Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/c2e16e-ab68-4429-96ee-002f26e3b898/1/pc3TqXDlvSMTNil7VSLI2Pfi_mI.roa
File: pc3TqXDlvSMTNil7VSLI2Pfi_mI.roa (raw, json)
Hash identifier: LF76IN9ebZddyu+h5zm6rau+dXnVEdqWQ+x3nU7/Fso=
Subject key identifier: A5:CD:D3:A9:70:E5:BD:23:13:36:29:7B:55:22:C8:D8:F7:E2:FE:62
Certificate issuer: /CN=2f5cab8a09a9fde23c9635f8e164aef09e17948c
Certificate serial: 018E75CAF5466E2844AE4D8FB08E1AB5F7A4
Authority key identifier: 2F:5C:AB:8A:09:A9:FD:E2:3C:96:35:F8:E1:64:AE:F0:9E:17:94:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L1yrigmp_eI8ljX44WSu8J4XlIw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/c2e16e-ab68-4429-96ee-002f26e3b898/1/pc3TqXDlvSMTNil7VSLI2Pfi_mI.roa
Signing time: Mon 25 Mar 2024 13:26:59 +0000
ROA not before: Mon 25 Mar 2024 13:26:59 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 62240
IP address blocks: 45.150.112.0/24 maxlen: 24
91.209.31.0/24 maxlen: 24
185.128.41.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:75:ca:f5:46:6e:28:44:ae:4d:8f:b0:8e:1a:b5:f7:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f5cab8a09a9fde23c9635f8e164aef09e17948c
Validity
Not Before: Mar 25 13:26:59 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a5cdd3a970e5bd231336297b5522c8d8f7e2fe62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:2f:be:73:c4:72:fe:77:ff:0e:8b:10:a6:63:
2e:c2:18:fa:e7:d2:95:da:8d:43:3f:02:e9:b5:97:
22:5f:a2:64:66:3b:a2:26:2f:7a:4d:6d:e9:63:eb:
e4:a1:df:dc:2b:df:9d:1e:5e:7b:8f:8f:f0:62:d3:
a6:5f:c6:f4:a4:6e:2d:c7:73:ea:b9:05:d2:23:77:
38:9e:45:71:30:31:48:ad:3d:92:cb:21:7b:89:c7:
21:49:e2:6b:c7:c1:00:61:78:d1:cd:e1:2b:98:21:
8e:32:24:60:9f:1b:1b:a2:a7:f5:0f:dc:27:ec:b1:
08:91:72:de:5e:e3:fd:b6:b6:7c:e2:75:c6:db:c8:
93:b9:7b:91:b2:d4:19:a3:53:e5:60:37:d7:49:98:
4d:47:bb:ef:9d:a9:d1:6a:17:39:23:ad:2f:5f:01:
e3:9e:23:c1:9c:26:b6:2f:d3:24:82:7f:7f:7d:0d:
37:a3:04:86:01:9a:a3:ad:50:72:da:cc:bc:b7:a0:
bc:3a:f8:94:8b:44:43:71:17:6f:45:93:7a:f4:4c:
ac:57:d6:83:55:a7:35:29:5a:12:86:20:1e:8a:ce:
33:85:f1:b6:42:57:2b:a5:5f:03:e0:43:61:1b:c1:
03:1c:21:a1:4e:2a:87:f2:39:34:6f:64:4a:9c:5e:
5c:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:CD:D3:A9:70:E5:BD:23:13:36:29:7B:55:22:C8:D8:F7:E2:FE:62
X509v3 Authority Key Identifier:
keyid:2F:5C:AB:8A:09:A9:FD:E2:3C:96:35:F8:E1:64:AE:F0:9E:17:94:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L1yrigmp_eI8ljX44WSu8J4XlIw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/c2e16e-ab68-4429-96ee-002f26e3b898/1/pc3TqXDlvSMTNil7VSLI2Pfi_mI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/c2e16e-ab68-4429-96ee-002f26e3b898/1/L1yrigmp_eI8ljX44WSu8J4XlIw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.150.112.0/24
91.209.31.0/24
185.128.41.0/24
Signature Algorithm: sha256WithRSAEncryption
a3:43:28:3e:df:f9:46:e7:44:4b:30:0b:31:db:bd:6d:52:e1:
d6:a3:fb:b2:1b:73:22:bf:f4:f7:c0:4d:0e:75:d1:93:91:fc:
bc:54:bc:bd:e4:14:65:c0:73:2d:7c:1c:5e:61:52:65:39:64:
1c:86:c4:2e:c0:b2:da:1c:d7:4e:f0:77:43:e5:25:8e:9a:c1:
79:00:ec:c8:16:6f:fe:04:22:a4:ee:07:5c:3f:c9:36:ae:d8:
29:23:9e:0e:f4:27:11:dc:27:57:2f:71:35:fd:d2:fc:7b:73:
61:3e:a6:0e:ce:20:f5:a5:7c:08:c9:53:93:3a:f9:56:f9:a6:
1d:72:0b:28:ca:78:dc:c2:da:53:eb:fa:d9:98:30:87:67:95:
f2:24:09:64:22:d5:5d:e0:0a:3a:d6:0d:2f:dc:a3:4b:18:39:
25:5e:57:64:48:2d:d9:8d:99:e1:1e:84:c4:93:14:78:75:df:
f4:c3:36:64:db:89:7a:ed:3a:14:af:aa:f3:6f:b6:d4:76:9b:
a2:df:88:cf:52:b3:26:9b:f9:0b:dc:6e:f8:72:de:46:68:34:
d7:da:63:f6:e0:c1:dd:d9:ea:97:81:87:48:5b:7a:b5:ab:22:
bc:11:32:37:f4:35:0f:77:ac:30:fc:fc:3b:39:34:03:39:1d:
a9:aa:e6:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 05:29:11 2025 by rpki-client