Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/4VjckDd86uJkvbcmlPMKAjziXBk.roa
File: 4VjckDd86uJkvbcmlPMKAjziXBk.roa (raw, json)
Hash identifier: V+1RDRVmLqZ0knVP5T/+VQq0aAgmFQTA2A8uZizucmA=
Subject key identifier: E1:58:DC:90:37:7C:EA:E2:64:BD:B7:26:94:F3:0A:02:3C:E2:5C:19
Certificate issuer: /CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Certificate serial: 0194214405AD0F7B0167F61FAFF6D363789A
Authority key identifier: 09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/4VjckDd86uJkvbcmlPMKAjziXBk.roa
Signing time: Wed 01 Jan 2025 09:48:13 +0000
ROA not before: Wed 01 Jan 2025 09:48:13 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51659
IP address blocks: 45.144.2.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:44:05:ad:0f:7b:01:67:f6:1f:af:f6:d3:63:78:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Validity
Not Before: Jan 1 09:48:13 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e158dc90377ceae264bdb72694f30a023ce25c19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:22:39:7b:7b:db:e1:36:78:12:5b:f6:e3:e1:
d8:a3:a9:86:4b:11:5f:5b:11:08:5a:ed:90:87:02:
6d:17:94:f9:a9:5f:79:c6:e6:65:8f:d6:ea:0f:6b:
40:ef:24:c7:43:84:d0:10:5c:ae:41:cf:99:cf:ca:
75:f2:f2:ff:d7:ac:05:1b:f1:8a:34:c1:79:83:90:
8a:3e:7d:3a:54:71:58:e9:89:73:93:33:4c:f7:19:
87:a8:72:5c:85:0a:01:70:ae:0c:0c:97:62:93:45:
76:08:24:37:be:f2:b8:0f:7d:f1:05:f5:21:83:4a:
f0:0b:df:1a:c5:5c:af:5d:25:59:48:21:e2:d4:53:
cc:4d:8d:17:2f:5b:81:44:3b:29:72:d5:c7:8e:ae:
7b:e4:ac:ab:73:5b:c7:27:49:c8:dd:57:e4:2c:97:
9d:ed:34:a7:3c:6d:af:42:f1:22:e8:4c:16:9a:2c:
a3:75:4e:13:83:e8:15:5f:82:0d:76:58:e3:e9:c9:
47:b0:13:9b:03:d6:01:db:87:b6:64:45:a6:c8:90:
39:0c:02:3b:41:53:5d:95:dc:1b:6c:41:fd:da:98:
a3:dc:22:75:70:f4:e3:9b:eb:27:be:8a:47:e1:86:
79:95:4c:d3:a0:38:50:98:7a:de:a8:0e:ec:57:01:
13:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:58:DC:90:37:7C:EA:E2:64:BD:B7:26:94:F3:0A:02:3C:E2:5C:19
X509v3 Authority Key Identifier:
keyid:09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/4VjckDd86uJkvbcmlPMKAjziXBk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.144.2.0/23
Signature Algorithm: sha256WithRSAEncryption
64:71:8f:db:eb:4b:79:f2:20:f5:5e:c3:22:35:94:d5:ab:e9:
e7:e5:15:6f:38:1f:e2:0a:fc:b0:1e:f3:e4:12:4e:89:b0:96:
12:18:a0:a9:d5:88:b4:4b:d3:df:af:9d:cc:a9:35:87:0b:e5:
6b:65:cf:68:b4:35:ab:f0:4f:72:9b:1c:54:3b:c3:cc:24:09:
13:da:cc:5d:4f:8e:06:53:26:56:62:d9:87:fa:b7:1f:49:3f:
2b:2d:a1:4c:78:6a:89:f5:da:99:fd:97:7c:30:d0:20:2a:1a:
2b:4b:6e:cf:30:4b:f0:e1:74:55:25:4c:1a:87:15:85:b8:ad:
05:2c:a5:31:23:3b:b7:6e:f4:b9:9d:e4:d9:d0:09:a4:4e:29:
8f:10:63:9f:f3:af:0b:72:4a:fd:12:85:31:bf:7f:5b:63:0d:
6e:fb:38:03:b2:32:53:b1:72:a4:0e:8b:d4:6b:b1:1b:9c:c1:
a1:cd:f1:5f:28:40:c6:a6:3c:54:72:52:7b:44:7c:47:d7:22:
18:c0:8d:b0:91:82:9f:8c:f6:72:48:a9:80:eb:08:b2:fc:fe:
8b:26:d0:58:17:2e:19:cd:70:43:63:9b:00:6a:a6:f6:fd:d4:
fb:5e:b9:65:52:d2:cf:ae:d9:5a:3b:c2:4e:b1:8c:0e:51:9e:
37:ee:1a:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 03:27:23 2025 by rpki-client