Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/08f671-3c35-450a-a90e-2cce9600660f/1/rtacQhfhScMxo3mcOrcKxMT7mkc.roa
File: rtacQhfhScMxo3mcOrcKxMT7mkc.roa (raw, json)
Hash identifier: Df+J0fPDRF1AXlw4stF3a1TNIl3dp+hakZYA/dUJ2SM=
Subject key identifier: AE:D6:9C:42:17:E1:49:C3:31:A3:79:9C:3A:B7:0A:C4:C4:FB:9A:47
Certificate issuer: /CN=4bcd72d6cb385a3a33c6c8fe5459c686a6849509
Certificate serial: 0190B84FC7636F063548FDDAB023FB4D9B7E
Authority key identifier: 4B:CD:72:D6:CB:38:5A:3A:33:C6:C8:FE:54:59:C6:86:A6:84:95:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S81y1ss4Wjozxsj-VFnGhqaElQk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/08f671-3c35-450a-a90e-2cce9600660f/1/rtacQhfhScMxo3mcOrcKxMT7mkc.roa
Signing time: Mon 15 Jul 2024 21:32:34 +0000
ROA not before: Mon 15 Jul 2024 21:32:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 5398
IP address blocks: 45.91.228.0/24 maxlen: 24
45.91.229.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:b8:4f:c7:63:6f:06:35:48:fd:da:b0:23:fb:4d:9b:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4bcd72d6cb385a3a33c6c8fe5459c686a6849509
Validity
Not Before: Jul 15 21:32:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=aed69c4217e149c331a3799c3ab70ac4c4fb9a47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:2a:0e:b5:bd:9c:ed:be:83:50:31:8b:33:7d:
b6:19:d5:75:9b:93:20:49:a3:a6:29:c1:01:a7:e6:
1b:09:48:4e:e7:d6:92:0c:d0:7e:7e:58:02:66:41:
62:84:ac:db:08:ef:7a:3f:41:fb:9f:af:98:36:6a:
0d:05:92:68:0a:7c:29:54:73:fe:96:3a:84:2d:00:
5c:7d:de:fa:e5:fe:d1:19:7e:dd:3e:a0:57:53:bd:
cd:4d:f5:dc:d4:44:9c:88:8a:c2:74:a7:e1:a2:fc:
7f:db:6b:a2:e1:df:fb:87:8b:cd:6c:0e:4a:cc:84:
09:d7:dd:65:cf:ae:1d:05:e5:2a:b9:ce:bd:c5:dd:
7d:90:57:e3:ea:fe:30:96:fb:8b:8c:ce:d4:27:ba:
20:36:b1:a0:b4:04:c3:ac:6a:ff:61:43:6c:c4:8d:
47:4d:4d:ec:53:77:c3:6b:4e:9f:89:5c:05:b8:14:
66:bd:55:94:a3:27:a7:a8:17:75:8a:8f:4d:1a:ed:
70:7a:58:e2:a1:eb:35:ab:a5:ac:11:f2:5d:5d:4c:
93:3b:30:42:e2:1e:05:b7:e2:7f:54:6c:8c:ec:e4:
a8:5d:6d:56:c8:72:c7:a8:26:e8:60:46:c0:ab:a9:
4e:7b:9f:cf:39:42:9a:a1:ed:ab:4e:38:cf:b5:f2:
db:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:D6:9C:42:17:E1:49:C3:31:A3:79:9C:3A:B7:0A:C4:C4:FB:9A:47
X509v3 Authority Key Identifier:
keyid:4B:CD:72:D6:CB:38:5A:3A:33:C6:C8:FE:54:59:C6:86:A6:84:95:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S81y1ss4Wjozxsj-VFnGhqaElQk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/08f671-3c35-450a-a90e-2cce9600660f/1/rtacQhfhScMxo3mcOrcKxMT7mkc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/08f671-3c35-450a-a90e-2cce9600660f/1/S81y1ss4Wjozxsj-VFnGhqaElQk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.91.228.0/23
Signature Algorithm: sha256WithRSAEncryption
5c:fb:2c:a2:5f:a7:ba:1c:b5:3b:f0:31:90:6a:6e:3a:fd:fe:
b8:61:48:f1:c4:cc:12:63:c3:b6:50:99:39:b1:92:61:d8:a6:
73:8a:28:5e:e4:ca:78:45:4b:dc:2c:c9:2f:e6:08:c6:ef:1f:
47:3c:ab:a2:d2:74:5b:8a:0d:41:2f:33:a3:58:80:8b:4f:2c:
17:c0:93:9f:49:a8:dc:3f:5c:51:2e:5a:b1:b6:9f:0e:61:5e:
b7:25:bc:eb:f6:47:a7:54:aa:f3:71:fc:a4:29:87:d8:a0:af:
38:40:1d:76:a2:e0:fc:88:07:89:da:4c:3b:92:59:e3:fa:68:
73:e6:ef:c9:d8:d1:93:ab:b1:01:eb:09:80:b0:f6:bd:7b:c7:
1b:4e:c5:39:99:f9:45:04:6a:c0:2d:2e:67:2a:d7:7f:18:e5:
22:9c:b6:84:9f:39:a7:cd:b2:bf:4a:be:28:66:39:42:89:c8:
7e:df:ce:d0:50:24:7c:5c:9a:5f:21:2e:b8:98:52:4b:75:7d:
54:15:55:15:66:52:3c:8f:ea:dd:48:be:fa:03:7e:17:d0:7c:
e8:78:6d:16:f7:0b:b6:c7:e4:93:62:d0:85:6d:b6:f2:5f:df:
fc:d5:48:88:ee:69:72:da:4f:67:fa:86:ce:96:86:d9:1e:b6:
73:e5:50:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 18:39:18 2025 by rpki-client