Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/cd97cc-ce2b-4264-9e79-c8f9be7d19df/1/54maDBwwKTxHdkusWjL9_Ovz-qw.roa
File: 54maDBwwKTxHdkusWjL9_Ovz-qw.roa (raw, json)
Hash identifier: K+6mHC5B4TYfPyOtC0Ws3X1xogH31t6cVYvGSG2+010=
Subject key identifier: E7:89:9A:0C:1C:30:29:3C:47:76:4B:AC:5A:32:FD:FC:EB:F3:FA:AC
Certificate issuer: /CN=8e3f1663996be1707611fdce1ddea8920dd398a3
Certificate serial: 01941FFAAB85338C7C1B14780FB1411C8071
Authority key identifier: 8E:3F:16:63:99:6B:E1:70:76:11:FD:CE:1D:DE:A8:92:0D:D3:98:A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jj8WY5lr4XB2Ef3OHd6okg3TmKM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/cd97cc-ce2b-4264-9e79-c8f9be7d19df/1/54maDBwwKTxHdkusWjL9_Ovz-qw.roa
Signing time: Wed 01 Jan 2025 03:48:29 +0000
ROA not before: Wed 01 Jan 2025 03:48:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215415
IP address blocks: 45.139.211.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:ab:85:33:8c:7c:1b:14:78:0f:b1:41:1c:80:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e3f1663996be1707611fdce1ddea8920dd398a3
Validity
Not Before: Jan 1 03:48:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e7899a0c1c30293c47764bac5a32fdfcebf3faac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:8f:9e:73:da:d7:ac:a7:01:5c:2b:7c:07:35:
b1:c4:ee:fa:bb:e7:42:00:42:83:96:3e:e5:fb:d6:
07:2f:9e:1b:c6:09:a7:89:dd:5f:14:b2:10:f4:61:
b4:ba:75:03:8b:e0:56:52:25:5e:b5:e0:4e:a0:d5:
70:f0:47:3a:99:68:f6:39:11:0e:d6:ee:a1:00:cd:
eb:3e:61:0c:b4:44:a7:04:73:d5:ca:d6:10:67:71:
d0:78:80:89:9c:88:ac:1b:48:c1:02:35:58:cc:5a:
c4:73:82:9a:e5:21:b3:e3:2f:83:fa:ca:f0:4f:b9:
53:af:24:78:ff:15:33:4c:d8:a7:d4:11:b5:f7:0f:
c7:6d:3e:f4:b1:2f:3f:a3:63:1d:c3:f0:03:3c:3d:
4a:e9:84:43:0b:9b:41:54:bf:1f:4d:b6:97:99:d2:
89:4c:0d:b7:65:58:ec:67:64:de:0e:5b:94:7b:c7:
33:3b:a4:c5:db:d0:4f:c6:5d:3e:c0:ea:df:c7:d8:
29:bc:9d:a2:06:6f:73:aa:9e:5b:93:47:0e:73:45:
38:4e:91:f0:09:1e:bb:f5:ef:b7:f4:05:99:f9:37:
7b:7b:d9:3f:a2:23:17:b4:c1:db:3a:02:dd:fd:e8:
62:bb:7b:d8:34:74:65:5a:ab:67:5b:02:cf:5a:f2:
b0:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:89:9A:0C:1C:30:29:3C:47:76:4B:AC:5A:32:FD:FC:EB:F3:FA:AC
X509v3 Authority Key Identifier:
keyid:8E:3F:16:63:99:6B:E1:70:76:11:FD:CE:1D:DE:A8:92:0D:D3:98:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jj8WY5lr4XB2Ef3OHd6okg3TmKM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/cd97cc-ce2b-4264-9e79-c8f9be7d19df/1/54maDBwwKTxHdkusWjL9_Ovz-qw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/cd97cc-ce2b-4264-9e79-c8f9be7d19df/1/jj8WY5lr4XB2Ef3OHd6okg3TmKM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.139.211.0/24
Signature Algorithm: sha256WithRSAEncryption
e1:7c:ba:cc:56:13:8f:bd:16:62:89:bb:ee:b7:8e:6b:f5:a2:
fa:54:d0:3b:d1:c7:8a:f5:4d:f5:a9:86:8e:7c:3b:a6:ad:4a:
f4:41:c5:13:60:6f:e6:ff:a3:ca:c7:e3:ca:3c:d9:e3:1f:b1:
4a:92:40:f1:61:13:52:86:50:ab:54:97:8c:68:af:6c:9b:85:
d8:49:94:df:9a:64:0b:47:5b:77:ef:0b:78:a4:9a:ff:dd:49:
80:52:1a:52:57:04:a4:c2:b5:f9:52:dc:c7:37:47:61:fe:dc:
47:9b:c2:22:af:68:6c:51:7e:b4:68:e7:94:a3:59:60:ea:87:
ff:4e:bf:6b:49:60:11:91:c6:b0:4d:c5:f0:9d:04:5c:03:30:
69:0d:af:ba:44:cc:46:18:04:d2:29:2e:de:17:03:11:d7:7e:
0f:13:9b:71:75:2b:8a:b8:af:ae:1f:22:74:62:e4:3d:2d:87:
1c:69:8f:47:80:dc:09:43:a2:3d:db:55:3d:31:cb:17:4e:d5:
3b:67:78:2b:6f:63:09:97:25:a9:36:79:5b:75:92:da:4c:82:
60:2e:05:04:f8:ec:82:ac:e7:30:c9:81:99:d2:cd:8b:94:7e:
7a:36:12:60:05:06:fe:1f:e8:f5:8d:13:bb:5f:4b:08:10:a5:
04:5b:79:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 17:57:00 2025 by rpki-client