Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/dbb043-377b-4c4b-a0a2-7e8c5526de7e/1/IaFtNttSKZaCyjtsIDwe2puFZb8.roa
File: IaFtNttSKZaCyjtsIDwe2puFZb8.roa (raw, json)
Hash identifier: 1NfM53YlIhgQ+Nv6uT/TNmq/fXmn5FfwUXrSWjD1Rm8=
Subject key identifier: 21:A1:6D:36:DB:52:29:96:82:CA:3B:6C:20:3C:1E:DA:9B:85:65:BF
Certificate issuer: /CN=df78ec6b0b969aa2228f125edaa419bacdbbf25b
Certificate serial: 0194258F08EB1E7F2377BCD8D53A739E15E0
Authority key identifier: DF:78:EC:6B:0B:96:9A:A2:22:8F:12:5E:DA:A4:19:BA:CD:BB:F2:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/33jsawuWmqIijxJe2qQZus278ls.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/dbb043-377b-4c4b-a0a2-7e8c5526de7e/1/IaFtNttSKZaCyjtsIDwe2puFZb8.roa
Signing time: Thu 02 Jan 2025 05:48:38 +0000
ROA not before: Thu 02 Jan 2025 05:48:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48412
IP address blocks: 45.154.16.0/22 maxlen: 22
45.154.16.0/24 maxlen: 24
45.154.17.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:08:eb:1e:7f:23:77:bc:d8:d5:3a:73:9e:15:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df78ec6b0b969aa2228f125edaa419bacdbbf25b
Validity
Not Before: Jan 2 05:48:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=21a16d36db52299682ca3b6c203c1eda9b8565bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:77:f5:80:65:1f:01:77:5a:e8:72:50:b9:a3:
67:1c:27:0c:24:ce:77:9c:73:7d:5a:ee:09:b7:62:
55:ba:0e:10:54:82:62:50:d0:dc:09:eb:f9:29:ac:
fb:5c:df:1c:c9:b1:26:c2:6f:f9:b9:0a:a4:89:7f:
00:67:f4:ad:fe:38:17:5f:81:7d:27:09:de:75:c7:
62:06:84:31:31:cf:d9:7b:df:bd:7a:78:49:8a:19:
8d:56:8e:e8:a1:19:fa:fb:46:3d:80:6f:c3:46:ee:
bb:75:e0:b4:8f:97:7c:25:6f:59:fa:10:b6:c4:16:
c4:1c:ed:cb:fc:d8:82:2e:65:83:09:c0:88:24:db:
48:15:37:b2:19:72:81:ac:ea:b3:c0:c9:fc:44:98:
cf:06:a7:83:12:03:08:b5:8e:53:a1:b5:b6:51:4f:
ee:54:1c:a8:40:68:eb:43:ca:b3:74:54:cd:bb:59:
d4:2e:42:ea:bb:f0:0f:aa:b0:f4:60:a0:d6:df:d8:
1f:6f:da:81:14:74:79:a2:d4:e6:8f:86:ff:ae:a1:
f3:79:37:64:96:4b:92:6f:65:8a:a5:5a:05:67:ce:
49:b4:78:4a:82:4b:ee:17:de:ca:3a:e6:9d:60:d1:
d9:de:cf:d7:9c:be:2f:fc:60:c5:26:09:8b:e5:15:
da:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:A1:6D:36:DB:52:29:96:82:CA:3B:6C:20:3C:1E:DA:9B:85:65:BF
X509v3 Authority Key Identifier:
keyid:DF:78:EC:6B:0B:96:9A:A2:22:8F:12:5E:DA:A4:19:BA:CD:BB:F2:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/33jsawuWmqIijxJe2qQZus278ls.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/dbb043-377b-4c4b-a0a2-7e8c5526de7e/1/IaFtNttSKZaCyjtsIDwe2puFZb8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/dbb043-377b-4c4b-a0a2-7e8c5526de7e/1/33jsawuWmqIijxJe2qQZus278ls.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.154.16.0/22
Signature Algorithm: sha256WithRSAEncryption
a5:7d:81:da:d1:46:40:7d:bc:06:68:fa:d7:69:38:67:b5:22:
8a:46:e4:56:a1:12:bb:fe:51:91:19:8b:ef:a1:3d:67:76:f1:
dd:5a:8a:09:da:3c:0b:36:41:6f:ba:54:af:7b:b2:7e:96:2b:
34:51:b4:11:65:59:ff:f6:fb:da:38:cd:8f:e0:d8:71:b9:dc:
00:23:40:99:bc:69:0a:70:3d:f1:01:e6:4d:6a:b6:54:62:ec:
43:45:ef:ed:99:47:69:e7:be:89:5c:72:e1:3b:e2:fc:be:4e:
f2:31:ab:28:27:bc:4b:a9:3d:bf:aa:c8:55:f8:69:7b:66:dc:
30:a8:21:5e:a9:b7:75:e6:95:18:fb:ff:9a:67:fc:3d:64:5b:
c3:a9:c6:09:7e:ab:94:dc:a4:c5:9e:2e:5d:0a:db:2e:e0:33:
f4:2f:46:6c:ba:65:76:ab:e0:e4:8b:3b:6c:92:8c:07:49:ac:
df:09:15:6d:7a:ce:cd:4a:77:f7:8a:48:9d:db:62:74:ff:31:
68:54:9e:ff:49:51:e5:1e:bc:48:96:59:b0:7f:9c:81:f8:86:
34:35:c6:b3:3d:11:12:37:99:8d:34:d0:39:15:0c:61:67:38:
fd:34:ce:6a:5d:0c:3c:c5:ff:c1:14:6d:93:04:93:80:d7:26:
07:57:0d:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 22:28:03 2025 by rpki-client