Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/fTd1eIaB4vhWEBxN72RKV6_jgEo.roa
File: fTd1eIaB4vhWEBxN72RKV6_jgEo.roa (raw, json)
Hash identifier: xI4UtMQv84j84ik6geJoquxCnebai64banZeqCEF+8o=
Subject key identifier: 7D:37:75:78:86:81:E2:F8:56:10:1C:4D:EF:64:4A:57:AF:E3:80:4A
Certificate issuer: /CN=6222e1c2a5315334b66d80f78d5b50b42e480b9c
Certificate serial: 0193B1FE70923A0FE69384964FEBAF73D242
Authority key identifier: 62:22:E1:C2:A5:31:53:34:B6:6D:80:F7:8D:5B:50:B4:2E:48:0B:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YiLhwqUxUzS2bYD3jVtQtC5IC5w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/fTd1eIaB4vhWEBxN72RKV6_jgEo.roa
Signing time: Tue 10 Dec 2024 19:14:22 +0000
ROA not before: Tue 10 Dec 2024 19:14:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 62300
IP address blocks: 45.139.179.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:b1:fe:70:92:3a:0f:e6:93:84:96:4f:eb:af:73:d2:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6222e1c2a5315334b66d80f78d5b50b42e480b9c
Validity
Not Before: Dec 10 19:14:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7d3775788681e2f856101c4def644a57afe3804a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:4c:2a:f2:d3:47:84:20:30:5e:8d:90:0d:d0:
fb:eb:37:67:31:69:3e:2d:f0:36:cf:fb:6b:53:44:
f3:48:50:6f:fe:73:2c:df:1c:58:95:02:1a:5c:62:
85:54:18:84:74:9f:f3:5f:fc:8b:9f:46:42:93:1e:
c8:a6:08:f3:02:03:06:bb:0d:b4:5a:76:ff:91:c3:
6f:dd:97:6f:d1:89:e5:85:8d:5a:44:7c:5b:77:12:
35:ca:5b:80:3b:18:ff:fe:19:e1:2a:60:e9:8e:87:
8a:ba:5a:d6:f8:dc:e0:39:f1:ce:14:8d:92:08:9c:
19:11:17:e7:a4:28:86:05:99:c5:32:eb:10:da:d3:
0f:90:bb:bb:7d:de:bc:d5:af:8a:bd:1c:b7:46:ec:
f7:e0:26:08:92:fb:e8:d8:5f:b2:f3:02:b7:88:fc:
f7:a6:7b:60:3e:f5:11:59:63:60:bc:90:77:7e:73:
2a:18:8b:cd:4c:f1:14:44:58:73:b1:21:c1:d5:e8:
18:25:1e:c0:79:c1:2a:05:04:1d:01:c1:11:4d:6f:
2e:8f:21:cf:35:a5:b8:1b:47:88:4c:46:42:29:f3:
05:6e:7d:ce:56:d4:49:98:8d:ac:38:9f:80:04:e3:
bc:e3:2d:96:a6:fe:28:b3:09:09:5e:cf:fd:f2:16:
2b:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:37:75:78:86:81:E2:F8:56:10:1C:4D:EF:64:4A:57:AF:E3:80:4A
X509v3 Authority Key Identifier:
keyid:62:22:E1:C2:A5:31:53:34:B6:6D:80:F7:8D:5B:50:B4:2E:48:0B:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YiLhwqUxUzS2bYD3jVtQtC5IC5w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/fTd1eIaB4vhWEBxN72RKV6_jgEo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/YiLhwqUxUzS2bYD3jVtQtC5IC5w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.139.179.0/24
Signature Algorithm: sha256WithRSAEncryption
aa:8d:43:e1:7f:d0:d7:a2:17:fc:e8:17:54:f7:93:d0:f7:04:
f7:1e:41:1e:c8:3a:92:e8:ca:9d:bd:c0:92:10:a1:a3:f0:ad:
a1:67:1e:ad:7e:a4:3a:7c:2f:43:03:02:f4:25:6d:f3:35:f3:
ff:6c:20:d8:9e:47:7c:da:1d:2a:71:b2:63:c7:38:d6:c6:9c:
27:a2:2c:85:87:b3:c9:06:b9:ab:0b:c0:f9:d4:c9:cc:ae:29:
14:d3:b8:5f:71:83:8c:8f:e7:00:05:f2:98:bc:09:12:9d:1c:
52:49:89:f3:a5:5a:a4:6a:8d:79:a9:66:1f:9a:d2:d0:bb:41:
7e:03:02:a8:d2:31:65:a7:b7:b0:c9:88:be:5c:ab:fd:f6:25:
27:90:bf:8b:d4:b0:a2:d8:47:a9:d0:53:d3:b0:8d:c0:ff:cd:
31:f2:ad:16:3f:3d:ec:c9:82:3e:8e:23:0f:b8:4a:11:82:d5:
6a:fe:34:e5:be:9f:7a:9c:f2:77:78:0a:2e:45:8d:35:25:9e:
45:4e:45:d3:b2:9e:31:63:1c:28:f6:d1:12:57:71:ca:64:34:
92:28:e1:4c:32:04:25:c3:d3:0a:4f:85:e5:48:88:52:f8:1f:
9c:a6:0b:57:ca:05:1f:05:cd:82:e2:e0:38:c7:b0:ae:78:9b:
c9:b2:5e:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 03:51:17 2025 by rpki-client