Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/4ec217-e8d7-4e80-87cd-039de784d941/1/OyAkfI1EGhy6fQdg9QFEl_Msz3Q.roa
File: OyAkfI1EGhy6fQdg9QFEl_Msz3Q.roa (raw, json)
Hash identifier: /Uljkmv0MQSBXYcYI+fuzO06O1gitJbkjyB3+P6hKfA=
Subject key identifier: 3B:20:24:7C:8D:44:1A:1C:BA:7D:07:60:F5:01:44:97:F3:2C:CF:74
Certificate issuer: /CN=7292226567da72dd86883cadd5f3de6ffd5b3573
Certificate serial: 0193D5E0D7359C620F04A941888354A70157
Authority key identifier: 72:92:22:65:67:DA:72:DD:86:88:3C:AD:D5:F3:DE:6F:FD:5B:35:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cpIiZWfact2GiDyt1fPeb_1bNXM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/4ec217-e8d7-4e80-87cd-039de784d941/1/OyAkfI1EGhy6fQdg9QFEl_Msz3Q.roa
Signing time: Tue 17 Dec 2024 18:28:22 +0000
ROA not before: Tue 17 Dec 2024 18:28:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215385
IP address blocks: 45.117.232.0/22 maxlen: 24
176.119.217.0/24 maxlen: 24
2a07:9340::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:d5:e0:d7:35:9c:62:0f:04:a9:41:88:83:54:a7:01:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7292226567da72dd86883cadd5f3de6ffd5b3573
Validity
Not Before: Dec 17 18:28:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3b20247c8d441a1cba7d0760f5014497f32ccf74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:33:1a:4e:e4:56:88:97:b5:d1:b1:8f:d2:53:
07:26:4e:2c:ad:ef:9e:7c:3e:52:c4:fa:d4:76:45:
03:ff:6d:82:ec:a9:02:f9:5d:da:1e:4d:53:07:c6:
a8:99:89:b1:16:fc:ec:78:8a:b8:54:5a:0c:ce:3d:
dc:c4:01:91:8d:86:89:a9:ce:7a:01:28:f0:19:f5:
de:58:fc:e9:ed:c0:26:e1:1e:c8:5a:0d:71:ac:1f:
75:42:b8:46:04:a3:56:a4:50:5f:b7:cc:84:16:35:
6c:2b:14:6e:e5:b5:bc:e8:18:9a:b5:6a:2a:f2:01:
1d:6b:71:d6:f9:ea:0f:10:7d:e3:73:8f:ba:4a:13:
0f:07:f7:91:de:56:43:c4:5e:83:c9:df:a3:27:d2:
91:0c:4c:fa:c8:2e:99:31:b5:37:1e:ac:4c:5d:ab:
f3:c8:1e:ba:39:fd:db:4e:ec:7b:fa:57:f8:a9:80:
63:b1:14:2d:7e:9d:2d:14:b2:b8:c7:7d:57:8e:4c:
80:22:1d:49:f3:6a:b5:3d:5e:03:b5:76:ae:b0:14:
09:5e:b8:a2:3a:f6:4c:ae:08:bd:70:e8:e2:70:ef:
18:67:5f:2f:2b:14:a4:da:68:89:81:54:0f:e5:92:
7b:b4:e3:40:7a:fd:9a:73:1b:28:b5:c9:5a:29:e4:
99:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:20:24:7C:8D:44:1A:1C:BA:7D:07:60:F5:01:44:97:F3:2C:CF:74
X509v3 Authority Key Identifier:
keyid:72:92:22:65:67:DA:72:DD:86:88:3C:AD:D5:F3:DE:6F:FD:5B:35:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cpIiZWfact2GiDyt1fPeb_1bNXM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/4ec217-e8d7-4e80-87cd-039de784d941/1/OyAkfI1EGhy6fQdg9QFEl_Msz3Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/4ec217-e8d7-4e80-87cd-039de784d941/1/cpIiZWfact2GiDyt1fPeb_1bNXM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.117.232.0/22
176.119.217.0/24
IPv6:
2a07:9340::/32
Signature Algorithm: sha256WithRSAEncryption
47:b3:2e:03:46:f0:8f:98:13:71:cf:c3:dd:41:e6:66:78:6e:
43:0b:0e:1c:5f:f9:5e:ea:e6:d6:64:1d:c5:04:f5:92:42:c9:
3b:07:b3:6e:84:2d:3d:69:66:07:d5:05:77:25:85:00:cb:c3:
01:d0:b7:3a:6f:c5:60:54:28:ec:f1:31:c7:03:c4:f6:6d:5a:
0d:45:40:1d:10:50:3d:54:61:d0:9e:f8:8f:74:97:ef:cf:83:
33:0c:3f:63:4f:dd:41:5d:e5:c2:7f:e4:07:fe:8e:b5:92:f2:
1a:df:61:6d:ab:1f:c8:0f:38:27:11:bb:0e:1a:1b:ed:d9:64:
7c:42:d6:fe:59:bc:90:81:80:51:b3:66:c3:04:fe:75:58:90:
43:02:5c:b6:78:c0:de:3b:ca:61:ed:e6:46:55:a5:c8:e0:aa:
51:39:6a:19:e4:41:b5:54:c0:e3:c7:35:69:9c:a6:12:eb:bd:
01:60:a8:9d:82:67:09:f1:99:92:dc:fa:ad:76:71:9c:fe:84:
de:6d:0c:13:a4:17:cf:2f:dd:d0:10:8d:5f:ef:ce:a3:33:15:
2b:93:48:df:d9:73:b7:31:7b:9d:76:fe:bb:85:47:d3:ba:0f:
f5:ad:c9:ea:34:70:51:93:59:ca:e9:24:ad:df:22:cf:11:06:
d4:2b:02:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 06:17:56 2025 by rpki-client