Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/8ca3bc-a875-4507-91cc-bcefa45658cc/1/Vm7h2Zrg5WwxF-HPazBv9CqYs8c.roa
File: Vm7h2Zrg5WwxF-HPazBv9CqYs8c.roa (raw, json)
Hash identifier: cb9QK4NFVsGWjyY8wXEFMswKwrkLQ1f+wv2TQBdse24=
Subject key identifier: 56:6E:E1:D9:9A:E0:E5:6C:31:17:E1:CF:6B:30:6F:F4:2A:98:B3:C7
Certificate issuer: /CN=1f53c06ca7976d737b23bc72768a228c397faf2f
Certificate serial: 0194228E142084464C8D5F8F5DF95BCCD23A
Authority key identifier: 1F:53:C0:6C:A7:97:6D:73:7B:23:BC:72:76:8A:22:8C:39:7F:AF:2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H1PAbKeXbXN7I7xydooijDl_ry8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/8ca3bc-a875-4507-91cc-bcefa45658cc/1/Vm7h2Zrg5WwxF-HPazBv9CqYs8c.roa
Signing time: Wed 01 Jan 2025 15:48:44 +0000
ROA not before: Wed 01 Jan 2025 15:48:44 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42864
IP address blocks: 45.132.100.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8e:14:20:84:46:4c:8d:5f:8f:5d:f9:5b:cc:d2:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f53c06ca7976d737b23bc72768a228c397faf2f
Validity
Not Before: Jan 1 15:48:44 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=566ee1d99ae0e56c3117e1cf6b306ff42a98b3c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:7f:c3:f2:c3:db:8a:a8:72:4a:31:32:72:21:
e0:7d:a3:e2:b6:62:31:3c:02:fd:ef:21:41:ca:e0:
6b:3e:81:e6:08:1c:c4:a8:01:78:05:68:92:92:a3:
09:e8:f2:9d:14:ca:c6:9a:ea:65:59:f3:5b:28:f7:
b7:e2:09:40:04:93:a3:e7:25:5d:13:da:7d:1f:49:
1d:c5:8c:61:fd:10:41:a0:45:4e:e8:b2:5a:dd:f4:
eb:dd:57:d7:2c:41:2b:e0:6b:07:72:ba:e2:da:4e:
d6:53:ac:81:12:d1:99:68:17:25:99:8d:a3:0a:4c:
23:a4:e8:7e:f6:e2:50:84:bb:e3:c8:eb:2a:7c:47:
84:b1:5d:5a:fd:e3:02:af:a0:7f:03:44:1a:f5:df:
5d:a7:7b:cf:58:78:0a:f2:01:3a:52:47:1b:cf:eb:
1f:01:19:ea:ab:a4:24:31:bd:5d:03:4f:7d:48:49:
d5:cf:57:bd:ff:fa:a2:fc:1c:47:7c:b2:7e:a8:3a:
60:20:76:f6:e9:c4:76:a6:ee:56:20:ad:7a:75:8a:
35:a7:6f:c0:80:7a:b7:7d:4b:85:08:5b:e4:b0:1c:
b0:48:90:ac:22:00:97:d7:5d:66:16:83:32:8c:03:
42:fa:66:14:b2:80:c4:c8:76:c5:2e:74:36:99:e1:
14:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:6E:E1:D9:9A:E0:E5:6C:31:17:E1:CF:6B:30:6F:F4:2A:98:B3:C7
X509v3 Authority Key Identifier:
keyid:1F:53:C0:6C:A7:97:6D:73:7B:23:BC:72:76:8A:22:8C:39:7F:AF:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H1PAbKeXbXN7I7xydooijDl_ry8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/8ca3bc-a875-4507-91cc-bcefa45658cc/1/Vm7h2Zrg5WwxF-HPazBv9CqYs8c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/8ca3bc-a875-4507-91cc-bcefa45658cc/1/H1PAbKeXbXN7I7xydooijDl_ry8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.132.100.0/22
Signature Algorithm: sha256WithRSAEncryption
7a:a3:8d:39:0e:b1:a7:18:67:3d:bd:36:a0:c3:ca:bd:4d:1b:
53:ef:8f:02:a6:98:47:83:51:11:8a:cc:80:3e:87:75:81:15:
cb:74:25:bc:1b:f1:91:7f:fd:b3:72:0d:0d:01:5c:77:af:86:
11:b0:2c:1d:9b:38:bc:65:99:27:e0:2a:c0:93:93:8a:69:44:
7c:d5:b6:c5:f1:a5:04:82:fc:77:18:09:91:cc:e5:12:c1:74:
4a:66:14:01:d3:06:45:bc:38:88:83:5a:05:1f:da:04:11:d5:
02:74:52:3b:11:c3:49:95:c3:e6:f3:d4:c4:db:c1:a7:07:db:
82:53:ca:2b:75:8b:7c:7c:54:9f:99:ee:49:fa:ec:e8:21:23:
97:c2:70:3c:87:43:89:70:b2:20:72:32:95:4a:2b:f8:dd:65:
75:95:03:bb:3e:4c:43:fc:87:42:b4:70:c0:c7:ac:66:28:d5:
a9:8e:e5:1b:e3:9b:eb:7c:95:f2:2f:db:e7:c3:a5:be:3c:ed:
2e:60:7c:83:2e:e0:93:e5:23:9d:a5:7b:d6:a5:71:e6:1d:72:
59:82:b5:d7:0f:4a:4e:0a:64:2c:00:50:5a:85:fb:fa:a3:6c:
99:91:05:9e:5f:c7:2e:d0:e4:40:3e:96:88:29:99:2b:06:d9:
aa:d7:98:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 05:18:09 2025 by rpki-client