Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/AM2USvYg1pcBoAqYCgN66R8K5Io.roa
File: AM2USvYg1pcBoAqYCgN66R8K5Io.roa (raw, json)
Hash identifier: fodTLk78O9E6UOMH8sXffk6yX2tExhQur7nSMlUqlfQ=
Subject key identifier: 00:CD:94:4A:F6:20:D6:97:01:A0:0A:98:0A:03:7A:E9:1F:0A:E4:8A
Certificate issuer: /CN=6222e1c2a5315334b66d80f78d5b50b42e480b9c
Certificate serial: 019420D5DED344EF5C6C74513D5CE4262A3B
Authority key identifier: 62:22:E1:C2:A5:31:53:34:B6:6D:80:F7:8D:5B:50:B4:2E:48:0B:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YiLhwqUxUzS2bYD3jVtQtC5IC5w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/AM2USvYg1pcBoAqYCgN66R8K5Io.roa
Signing time: Wed 01 Jan 2025 07:47:54 +0000
ROA not before: Wed 01 Jan 2025 07:47:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214424
IP address blocks: 45.129.170.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d5:de:d3:44:ef:5c:6c:74:51:3d:5c:e4:26:2a:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6222e1c2a5315334b66d80f78d5b50b42e480b9c
Validity
Not Before: Jan 1 07:47:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=00cd944af620d69701a00a980a037ae91f0ae48a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:4f:56:54:06:39:a5:5b:9c:eb:dd:60:c4:ad:
3c:33:e3:fd:91:63:a7:c6:ad:93:a2:da:a6:ff:1c:
65:13:f9:7f:27:6a:60:72:8d:a8:4e:a2:44:58:9c:
cd:0b:ef:b7:57:7f:d9:0a:50:da:20:f4:1c:17:e7:
fd:4b:e4:ef:3d:7b:39:dc:13:57:62:49:64:a4:0c:
16:be:4e:e7:5c:52:97:10:f9:dc:ad:67:ee:75:f8:
df:bd:fe:da:3b:92:60:dd:c6:82:67:67:36:a3:ab:
a7:9b:7f:30:c6:ac:fa:be:08:db:3b:ac:a2:7b:9c:
8d:5d:7b:eb:11:53:ad:50:48:42:87:2a:e8:d8:c2:
b3:f6:79:42:da:e6:60:9e:44:fa:94:17:49:9a:20:
20:23:ef:3b:9e:2d:0a:06:01:f8:47:fe:98:58:ea:
d4:17:7b:da:ba:a9:22:24:98:2e:67:13:14:a6:b5:
dc:cb:7a:14:e4:a4:64:dc:f4:b2:c9:ba:9e:fc:fc:
4b:8e:98:4e:6c:45:87:c5:1e:22:c7:f3:2a:83:70:
4a:e4:82:1b:a1:bb:11:50:e3:c0:f4:2e:64:ad:24:
24:0d:d6:73:58:ec:94:4b:4a:aa:d4:30:b0:a0:bb:
3c:42:87:d2:c3:73:91:b4:42:e2:ad:41:b4:13:e6:
c2:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:CD:94:4A:F6:20:D6:97:01:A0:0A:98:0A:03:7A:E9:1F:0A:E4:8A
X509v3 Authority Key Identifier:
keyid:62:22:E1:C2:A5:31:53:34:B6:6D:80:F7:8D:5B:50:B4:2E:48:0B:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YiLhwqUxUzS2bYD3jVtQtC5IC5w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/AM2USvYg1pcBoAqYCgN66R8K5Io.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/YiLhwqUxUzS2bYD3jVtQtC5IC5w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.129.170.0/24
Signature Algorithm: sha256WithRSAEncryption
34:8b:5d:19:d3:00:fb:a5:af:8c:00:51:d7:ec:7f:cd:e1:7a:
96:7a:1a:4d:17:a6:c8:52:f2:3c:a7:bc:ec:18:90:d2:76:f2:
a4:99:a6:2e:fa:f9:f2:02:45:35:fb:3a:07:2e:8e:ba:b1:69:
11:fa:60:85:b6:40:83:db:ef:fb:55:ad:28:e1:c0:c7:a0:b2:
c1:67:61:85:0b:50:f4:62:7d:b6:b2:6b:37:ad:ac:9c:9a:0b:
d8:08:29:e3:88:c7:f0:41:59:4e:cf:b8:bb:4f:8a:4d:17:55:
b9:e0:dd:0f:ff:9f:75:a1:c6:43:2c:71:47:84:5e:be:8b:61:
55:8a:2f:cf:0e:3c:3b:0e:a3:f3:94:45:d5:e5:b2:62:39:38:
5b:15:a1:bd:15:8d:79:84:66:ce:03:1f:e5:f4:87:ee:fe:60:
e1:8e:2b:a7:95:c0:7d:49:fb:9d:6f:a5:14:86:dc:7e:c1:61:
d4:99:27:69:9f:e7:67:68:00:40:76:74:c8:ef:f0:3b:5a:fa:
39:50:ad:57:8a:52:d1:9d:b9:b3:0f:ef:ce:f7:0a:ca:e7:9d:
b5:7c:ab:25:a7:82:06:21:6e:00:3a:41:0f:fb:bd:0b:05:a0:
56:7b:ae:ba:81:da:d8:12:fb:7f:9d:46:25:9e:7e:53:55:5f:
b7:1a:de:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 03:40:21 2025 by rpki-client