Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/RPUuvTefITVNtQz5BiNMhcWrd4U.roa
File: RPUuvTefITVNtQz5BiNMhcWrd4U.roa (raw, json)
Hash identifier: o804bchNKn2fVECCBYjp5GRxx9ubyhX6FAu11T6aNRA=
Subject key identifier: 44:F5:2E:BD:37:9F:21:35:4D:B5:0C:F9:06:23:4C:85:C5:AB:77:85
Certificate issuer: /CN=60581e673d80f7474936b21337eafcc1bdc385e9
Certificate serial: 019425FD12DD9362AB4498CCBA8BACC0D999
Authority key identifier: 60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/RPUuvTefITVNtQz5BiNMhcWrd4U.roa
Signing time: Thu 02 Jan 2025 07:48:49 +0000
ROA not before: Thu 02 Jan 2025 07:48:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 2914
IP address blocks: 45.150.32.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:12:dd:93:62:ab:44:98:cc:ba:8b:ac:c0:d9:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60581e673d80f7474936b21337eafcc1bdc385e9
Validity
Not Before: Jan 2 07:48:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=44f52ebd379f21354db50cf906234c85c5ab7785
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:dc:79:58:26:27:3a:2e:c4:60:53:c5:6d:eb:
9b:f3:93:d8:db:e7:f1:87:eb:f6:cd:5f:c9:69:48:
87:c9:95:e0:f0:5a:c4:b3:c7:3a:40:38:37:b1:82:
aa:aa:fe:53:23:45:2a:c9:eb:33:74:3e:b9:23:02:
a3:fd:d0:9b:7a:db:38:b6:3a:7c:43:4b:b9:40:66:
1b:fb:d1:ad:33:95:74:d9:17:e3:15:a2:24:1b:59:
92:dc:44:82:3d:0b:60:bf:ab:47:2d:54:a7:68:d5:
fc:f5:6d:eb:aa:66:b9:a8:17:d6:63:d7:65:9f:11:
d0:d2:b0:77:45:25:93:80:f5:b1:9a:94:c6:29:58:
87:88:77:9d:c0:1a:b6:53:f4:bd:99:35:64:a9:c5:
d1:ec:af:0a:5c:92:50:c0:3c:e9:27:e9:e2:8c:cb:
25:e3:34:72:98:94:60:62:3f:97:fb:80:21:e4:92:
7f:c9:ec:6d:e6:03:6d:72:00:35:72:96:d0:03:cc:
e9:1f:5d:85:c1:83:b6:d3:ed:26:bf:06:50:89:06:
0d:b9:55:6f:89:94:26:e8:68:f6:e7:a8:4e:07:6e:
b0:06:8f:21:f5:ae:ea:fa:22:ef:b8:2c:0a:d5:6b:
88:c1:4c:6f:50:62:18:ae:56:c4:ce:4f:2c:7f:b5:
f4:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:F5:2E:BD:37:9F:21:35:4D:B5:0C:F9:06:23:4C:85:C5:AB:77:85
X509v3 Authority Key Identifier:
keyid:60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/RPUuvTefITVNtQz5BiNMhcWrd4U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.150.32.0/23
Signature Algorithm: sha256WithRSAEncryption
98:88:16:d9:49:c6:f1:6c:1d:6f:e9:b3:e7:7f:0d:69:6a:d0:
d5:6b:bb:ec:45:94:73:9e:f6:ec:e2:c3:ea:25:23:ec:1c:21:
13:fe:2e:a6:b2:0a:ad:f2:7e:84:f7:5b:62:1c:94:24:dd:09:
e2:31:49:94:96:68:5c:49:cd:d0:9a:26:19:5e:cf:34:1f:30:
58:46:44:b7:25:ed:76:28:0d:e2:6e:e6:eb:f4:ba:8d:25:a5:
34:1b:e6:da:1c:ff:94:cb:96:94:ef:f3:8c:66:bb:5b:74:1b:
a0:2b:ee:61:57:c2:c1:33:80:14:39:2f:88:77:c5:ff:e6:7e:
38:e5:26:c7:a2:16:b1:30:e2:f9:a4:7a:06:e2:72:0f:a1:cf:
e9:04:6e:a9:fb:96:c9:a6:e2:a9:ee:5e:a6:ec:d4:95:ee:e4:
6a:18:2b:d4:8c:89:ed:e4:d8:12:0c:59:f5:fe:38:64:f2:c8:
3e:1c:50:a2:3f:86:1f:ce:22:7d:ad:da:9b:ce:bf:f3:64:a3:
3b:df:cf:7b:f0:a8:d9:c7:06:70:a5:3a:ec:e6:bc:ae:df:66:
13:1d:a2:e1:3a:b0:33:37:ca:c9:2b:6f:fa:d3:f4:01:fc:ca:
58:8b:e0:fc:e9:5a:e6:cb:e9:6e:9d:8a:8a:4f:8c:95:22:43:
5f:72:12:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 00:21:10 2025 by rpki-client