Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/n79gEx7UYHYAYQJAVmYhIJISAXk.roa
File: n79gEx7UYHYAYQJAVmYhIJISAXk.roa (raw, json)
Hash identifier: Ga/fjtUMsCtFjXCxBUOwV4quSfUVa9AMdMAL8Bv2DdE=
Subject key identifier: 9F:BF:60:13:1E:D4:60:76:00:61:02:40:56:66:21:20:92:12:01:79
Certificate issuer: /CN=60581e673d80f7474936b21337eafcc1bdc385e9
Certificate serial: 019425FD2901D8A3AC6F41CAA9DADEFE7310
Authority key identifier: 60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/n79gEx7UYHYAYQJAVmYhIJISAXk.roa
Signing time: Thu 02 Jan 2025 07:48:55 +0000
ROA not before: Thu 02 Jan 2025 07:48:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209372
IP address blocks: 45.150.32.0/23 maxlen: 23
45.150.34.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:29:01:d8:a3:ac:6f:41:ca:a9:da:de:fe:73:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60581e673d80f7474936b21337eafcc1bdc385e9
Validity
Not Before: Jan 2 07:48:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9fbf60131ed46076006102405666212092120179
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:1a:2d:54:48:95:b3:08:c8:0c:04:8e:3a:8a:
a7:ce:ed:cc:70:2f:a7:38:28:12:b0:40:9f:e1:eb:
28:ea:98:a3:44:ba:bf:6b:98:d1:9c:9c:36:93:26:
c4:78:77:3c:7a:2b:29:41:76:0f:7d:66:77:b6:17:
02:9d:8e:a2:46:97:0f:7c:3a:6e:1e:64:8a:09:a3:
83:2d:fc:3d:6d:da:72:7a:f8:51:04:56:2d:23:a0:
52:97:8c:92:b0:73:28:ec:0e:b3:4c:af:b8:41:26:
1f:18:05:e0:c3:95:ea:c8:5b:8f:36:69:c5:e9:2b:
f9:df:ec:d6:64:90:31:e5:33:37:9d:5d:6e:f6:da:
67:92:80:df:64:84:f7:bb:be:f1:a2:4b:a7:a0:09:
7e:ff:ed:43:54:3b:90:8a:52:b0:49:79:98:28:e2:
7d:55:31:ce:98:4b:40:b2:f5:d8:28:35:b8:cc:39:
9d:60:72:bc:42:93:26:b4:56:df:54:c4:54:78:68:
a8:21:e1:87:bb:2a:f8:8e:80:fe:13:b6:a8:10:29:
32:c3:50:89:a9:f9:8b:5c:23:3c:24:9c:53:ac:59:
62:a6:e7:94:6b:16:fa:19:c8:15:48:da:03:23:e0:
7b:b6:be:d4:8e:95:b0:c7:d6:68:50:63:04:02:15:
6d:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:BF:60:13:1E:D4:60:76:00:61:02:40:56:66:21:20:92:12:01:79
X509v3 Authority Key Identifier:
keyid:60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/n79gEx7UYHYAYQJAVmYhIJISAXk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.150.32.0/22
Signature Algorithm: sha256WithRSAEncryption
13:c5:ae:9e:0b:5b:46:4c:cb:7e:5d:53:27:f0:c2:e9:05:f7:
a7:86:97:75:e1:8d:62:bf:c7:9e:56:16:87:5d:63:45:ab:65:
64:7b:e6:77:78:3e:08:f4:7b:a2:26:d5:cd:27:d0:bf:47:64:
03:cd:ac:e5:6f:62:00:aa:c8:83:92:94:b3:8d:9c:36:1f:94:
aa:15:42:ff:bd:f1:28:f6:8e:36:79:e4:bc:d9:58:3e:6a:67:
3b:5b:07:41:60:df:ff:66:4c:8e:a4:55:33:20:17:36:a0:76:
8f:2d:7d:35:f8:78:33:88:f1:3f:94:f2:2d:2b:ce:1c:3e:43:
1d:e0:3c:34:a0:27:56:66:6a:fc:24:34:d3:c6:b5:f5:3c:ab:
e7:69:b4:d3:96:27:ad:f6:3f:fe:66:1f:66:bd:6d:ca:ec:cf:
cc:64:45:22:1b:45:80:0a:53:11:e9:c5:ae:be:62:38:f8:da:
0b:4b:9e:cb:d0:7e:05:84:22:7a:30:07:17:83:9d:88:8d:1b:
6a:09:9b:0b:b3:dc:29:2e:00:93:08:51:fc:8f:62:df:05:14:
65:c7:fd:7d:fb:42:09:6e:1e:20:20:36:10:22:14:bd:d8:c8:
44:ba:6f:8d:b8:cd:65:4c:41:03:5a:ab:c2:6e:50:55:25:81:
66:ba:49:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 20:31:19 2025 by rpki-client