Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/6716ad-839e-4d68-a59b-fc065ac96cff/1/eSpdtY_DTNoE_EWI0bgDh9qHEoo.roa
File: eSpdtY_DTNoE_EWI0bgDh9qHEoo.roa (raw, json)
Hash identifier: YBq8ZW41q6qtSZ+85TFBZvdoaIa/kWAD0KTD+aN33hI=
Subject key identifier: 79:2A:5D:B5:8F:C3:4C:DA:04:FC:45:88:D1:B8:03:87:DA:87:12:8A
Certificate issuer: /CN=ab2d4da2f52ac5d8c4c03ccc30615fa0a39088d7
Certificate serial: 01856D419834FA7B32EA52D8918B4C668BA8
Authority key identifier: AB:2D:4D:A2:F5:2A:C5:D8:C4:C0:3C:CC:30:61:5F:A0:A3:90:88:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy1NovUqxdjEwDzMMGFfoKOQiNc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/6716ad-839e-4d68-a59b-fc065ac96cff/1/eSpdtY_DTNoE_EWI0bgDh9qHEoo.roa
Signing time: Sun 01 Jan 2023 12:14:53 +0000
ROA not before: Sun 01 Jan 2023 12:14:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209858
IP address blocks: 45.129.164.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:41:98:34:fa:7b:32:ea:52:d8:91:8b:4c:66:8b:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2d4da2f52ac5d8c4c03ccc30615fa0a39088d7
Validity
Not Before: Jan 1 12:14:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=792a5db58fc34cda04fc4588d1b80387da87128a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:8a:0d:c4:ab:1e:dd:2b:20:dc:ce:dd:27:3e:
5f:45:24:71:37:a5:36:e6:9c:2c:f9:e6:b0:dc:9d:
12:44:80:3d:06:a6:dc:f1:ec:78:6f:a9:18:7c:4b:
90:16:81:b0:ed:94:08:6d:31:90:8f:c2:70:d1:b1:
0d:7c:15:89:ab:e4:34:74:b6:f4:d2:10:8a:b9:53:
67:3a:c5:a6:f9:13:62:14:3d:de:61:71:43:8f:09:
5b:ff:c5:79:00:6e:a6:9e:ee:c2:6c:f1:dd:a8:e4:
d5:ff:e6:f8:29:b1:ed:32:24:d7:ee:cb:ac:7f:a6:
99:be:0f:ea:c5:7a:bf:4f:ae:45:90:13:a9:75:cb:
5a:f6:d2:81:26:31:fd:23:e6:78:29:42:8f:c6:6f:
17:9f:ca:4f:44:9d:0e:41:c1:e4:ba:9d:ed:25:11:
ad:0f:d2:76:83:c3:bf:49:25:58:3d:82:2b:21:af:
b0:70:fe:9b:e2:16:a6:df:53:12:93:2f:87:36:c2:
8f:0a:d0:b5:68:ba:80:15:74:8f:49:81:1b:d8:2f:
93:4c:92:b8:7e:e9:d8:15:5a:71:62:db:c7:aa:22:
f1:04:a4:55:09:60:2e:e2:31:23:d5:bb:cf:0c:66:
ae:70:52:3f:6b:82:bf:24:30:c1:1c:cc:e2:11:30:
88:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:2A:5D:B5:8F:C3:4C:DA:04:FC:45:88:D1:B8:03:87:DA:87:12:8A
X509v3 Authority Key Identifier:
keyid:AB:2D:4D:A2:F5:2A:C5:D8:C4:C0:3C:CC:30:61:5F:A0:A3:90:88:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy1NovUqxdjEwDzMMGFfoKOQiNc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/6716ad-839e-4d68-a59b-fc065ac96cff/1/eSpdtY_DTNoE_EWI0bgDh9qHEoo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/6716ad-839e-4d68-a59b-fc065ac96cff/1/qy1NovUqxdjEwDzMMGFfoKOQiNc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.129.164.0/24
Signature Algorithm: sha256WithRSAEncryption
89:43:be:49:c6:c1:4b:9c:5c:66:4c:f2:fd:d2:82:8b:5c:a5:
90:31:4c:c2:1c:d2:19:e9:e8:b8:a0:a3:d2:0f:e0:2f:bd:db:
8c:9b:79:8a:32:24:fc:2e:30:4c:d8:64:c0:04:78:e9:0a:1b:
65:7e:75:66:51:0c:b0:be:52:f5:8e:d8:4d:3c:41:50:fd:40:
fe:ae:8a:bf:f8:17:cb:26:5b:23:42:58:c0:51:16:db:96:64:
c9:bb:fa:c1:4e:3c:0d:68:33:6d:83:b5:90:e6:8e:0c:28:f9:
6b:8b:fe:3e:c2:9a:b1:fd:05:64:c7:52:20:67:ca:3a:1b:12:
96:be:d9:e8:f8:2a:6c:23:f9:04:40:72:fc:19:26:98:3d:c4:
01:61:40:3c:00:cb:72:cb:cb:95:a1:dd:09:1e:6d:ff:77:97:
90:63:c2:e9:41:5a:73:c0:4f:18:c4:21:77:69:43:d5:76:19:
91:cb:be:a3:fb:a6:d1:1f:53:4a:50:04:7b:93:5c:c0:e2:80:
cd:e8:d1:a9:79:b7:da:90:df:2b:e0:8f:ed:10:56:b9:d9:c2:
7d:b5:7e:c7:90:95:47:76:b1:b2:de:8d:ac:e8:d4:32:75:7f:
1c:3f:16:3f:96:08:0e:74:fe:fa:55:a4:c8:ee:8c:4a:98:c3:
4e:33:fa:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 22:05:04 2025 by rpki-client