80f7474936b21337eafcc1bdc385e9
Certificate serial: 019425FD1C0ECFF7C0226F054585369AFE6B
Authority key identifier: 60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/CZKNcCBZhgcPDrbkdgCEL6XzQUg.roa
Signing time: Thu 02 Jan 2025 07:48:52 +0000
ROA not before: Thu 02 Jan 2025 07:48:52 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 25369
IP address blocks: 45.150.34.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:1c:0e:cf:f7:c0:22:6f:05:45:85:36:9a:fe:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60581e673d80f7474936b21337eafcc1bdc385e9
Validity
Not Before: Jan 2 07:48:52 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=09928d70205986070f0eb6e47600842fa5f34148
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:9e:41:9e:c1:56:9d:eb:e8:54:20:fe:87:a6:
ba:79:bb:85:27:f9:61:80:dd:68:bb:3d:0e:06:57:
c9:5f:f7:77:1b:92:5f:79:fe:4f:92:56:72:38:17:
d7:95:2d:25:48:a2:a1:7e:1c:a4:04:61:c2:05:e1:
8b:f1:62:37:fb:9e:86:e2:d5:e7:11:6d:9c:0c:5a:
90:04:9c:b9:f8:2e:6e:05:d6:54:6b:a6:dd:72:5f:
bc:37:86:1c:75:24:b7:b7:1e:0a:41:c2:63:ab:f1:
c5:f3:fe:80:c8:96:13:78:19:db:d2:ec:20:59:a5:
5b:c2:aa:e9:76:7e:4c:d9:d5:c1:f2:a7:76:de:68:
3c:05:c3:db:0a:e2:f3:7a:5e:3a:a7:2c:07:1a:76:
6e:ca:cc:0d:6d:b4:d7:bc:e2:dd:f0:43:fd:19:d3:
d6:48:df:3a:d6:b3:04:b0:92:c9:b2:2d:8e:76:90:
b4:04:10:20:a4:a9:70:e7:71:59:fa:ce:1f:39:28:
39:39:cc:58:ee:b6:39:8c:fa:f6:28:d2:76:4e:ac:
d0:09:4a:37:99:fe:e2:57:bc:12:a8:5d:4b:22:b4:
68:62:58:48:26:04:02:fc:d5:5a:9d:1b:3f:91:89:
b6:fc:c6:ed:22:9c:dc:ed:ba:ba:66:e1:ee:18:84:
1d:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:92:8D:70:20:59:86:07:0F:0E:B6:E4:76:00:84:2F:A5:F3:41:48
X509v3 Authority Key Identifier:
keyid:60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/CZKNcCBZhgcPDrbkdgCEL6XzQUg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.150.34.0/23
Signature Algorithm: sha256WithRSAEncryption
49:9a:41:cd:12:dc:d7:66:70:fa:d0:a5:f3:c2:ff:ff:2b:5e:
28:73:f7:56:19:02:ea:2b:61:89:42:10:f0:da:97:2a:5f:6a:
76:8e:0c:d1:25:54:c4:38:43:61:45:db:55:c9:1a:57:e7:eb:
08:90:f6:87:da:0d:a1:b1:8b:db:91:2f:de:c7:7b:5b:b5:67:
e0:85:73:c2:f3:63:a4:8f:24:9d:56:b5:55:eb:1f:e6:00:1d:
96:0c:d2:45:2f:c9:e6:15:01:4e:44:be:3b:8e:37:13:07:73:
67:87:48:97:5e:f8:d0:64:a2:bc:92:ec:0c:69:1c:22:2d:87:
9a:95:b0:d7:5f:00:90:ff:b3:fc:03:f3:b8:95:2d:df:6b:e1:
ee:13:a1:9c:7c:75:d6:93:4c:06:6b:4b:37:20:e3:57:28:29:
b8:cf:8c:5f:c1:24:d5:d7:e5:e7:69:1e:97:ab:67:f8:8d:ba:
14:02:80:55:a8:ea:95:14:88:99:b7:3b:0e:69:b9:76:0b:b4:
7f:f2:b0:1d:25:e0:f7:d1:a2:98:ac:e0:38:ac:57:52:9d:96:
68:7d:d1:91:da:6c:3c:53:62:60:0e:49:0b:3b:f8:2a:6d:7a:
3a:a7:8b:55:75:f0:8b:b7:1c:a2:b4:20:81:b0:33:53:56:ed:
fd:7c:c6:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 01:22:22 2025 by rpki-client