Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/cf063f-9493-46f1-acd1-31c7fb4715f6/1/EZxzjJ6XhYd6ltYTmizd41s0hPw.roa
File: EZxzjJ6XhYd6ltYTmizd41s0hPw.roa (raw, json)
Hash identifier: JYFppnIvAuxE4lEcobv5nYUUPDwGguXkpkPpHyixP6g=
Subject key identifier: 11:9C:73:8C:9E:97:85:87:7A:96:D6:13:9A:2C:DD:E3:5B:34:84:FC
Certificate issuer: /CN=dc0bde1467895c6f3a47197eac58ca13ae4bb78d
Certificate serial: 0194206851B253598289B0F951B0F612AA50
Authority key identifier: DC:0B:DE:14:67:89:5C:6F:3A:47:19:7E:AC:58:CA:13:AE:4B:B7:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3AveFGeJXG86Rxl-rFjKE65Lt40.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/cf063f-9493-46f1-acd1-31c7fb4715f6/1/EZxzjJ6XhYd6ltYTmizd41s0hPw.roa
Signing time: Wed 01 Jan 2025 05:48:15 +0000
ROA not before: Wed 01 Jan 2025 05:48:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207475
IP address blocks: 45.87.88.0/24 maxlen: 24
2a10:2f47:fffe::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:68:51:b2:53:59:82:89:b0:f9:51:b0:f6:12:aa:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc0bde1467895c6f3a47197eac58ca13ae4bb78d
Validity
Not Before: Jan 1 05:48:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=119c738c9e9785877a96d6139a2cdde35b3484fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:ff:23:e4:02:50:f2:71:5b:b6:44:3d:e9:27:
e8:d7:d6:9e:5d:e3:c8:af:58:00:2e:ce:0a:e2:da:
51:7d:d7:73:e6:8a:57:8b:3c:46:70:76:8b:11:d7:
f8:60:d8:42:d3:b2:9a:16:b7:5a:1a:f6:7a:26:b0:
1f:af:62:ac:82:a5:07:02:f5:07:d5:24:66:57:d8:
f6:b1:87:54:19:d1:c1:f7:c7:b6:d0:10:2c:b8:e1:
cb:a1:f9:1f:70:92:12:0f:8d:7b:45:d5:f5:b4:c0:
50:d2:01:81:db:62:40:9d:3c:f8:13:c3:4c:da:4e:
89:43:09:78:fa:98:f5:eb:c1:c6:d1:ff:be:dc:61:
13:b1:27:ea:f1:b6:6c:7f:82:76:07:5c:4f:c1:3b:
28:e5:04:cb:55:1d:ae:5d:0a:4a:9e:09:0d:99:4d:
49:06:0b:47:b3:55:cc:41:07:fb:57:c5:15:55:c0:
37:35:93:22:53:44:00:3b:27:f8:5c:72:07:7a:08:
85:70:ae:2c:12:09:44:98:04:58:88:3e:01:70:4c:
f3:69:ea:9f:ab:bc:0b:bf:58:c3:73:ee:ee:c2:6b:
7e:30:ff:bc:3f:f0:b8:47:11:2c:bd:7f:bd:af:b7:
b2:dc:5d:8d:7b:5d:f8:4d:ac:d5:a1:52:1d:fb:d7:
32:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:9C:73:8C:9E:97:85:87:7A:96:D6:13:9A:2C:DD:E3:5B:34:84:FC
X509v3 Authority Key Identifier:
keyid:DC:0B:DE:14:67:89:5C:6F:3A:47:19:7E:AC:58:CA:13:AE:4B:B7:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3AveFGeJXG86Rxl-rFjKE65Lt40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/cf063f-9493-46f1-acd1-31c7fb4715f6/1/EZxzjJ6XhYd6ltYTmizd41s0hPw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/cf063f-9493-46f1-acd1-31c7fb4715f6/1/3AveFGeJXG86Rxl-rFjKE65Lt40.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.87.88.0/24
IPv6:
2a10:2f47:fffe::/48
Signature Algorithm: sha256WithRSAEncryption
61:90:40:20:ce:a3:5c:69:ab:35:e4:2a:08:e4:6f:9d:51:d2:
3e:e3:5e:15:a3:7a:96:32:1b:e0:c9:aa:af:78:93:ce:55:42:
33:2e:ce:c2:9a:75:5f:fc:52:ef:12:69:95:05:29:23:9b:bb:
0d:f2:86:65:6c:69:67:6f:f3:5e:56:77:de:ba:7e:1a:a3:dc:
6f:12:c9:6b:07:df:c3:e2:4b:0d:b7:48:f7:3e:4f:ff:2f:e4:
d2:2e:32:23:61:fd:44:1b:f8:a3:0c:44:75:a4:f3:d5:51:87:
17:47:cf:f0:66:f1:b0:5b:a7:ec:94:b9:cc:11:f3:dc:93:a4:
57:1c:ca:d5:fe:33:53:a2:02:9f:7d:ac:27:7e:e5:ae:88:5f:
da:c8:f7:88:54:fe:ec:a5:9c:ea:83:c9:fd:65:e3:57:00:25:
59:c1:5f:38:13:73:70:47:7b:77:ce:a9:dc:ec:2f:94:38:02:
91:ab:8b:51:74:fa:40:8f:96:0b:15:c5:09:bb:3f:cf:70:3d:
a2:13:c5:68:92:c3:79:d6:66:65:e0:c2:72:64:27:81:ea:0d:
7a:c8:e3:f2:ac:69:f4:ae:47:67:84:30:d0:82:51:7d:39:6d:
57:40:a6:1b:87:24:e0:be:93:ff:70:c2:64:43:1d:ba:ff:88:
a7:00:03:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:56:41 2025 by rpki-client