Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/c2e16e-ab68-4429-96ee-002f26e3b898/1/TsYDEpiCqj75OkkUwGSeb3XLyec.roa
File: TsYDEpiCqj75OkkUwGSeb3XLyec.roa (raw, json)
Hash identifier: i61AgwhsjK7cXeN7/aKaPYgRD1rx1tV0xZDhj0rtP20=
Subject key identifier: 4E:C6:03:12:98:82:AA:3E:F9:3A:49:14:C0:64:9E:6F:75:CB:C9:E7
Certificate issuer: /CN=2f5cab8a09a9fde23c9635f8e164aef09e17948c
Certificate serial: 018D13D7EFF8CEE98F73FB2C9277D11FD9A7
Authority key identifier: 2F:5C:AB:8A:09:A9:FD:E2:3C:96:35:F8:E1:64:AE:F0:9E:17:94:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L1yrigmp_eI8ljX44WSu8J4XlIw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/c2e16e-ab68-4429-96ee-002f26e3b898/1/TsYDEpiCqj75OkkUwGSeb3XLyec.roa
Signing time: Tue 16 Jan 2024 19:55:34 +0000
ROA not before: Tue 16 Jan 2024 19:55:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 61317
IP address blocks: 45.90.197.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:13:d7:ef:f8:ce:e9:8f:73:fb:2c:92:77:d1:1f:d9:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f5cab8a09a9fde23c9635f8e164aef09e17948c
Validity
Not Before: Jan 16 19:55:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4ec603129882aa3ef93a4914c0649e6f75cbc9e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:8e:c9:ea:28:82:26:7d:d5:97:45:37:49:7f:
cf:ce:61:98:08:62:bf:41:75:c1:8d:df:91:4b:93:
e3:a8:6e:74:65:83:f6:97:17:67:2b:36:5e:37:8d:
b8:d2:d6:bd:49:a3:82:57:37:33:bb:7a:4a:f2:78:
9c:25:eb:92:64:56:14:f7:72:2d:45:e8:79:17:da:
c5:b7:0d:25:16:e7:1d:c4:d8:9a:92:80:cc:57:df:
4d:8c:ae:8f:d7:f4:2f:b9:7d:5f:ca:d4:4d:f1:5b:
7a:81:e6:24:17:0b:53:83:ee:cb:aa:dd:88:6e:76:
c2:19:6d:c3:ae:6e:28:33:31:4c:82:d5:2c:58:aa:
c3:62:3a:ae:08:8c:24:b7:69:75:d8:93:a0:a2:38:
b1:8d:f9:ee:2a:77:ed:e0:e6:d9:a1:6c:3d:e6:f1:
7a:c6:65:7d:ba:71:17:0a:db:b3:8a:b8:25:fd:62:
37:52:34:50:87:e2:c1:03:68:84:7f:75:9d:da:cf:
bb:fa:fa:91:44:8f:65:4c:c4:a0:8d:a6:7e:fe:b9:
32:28:f4:dd:c6:26:df:67:04:1d:73:3e:69:d1:f4:
fe:82:9d:29:78:3d:29:3a:0b:f3:33:d9:cf:ea:8e:
64:6f:2a:80:0f:83:1d:c5:f2:bd:3b:3a:2d:6c:45:
6f:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:C6:03:12:98:82:AA:3E:F9:3A:49:14:C0:64:9E:6F:75:CB:C9:E7
X509v3 Authority Key Identifier:
keyid:2F:5C:AB:8A:09:A9:FD:E2:3C:96:35:F8:E1:64:AE:F0:9E:17:94:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L1yrigmp_eI8ljX44WSu8J4XlIw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/c2e16e-ab68-4429-96ee-002f26e3b898/1/TsYDEpiCqj75OkkUwGSeb3XLyec.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/c2e16e-ab68-4429-96ee-002f26e3b898/1/L1yrigmp_eI8ljX44WSu8J4XlIw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.90.197.0/24
Signature Algorithm: sha256WithRSAEncryption
97:cf:fb:65:b7:ea:61:55:3c:16:ea:30:1f:a8:ac:49:c1:c7:
71:27:52:07:44:f6:12:e1:32:24:0e:89:c5:d7:b2:b0:02:0c:
d5:da:d8:a2:32:02:73:91:fd:2f:d4:33:5f:59:41:b8:08:43:
04:8b:9d:d7:51:ef:8e:63:46:61:7c:ff:d0:28:f1:b6:50:ba:
c4:df:68:44:1c:02:ce:36:c8:3f:4c:6f:6f:00:ef:6d:8e:03:
99:37:f2:7f:a9:8c:53:ea:64:bd:56:c5:b4:f8:ad:0a:7e:ed:
f0:61:6d:5c:8c:6b:68:30:9c:86:cf:2b:00:98:ce:39:94:c8:
0f:9c:a4:6a:5f:6c:db:f9:3d:c7:6c:f3:a1:fe:62:bf:af:34:
7a:92:8e:f6:35:24:4e:95:a4:38:0b:ac:fa:12:8d:cb:54:5c:
6e:1d:9b:11:3c:4f:2d:57:42:bc:fe:98:28:1d:6d:6d:02:85:
31:26:69:32:2b:f2:a8:57:97:4f:31:b9:bf:c3:b2:f7:19:8f:
86:65:73:61:7b:ad:70:f2:08:2d:34:ef:2c:4a:5a:47:87:e5:
37:8a:72:a5:2e:97:e3:fd:e0:18:87:ff:28:60:33:25:60:90:
28:68:31:af:b5:1c:d6:4a:3d:e0:5a:ac:30:50:2f:ed:6f:4b:
ee:a2:68:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 12:52:11 2025 by rpki-client