Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/af262c-e2cd-4841-850f-02f35ad877f3/1/OEpDgvPaXUzQjnGh8DicbzVRQqo.roa
File: OEpDgvPaXUzQjnGh8DicbzVRQqo.roa (raw, json)
Hash identifier: Tur6sEnsgmRlnAb38JyLyFtsAnKmMwtkefk62vCJp6k=
Subject key identifier: 38:4A:43:82:F3:DA:5D:4C:D0:8E:71:A1:F0:38:9C:6F:35:51:42:AA
Certificate issuer: /CN=3e19048348d7ecb9f1191080555bf4458a1a54e7
Certificate serial: 019426D96BAA442DDB780EB7F3BCA9AB6A19
Authority key identifier: 3E:19:04:83:48:D7:EC:B9:F1:19:10:80:55:5B:F4:45:8A:1A:54:E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PhkEg0jX7LnxGRCAVVv0RYoaVOc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/af262c-e2cd-4841-850f-02f35ad877f3/1/OEpDgvPaXUzQjnGh8DicbzVRQqo.roa
Signing time: Thu 02 Jan 2025 11:49:30 +0000
ROA not before: Thu 02 Jan 2025 11:49:30 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209181
IP address blocks: 45.90.104.0/22 maxlen: 22
45.90.104.0/24 maxlen: 24
45.90.105.0/24 maxlen: 24
45.90.106.0/24 maxlen: 24
45.90.107.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:6b:aa:44:2d:db:78:0e:b7:f3:bc:a9:ab:6a:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e19048348d7ecb9f1191080555bf4458a1a54e7
Validity
Not Before: Jan 2 11:49:30 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=384a4382f3da5d4cd08e71a1f0389c6f355142aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:99:ab:b7:fa:c3:aa:30:23:ed:55:e4:17:2f:
34:70:b7:f4:c3:6a:c2:05:02:a9:33:c4:62:74:e5:
c6:67:d4:3b:85:55:68:84:8b:25:c1:78:d6:0c:84:
1d:5f:d8:6b:20:23:78:17:76:d3:6b:18:4a:56:5d:
e1:e1:af:4b:07:68:ae:95:38:76:a6:dd:2a:9c:67:
4b:a7:eb:21:86:6b:e1:b0:3e:c2:22:fb:65:a7:95:
df:2b:f4:1d:50:07:c7:11:1e:61:e7:23:17:de:c7:
15:46:e2:df:fc:59:f5:2a:f2:47:7b:d5:75:a0:e7:
1c:ab:34:19:29:1d:a4:8e:f7:a8:c4:82:ac:53:5e:
a2:9c:fa:aa:36:fd:07:4e:80:13:21:7f:48:72:d9:
45:1f:84:3a:76:b2:ab:51:7c:6b:8a:cb:91:34:a8:
37:eb:56:57:71:ef:c3:b6:6f:7b:7a:47:69:fb:38:
88:ef:03:a5:14:21:49:14:ff:d8:b8:3b:dd:7d:7a:
b1:5c:86:b6:79:8d:1e:ea:65:bf:af:61:e8:59:e6:
51:17:25:92:bf:58:18:15:a7:2b:4f:66:8d:b6:00:
6a:e9:02:0c:e5:bc:52:46:3c:a5:30:48:81:07:91:
58:59:ee:20:35:39:5d:22:8b:1a:77:2b:35:4c:2b:
c9:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:4A:43:82:F3:DA:5D:4C:D0:8E:71:A1:F0:38:9C:6F:35:51:42:AA
X509v3 Authority Key Identifier:
keyid:3E:19:04:83:48:D7:EC:B9:F1:19:10:80:55:5B:F4:45:8A:1A:54:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PhkEg0jX7LnxGRCAVVv0RYoaVOc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/af262c-e2cd-4841-850f-02f35ad877f3/1/OEpDgvPaXUzQjnGh8DicbzVRQqo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/af262c-e2cd-4841-850f-02f35ad877f3/1/PhkEg0jX7LnxGRCAVVv0RYoaVOc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.90.104.0/22
Signature Algorithm: sha256WithRSAEncryption
b7:1d:94:e6:4a:02:ed:88:ab:a4:44:51:19:58:a4:c4:56:80:
9f:58:f0:30:79:7e:91:49:3b:10:f8:22:39:72:43:16:71:00:
39:59:8d:5a:be:49:cc:d3:37:85:80:df:fd:be:ef:02:90:b7:
50:7c:b0:2e:1e:39:8f:4d:9f:23:c0:7f:6d:3f:e3:d2:ef:b7:
f1:f9:1c:15:da:5a:a5:5e:1d:da:23:7e:5e:b4:14:de:62:2b:
28:89:c0:bb:9a:d5:f6:f3:ab:c5:5d:21:f7:ec:b0:53:85:12:
cb:de:d1:ae:5d:f2:eb:19:c5:7d:45:65:31:2d:65:f2:40:bd:
64:17:51:f8:73:92:f5:e5:29:67:15:0f:a8:e5:33:85:45:9b:
c5:99:1b:2d:d4:50:8a:30:73:1f:bd:1b:fa:1f:0d:33:23:30:
45:78:1d:d1:30:79:78:2b:d8:e9:f4:24:a9:91:6b:79:d2:0d:
b0:37:65:5a:d9:b0:77:0d:62:e6:1f:50:03:c3:01:3e:6e:a5:
89:ae:c9:ba:f0:06:e3:37:69:1e:49:34:2d:d7:cf:8a:71:a8:
84:35:01:fb:a3:c4:8d:ad:4d:40:f0:32:f1:43:e6:45:6f:37:
37:83:7f:48:5e:d8:a1:66:19:74:51:cd:3e:02:73:34:94:e5:
ec:a9:f6:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 06:30:39 2025 by rpki-client