Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/09cea0-ef2b-4f20-a19a-eb5a627e76a3/1/dQ4y2x688XsG8rEL7o8Sp4uIl8M.roa
File: dQ4y2x688XsG8rEL7o8Sp4uIl8M.roa (raw, json)
Hash identifier: LuvxH8ju8nmShoj6OHN3o8s0V6hBxEddqrv3+BFDAgQ=
Subject key identifier: 75:0E:32:DB:1E:BC:F1:7B:06:F2:B1:0B:EE:8F:12:A7:8B:88:97:C3
Certificate issuer: /CN=4c37f27eb4997b3bef9f28266a39694050fe74f9
Certificate serial: 0194258FA02BA1EFF7E5DF5A32D31323828A
Authority key identifier: 4C:37:F2:7E:B4:99:7B:3B:EF:9F:28:26:6A:39:69:40:50:FE:74:F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TDfyfrSZezvvnygmajlpQFD-dPk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/09cea0-ef2b-4f20-a19a-eb5a627e76a3/1/dQ4y2x688XsG8rEL7o8Sp4uIl8M.roa
Signing time: Thu 02 Jan 2025 05:49:17 +0000
ROA not before: Thu 02 Jan 2025 05:49:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 63889
IP address blocks: 45.121.104.0/24 maxlen: 24
45.121.106.0/24 maxlen: 24
45.121.107.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:a0:2b:a1:ef:f7:e5:df:5a:32:d3:13:23:82:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c37f27eb4997b3bef9f28266a39694050fe74f9
Validity
Not Before: Jan 2 05:49:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=750e32db1ebcf17b06f2b10bee8f12a78b8897c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:c6:28:7e:94:27:b0:60:4b:29:9c:fa:a6:3c:
cd:20:92:18:ba:0e:ae:7d:5a:c0:0d:78:59:77:dc:
69:41:ba:63:38:7c:16:4e:72:d4:63:9e:ba:8c:96:
80:81:ea:c9:58:32:4c:8b:ce:7f:56:c7:81:d2:4c:
52:30:1d:f7:02:64:e6:df:0f:0e:97:0b:00:1a:8c:
80:f5:72:bf:b7:62:d1:a0:82:c5:be:0d:5d:7c:7d:
37:10:86:57:fe:ce:16:66:1b:5e:7f:b5:98:4b:1a:
7f:42:80:46:95:70:ec:02:10:79:2c:7b:ff:23:54:
7b:2f:1e:e3:e5:87:26:ea:57:02:33:f8:7f:74:0e:
a3:b1:45:bf:1a:8c:95:ee:80:53:68:82:e3:51:e1:
03:8c:cb:cb:c3:95:61:dd:1d:94:1f:df:9f:7a:8c:
e6:62:7d:58:e8:60:41:cb:a5:68:1a:18:46:0f:8f:
ae:bb:f1:c2:6c:ab:a5:43:dd:61:52:90:18:57:8e:
d1:7a:86:f9:ea:5c:d9:70:e2:56:a1:eb:8f:13:b1:
f0:96:ab:8b:0e:2e:3c:04:b1:ca:bf:9e:50:eb:dd:
34:0d:d5:71:c0:73:41:ad:6e:8a:81:5d:22:b4:56:
ce:70:2e:63:47:ef:22:08:41:38:35:03:e0:28:59:
ff:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:0E:32:DB:1E:BC:F1:7B:06:F2:B1:0B:EE:8F:12:A7:8B:88:97:C3
X509v3 Authority Key Identifier:
keyid:4C:37:F2:7E:B4:99:7B:3B:EF:9F:28:26:6A:39:69:40:50:FE:74:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TDfyfrSZezvvnygmajlpQFD-dPk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/09cea0-ef2b-4f20-a19a-eb5a627e76a3/1/dQ4y2x688XsG8rEL7o8Sp4uIl8M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/09cea0-ef2b-4f20-a19a-eb5a627e76a3/1/TDfyfrSZezvvnygmajlpQFD-dPk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.121.104.0/24
45.121.106.0/23
Signature Algorithm: sha256WithRSAEncryption
b8:57:11:d1:da:7a:8c:3d:2b:44:33:7a:ee:7f:57:d8:c9:46:
5c:ce:e6:98:68:e7:79:81:e7:f6:6e:f9:3c:7e:a7:12:a2:6c:
f3:82:d6:b3:86:2a:3c:1d:7d:cd:7a:24:c3:a4:98:1b:ce:a8:
a5:be:f1:9a:1b:80:f7:02:92:75:4d:a2:2d:22:95:1d:ac:24:
c0:08:03:6d:cc:eb:ab:63:42:85:6f:4f:07:7c:d9:20:54:7a:
4c:d4:c9:68:0e:b6:e6:e4:9e:2b:3c:53:86:f7:3f:78:1b:25:
58:17:92:3d:43:ad:c7:63:51:1b:3d:b7:26:0d:4e:ac:3d:b2:
af:60:16:9f:bc:bd:4d:96:08:17:a3:88:38:2d:6f:55:51:fb:
29:6d:f4:23:f2:38:3c:ca:ae:ca:82:c5:fd:af:28:2e:51:20:
8e:e1:42:18:00:54:9c:40:bd:04:b0:d3:7a:0a:81:0d:63:00:
bc:0a:a1:12:6e:f3:26:fb:b5:c5:72:62:70:38:4e:7a:16:17:
35:fd:42:5b:5e:fa:be:74:d6:d6:c3:1b:f5:00:4d:07:e7:e0:
ba:e4:ea:35:4b:29:57:f4:07:66:b3:48:ce:e4:75:9a:ac:8e:
27:4d:ee:ab:93:cf:fc:87:a8:78:b1:be:1e:18:aa:53:ca:71:
68:97:c3:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:59:50 2025 by rpki-client