Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/05b5d8-4541-48a9-8c0a-44fd04393e2b/1/RV4nVFIosillQgPXUi3Rb-YOGqE.roa
File: RV4nVFIosillQgPXUi3Rb-YOGqE.roa (raw, json)
Hash identifier: 0C9sINAaIPU+479WwDvqzeKATHZb5hKHHasDy8WJ6tA=
Subject key identifier: 45:5E:27:54:52:28:B2:29:65:42:03:D7:52:2D:D1:6F:E6:0E:1A:A1
Certificate issuer: /CN=13e281475b7bf8d0fa1f669d5ad2de1635e8c04f
Certificate serial: 019425FC39541A786FDC8C7963E9BD37D379
Authority key identifier: 13:E2:81:47:5B:7B:F8:D0:FA:1F:66:9D:5A:D2:DE:16:35:E8:C0:4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E-KBR1t7-ND6H2adWtLeFjXowE8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/05b5d8-4541-48a9-8c0a-44fd04393e2b/1/RV4nVFIosillQgPXUi3Rb-YOGqE.roa
Signing time: Thu 02 Jan 2025 07:47:54 +0000
ROA not before: Thu 02 Jan 2025 07:47:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 61317
IP address blocks: 45.80.48.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fc:39:54:1a:78:6f:dc:8c:79:63:e9:bd:37:d3:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13e281475b7bf8d0fa1f669d5ad2de1635e8c04f
Validity
Not Before: Jan 2 07:47:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=455e27545228b229654203d7522dd16fe60e1aa1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:ce:1c:0f:cc:60:27:c6:f9:8e:fd:96:04:18:
c0:74:a6:e6:1d:6f:b7:a0:c3:01:59:a5:c7:44:36:
3a:70:a3:fc:0b:c5:e8:b2:8c:9c:bc:0a:4d:3c:6a:
9d:01:2d:9a:cb:2b:85:4b:c0:56:a1:e3:0f:25:70:
e8:5f:86:4b:e2:f6:58:ed:95:3a:61:28:9c:4f:ce:
3f:c6:35:ae:f9:9f:55:f4:b9:97:31:2a:ad:f5:79:
c2:c7:ef:f4:6b:05:61:84:00:aa:8e:9a:8d:7d:fa:
e0:71:bb:41:8e:30:64:b9:0b:11:79:9b:a8:eb:95:
c4:0f:6a:d9:ce:4e:35:31:72:c2:a2:f6:60:d3:a7:
28:69:5a:7c:46:9c:07:76:e9:d9:9a:20:70:eb:bc:
bb:f2:9c:8b:24:c5:7b:66:5b:5d:5d:b2:6d:62:8d:
f3:dc:67:2d:97:1a:95:1a:06:be:cd:5e:ba:a6:df:
fc:1a:78:9e:1f:bb:77:d8:e2:37:6a:a6:d5:cb:8a:
ff:f0:8b:53:a8:c8:80:58:95:30:9c:9d:a7:ba:f2:
b6:e5:26:13:1a:14:12:c1:52:64:61:d0:81:5d:18:
4c:67:e6:8b:e0:8b:3f:98:35:c6:94:25:38:38:3d:
8c:8b:7e:35:71:2f:73:21:6f:22:5f:fc:66:26:f1:
ec:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:5E:27:54:52:28:B2:29:65:42:03:D7:52:2D:D1:6F:E6:0E:1A:A1
X509v3 Authority Key Identifier:
keyid:13:E2:81:47:5B:7B:F8:D0:FA:1F:66:9D:5A:D2:DE:16:35:E8:C0:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E-KBR1t7-ND6H2adWtLeFjXowE8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/05b5d8-4541-48a9-8c0a-44fd04393e2b/1/RV4nVFIosillQgPXUi3Rb-YOGqE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/05b5d8-4541-48a9-8c0a-44fd04393e2b/1/E-KBR1t7-ND6H2adWtLeFjXowE8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.80.48.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:d8:9f:76:77:0e:29:fe:ac:52:79:10:b6:5a:a9:d9:88:ea:
35:7d:cb:57:96:c6:ce:20:3f:52:a4:85:dd:0f:7d:98:52:f4:
ed:94:35:9c:87:62:62:8d:10:2f:85:ae:d2:53:44:98:91:e2:
71:bf:8c:38:03:36:0f:4f:58:95:80:34:2e:ce:c5:3b:f2:c0:
40:43:42:90:05:ff:d3:49:a5:2d:4e:8f:45:e6:3f:95:73:73:
6b:a3:6f:9b:63:ff:ba:6c:e8:5a:a5:01:70:b4:bf:b3:34:a5:
19:62:50:24:e5:61:84:ba:ce:ee:70:62:fc:7a:3d:4c:60:ec:
80:e8:ea:b3:d3:ba:05:1c:84:b8:5c:ef:d8:b0:6e:3e:f4:7b:
52:c5:91:32:b6:7a:b5:a7:68:c8:45:5c:86:f2:65:55:d3:12:
3a:de:66:a6:8a:43:ea:72:e8:d6:37:7a:16:58:39:d9:2f:9f:
66:83:c0:01:88:6d:c1:06:8b:99:e8:b0:c4:ed:de:37:2a:13:
4d:17:48:aa:42:0f:fc:f0:3c:4a:45:b7:99:c3:9d:fa:ff:7c:
d3:47:6a:0b:b9:2c:6f:a4:df:1b:55:ff:76:a1:c4:69:cc:fe:
7b:0e:da:76:75:6f:07:82:1b:5a:2c:24:a3:52:ed:82:d9:ed:
b4:5e:fa:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 15:21:43 2025 by rpki-client