Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/mVReVPWxGfnvhL1fHkj4mVXfIq0.roa
File: mVReVPWxGfnvhL1fHkj4mVXfIq0.roa (raw, json)
Hash identifier: YVfRFO+rPp1uTqLUMqGDWKg9xl15o6g3NAJFZZrHU3Q=
Subject key identifier: 99:54:5E:54:F5:B1:19:F9:EF:84:BD:5F:1E:48:F8:99:55:DF:22:AD
Certificate issuer: /CN=60581e673d80f7474936b21337eafcc1bdc385e9
Certificate serial: 019425FD14A9972EADA7FBD3A82704810C43
Authority key identifier: 60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/mVReVPWxGfnvhL1fHkj4mVXfIq0.roa
Signing time: Thu 02 Jan 2025 07:48:50 +0000
ROA not before: Thu 02 Jan 2025 07:48:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 6461
IP address blocks: 45.43.132.0/22 maxlen: 22
104.249.56.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:14:a9:97:2e:ad:a7:fb:d3:a8:27:04:81:0c:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60581e673d80f7474936b21337eafcc1bdc385e9
Validity
Not Before: Jan 2 07:48:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=99545e54f5b119f9ef84bd5f1e48f89955df22ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:90:b8:3a:c5:5d:50:83:27:8d:4c:5e:a9:e6:
b6:68:9c:59:92:f8:7d:c6:8b:c7:6e:a1:e2:41:c5:
51:22:3f:fd:08:81:f1:18:c3:f3:f9:39:01:80:67:
69:ed:a4:24:d6:05:c9:98:06:eb:a5:05:13:80:dc:
f9:f3:cd:ba:56:f6:b5:40:17:6a:d2:5f:20:1f:8a:
a1:1d:8e:6a:4e:bf:8d:19:47:18:0f:22:86:f9:76:
1e:8b:9a:57:14:4a:57:02:8e:e0:77:e0:e7:a9:f9:
5f:05:69:21:9e:0c:38:0e:fd:89:d3:c6:5f:1c:75:
2c:fa:0d:4e:1d:91:d3:0f:ea:f8:75:ca:21:25:f7:
84:1b:1c:46:2a:6b:b8:58:47:f7:42:ba:6c:86:25:
cf:2b:0a:d5:c4:63:22:58:30:64:1f:6a:45:c2:79:
c0:9b:17:49:69:6e:10:fc:1d:ac:9c:00:ea:80:04:
49:5c:cd:68:4d:48:bb:f9:ae:e3:d4:12:b0:b7:12:
81:a1:e0:1c:3f:c3:3a:42:50:60:ff:13:88:d4:28:
8f:87:aa:e8:fe:4d:f8:4c:02:bd:05:1d:81:7c:8f:
66:34:97:7f:ea:89:a1:95:79:97:d6:7e:f6:fb:69:
4e:d0:0c:17:49:58:79:c0:43:28:f6:1f:bd:d6:9f:
0d:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:54:5E:54:F5:B1:19:F9:EF:84:BD:5F:1E:48:F8:99:55:DF:22:AD
X509v3 Authority Key Identifier:
keyid:60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/mVReVPWxGfnvhL1fHkj4mVXfIq0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.43.132.0/22
104.249.56.0/22
Signature Algorithm: sha256WithRSAEncryption
5f:86:75:83:36:90:4e:a5:4b:01:2b:07:3b:51:7c:51:70:2a:
ec:c6:bb:99:0c:e6:cc:88:1b:a8:8f:3c:02:03:92:11:fd:bd:
f1:dd:7d:fb:45:4f:3c:ea:82:3c:16:8e:70:88:24:b3:3a:e9:
39:22:23:30:ff:3e:a0:be:fb:25:5b:49:7e:91:d6:2f:dc:d0:
b0:24:3c:43:d9:43:b4:60:09:00:20:ad:02:01:26:16:45:05:
8a:a7:f6:73:16:96:13:64:a2:6e:ac:5a:3e:96:12:39:be:c3:
52:b8:0f:0b:c7:8a:20:10:74:ad:a8:83:a8:3f:16:90:45:da:
e7:2f:4a:91:2e:37:2b:bf:db:ed:13:01:d5:27:36:2c:d9:52:
e3:2d:55:f6:e5:45:55:dd:37:ac:18:16:88:39:de:fa:e2:e5:
ee:d7:fa:50:e4:52:62:12:36:82:f7:dd:58:e1:00:0f:bd:e9:
bc:33:49:59:c2:ac:84:14:30:8a:87:3c:39:f2:80:18:f8:d9:
d0:1c:26:2f:ac:6b:ed:f4:00:36:a4:22:09:d3:77:e9:fa:87:
f9:81:f9:45:a7:b6:52:db:53:8c:7f:a7:b4:49:bd:72:53:66:
96:34:1a:c6:df:3d:09:3e:0a:24:2f:ef:db:df:56:79:9a:7d:
ec:25:2a:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:45:20 2025 by rpki-client