Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/CamDV6EMiCzkpjzSA5DCBzSmm88.roa
File: CamDV6EMiCzkpjzSA5DCBzSmm88.roa (raw, json)
Hash identifier: JV9zqepY4N2AO8yc2eogQKWbkVBXJ8vcgsnMjEIFHUI=
Subject key identifier: 09:A9:83:57:A1:0C:88:2C:E4:A6:3C:D2:03:90:C2:07:34:A6:9B:CF
Certificate issuer: /CN=18101772248996b87d90840c2d27d62549458173
Certificate serial: 0194221F6E57E3A45AE464DC43C64473DA63
Authority key identifier: 18:10:17:72:24:89:96:B8:7D:90:84:0C:2D:27:D6:25:49:45:81:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GBAXciSJlrh9kIQMLSfWJUlFgXM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/CamDV6EMiCzkpjzSA5DCBzSmm88.roa
Signing time: Wed 01 Jan 2025 13:47:52 +0000
ROA not before: Wed 01 Jan 2025 13:47:52 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 62240
IP address blocks: 45.141.168.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:6e:57:e3:a4:5a:e4:64:dc:43:c6:44:73:da:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18101772248996b87d90840c2d27d62549458173
Validity
Not Before: Jan 1 13:47:52 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=09a98357a10c882ce4a63cd20390c20734a69bcf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:0d:ab:22:05:20:92:1d:95:aa:66:2e:48:9f:
df:7a:59:86:95:e3:7c:b1:4f:0f:ac:dd:27:62:f9:
c2:93:a1:ea:8c:3b:e8:64:af:64:62:3d:e9:c5:2e:
73:89:13:1f:fe:60:92:7b:95:8e:94:95:c0:3e:23:
78:4e:2f:99:08:c2:f0:97:f5:9c:29:64:b5:90:99:
4a:87:00:26:a4:1d:e2:64:5e:27:66:be:63:0b:da:
fe:c6:9f:93:9b:a9:c8:f7:7a:ff:49:02:07:20:b3:
95:16:c4:47:b6:2f:a5:d3:42:2a:dc:40:02:fd:43:
e8:6b:13:a1:e8:1a:f1:01:d0:ca:9b:bc:48:24:74:
6b:a8:df:e5:71:0e:42:53:6c:f8:6a:11:64:e9:22:
05:99:83:a2:06:b5:ce:71:fd:9c:19:1f:32:64:18:
cb:e1:dc:7e:2b:53:2d:2b:af:73:7a:69:59:e2:38:
fc:4c:ce:1a:36:5b:10:72:1b:ec:ea:5a:9a:aa:2e:
c9:c1:b7:16:97:11:02:a5:8b:ac:f9:4e:20:3e:e3:
96:b7:b2:db:d0:e3:5f:8b:92:d6:d9:3a:5b:c6:0d:
dd:59:80:c8:a5:bd:d0:54:f0:d9:06:5a:07:0b:67:
49:e3:e7:d3:b8:6f:59:08:d4:ef:80:05:d2:59:f1:
aa:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:A9:83:57:A1:0C:88:2C:E4:A6:3C:D2:03:90:C2:07:34:A6:9B:CF
X509v3 Authority Key Identifier:
keyid:18:10:17:72:24:89:96:B8:7D:90:84:0C:2D:27:D6:25:49:45:81:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GBAXciSJlrh9kIQMLSfWJUlFgXM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/CamDV6EMiCzkpjzSA5DCBzSmm88.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/GBAXciSJlrh9kIQMLSfWJUlFgXM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.141.168.0/23
Signature Algorithm: sha256WithRSAEncryption
a3:4f:d2:dc:17:1c:d3:eb:3b:76:db:6f:e9:50:47:52:bd:26:
e4:06:a0:df:59:35:40:93:bc:65:6e:f4:cd:24:3f:57:8e:b3:
cc:eb:8f:b1:48:d1:11:b1:48:b4:c8:c4:a5:2e:01:3f:8d:ca:
4d:bd:f6:66:bb:7b:d7:06:78:c8:a9:89:92:9d:be:70:99:a1:
ee:92:3b:57:ae:a8:0b:ee:00:86:c2:42:26:3c:ea:07:7b:45:
de:d5:5f:58:e1:55:21:6d:66:10:94:40:e8:2f:21:01:76:96:
ee:a6:a9:6d:3c:6e:29:b3:88:b7:61:9c:46:93:65:08:a9:a5:
b0:7e:28:d9:a3:e0:ea:a9:f3:ef:86:52:b1:cd:c9:b7:17:cc:
f6:a9:a6:92:07:ae:0c:45:50:7b:f1:92:dc:3b:99:ed:83:3b:
a5:f1:eb:2f:75:99:5b:d2:b8:35:01:5f:75:62:bc:a2:02:54:
87:15:0c:de:d3:3e:96:4d:52:cb:b5:d3:81:8a:8d:fb:34:60:
1a:26:b9:63:8d:c5:36:9c:8d:ad:7e:64:c7:ed:1a:4b:f5:c9:
ec:90:7f:98:74:16:e5:d8:05:7a:e7:81:a3:02:eb:d4:32:eb:
95:34:98:db:36:ba:4d:a1:97:c2:4c:bc:92:28:66:61:4c:4a:
5a:b1:4d:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 3 22:21:59 2025 by rpki-client