Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/9fab5c-e138-4ef6-8799-b0b35a34e388/1/xrtDAIk3vWJYXPnZVXMHaoJfbQs.roa
File: xrtDAIk3vWJYXPnZVXMHaoJfbQs.roa (raw, json)
Hash identifier: u3EOwyWtPWjn//AFUgWdQ3LoVgi+BzUJpSJKyhN9AL0=
Subject key identifier: C6:BB:43:00:89:37:BD:62:58:5C:F9:D9:55:73:07:6A:82:5F:6D:0B
Certificate issuer: /CN=8fc69646457a8bf8ef9569b9b427e9f2c462e56e
Certificate serial: 019420D63C76343A13E2DFCABA72405235D2
Authority key identifier: 8F:C6:96:46:45:7A:8B:F8:EF:95:69:B9:B4:27:E9:F2:C4:62:E5:6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j8aWRkV6i_jvlWm5tCfp8sRi5W4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/9fab5c-e138-4ef6-8799-b0b35a34e388/1/xrtDAIk3vWJYXPnZVXMHaoJfbQs.roa
Signing time: Wed 01 Jan 2025 07:48:18 +0000
ROA not before: Wed 01 Jan 2025 07:48:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208959
IP address blocks: 45.131.79.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d6:3c:76:34:3a:13:e2:df:ca:ba:72:40:52:35:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8fc69646457a8bf8ef9569b9b427e9f2c462e56e
Validity
Not Before: Jan 1 07:48:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c6bb43008937bd62585cf9d95573076a825f6d0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:d2:93:2c:34:86:01:15:11:9c:8d:a8:1b:5a:
2d:23:d9:86:2a:05:0a:a3:77:88:88:87:c6:35:c5:
90:40:d5:88:e0:a0:59:42:c3:0c:b4:17:e7:f0:bc:
13:40:5b:60:5a:94:0d:63:55:94:fc:77:ad:64:58:
6d:2c:ac:d1:30:b7:c0:5e:18:89:f6:fa:79:e6:ae:
de:56:d5:bf:5d:e2:f5:a8:cb:1b:73:f5:1e:8c:ce:
2e:5f:53:85:4f:01:d3:2b:77:fe:b5:bf:0c:c3:eb:
e3:52:0b:94:73:3c:ac:c8:ae:83:45:d3:e0:47:e6:
eb:80:ab:7e:87:6d:06:af:2a:35:3c:d9:25:bc:5d:
d4:c0:49:66:bd:3f:a5:47:39:80:03:86:77:23:5d:
41:76:fa:8c:42:f8:9e:d7:5e:15:da:cf:07:c1:33:
d2:d9:c1:cd:ee:46:07:57:ea:86:ae:ca:3b:35:cf:
b1:a7:f7:cb:90:62:9a:91:a9:ca:b0:a6:fb:c1:77:
15:ab:bb:82:5d:14:d1:15:d8:86:7d:00:ad:3c:40:
8a:0d:8c:78:9e:b0:76:10:e2:2e:da:a0:9e:96:bd:
62:ef:ef:f7:a8:ac:5f:15:8b:d0:24:98:2c:50:34:
c6:60:d8:7c:72:fb:86:9a:55:64:9f:0c:c5:40:37:
67:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:BB:43:00:89:37:BD:62:58:5C:F9:D9:55:73:07:6A:82:5F:6D:0B
X509v3 Authority Key Identifier:
keyid:8F:C6:96:46:45:7A:8B:F8:EF:95:69:B9:B4:27:E9:F2:C4:62:E5:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j8aWRkV6i_jvlWm5tCfp8sRi5W4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/9fab5c-e138-4ef6-8799-b0b35a34e388/1/xrtDAIk3vWJYXPnZVXMHaoJfbQs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/9fab5c-e138-4ef6-8799-b0b35a34e388/1/j8aWRkV6i_jvlWm5tCfp8sRi5W4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.131.79.0/24
Signature Algorithm: sha256WithRSAEncryption
59:28:2c:05:5a:5b:e8:9b:be:ee:a4:3e:52:25:e1:79:b5:b1:
e4:d5:7e:ab:8f:d3:89:a9:90:d7:fb:79:0a:c9:45:a9:86:79:
b1:ab:2e:a5:7f:f5:2c:e9:d8:a8:ef:5a:69:7f:1f:31:8d:78:
97:71:0f:f8:f8:9c:43:8a:66:16:9b:5a:dd:c7:7d:b8:e4:e9:
ab:54:5e:f6:90:af:c1:99:7f:82:11:4e:db:53:a0:61:30:ec:
32:8e:c1:a8:9f:f5:4b:34:0b:dd:dd:6a:c5:f8:c1:9b:ab:f0:
03:9f:4e:14:8f:7b:16:aa:43:36:4c:c1:ad:13:2b:84:0c:46:
85:27:4a:88:b8:38:de:95:63:2e:9e:5f:4c:10:f0:5d:26:52:
4e:fc:b2:db:55:5a:f5:ba:d3:cd:95:f4:ac:76:43:a8:29:78:
a7:44:2e:67:6d:9c:c8:a9:8e:a9:fd:86:e0:05:09:3c:ed:fe:
cf:4d:fa:86:04:37:b0:c3:0f:5b:86:54:e7:1e:c7:e9:e1:07:
31:45:e5:b2:0e:ac:35:e1:6b:e8:e5:5a:47:8a:84:b8:8f:97:
6b:a9:04:77:77:64:72:6e:e1:23:31:d1:eb:33:32:fd:4e:6a:
f2:ce:01:3c:32:d2:ba:e4:63:e8:d0:40:2e:02:27:1e:6d:3f:
e2:38:ef:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 05:54:59 2025 by rpki-client