Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/uk0QbJL6mHzA4vNnpeck_tMVVvE.roa
File: uk0QbJL6mHzA4vNnpeck_tMVVvE.roa (raw, json)
Hash identifier: KnqK7jZ2ORVcjCRW4FQ21u1nxeBRFMMQY1XtgNLzOQQ=
Subject key identifier: BA:4D:10:6C:92:FA:98:7C:C0:E2:F3:67:A5:E7:24:FE:D3:15:56:F1
Certificate issuer: /CN=18101772248996b87d90840c2d27d62549458173
Certificate serial: 019539B7829EF75AC25A24C749818B95BAAA
Authority key identifier: 18:10:17:72:24:89:96:B8:7D:90:84:0C:2D:27:D6:25:49:45:81:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GBAXciSJlrh9kIQMLSfWJUlFgXM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/uk0QbJL6mHzA4vNnpeck_tMVVvE.roa
Signing time: Mon 24 Feb 2025 20:48:02 +0000
ROA not before: Mon 24 Feb 2025 20:48:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 46261
IP address blocks: 45.146.234.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:39:b7:82:9e:f7:5a:c2:5a:24:c7:49:81:8b:95:ba:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18101772248996b87d90840c2d27d62549458173
Validity
Not Before: Feb 24 20:48:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ba4d106c92fa987cc0e2f367a5e724fed31556f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:b5:e5:3a:05:c7:51:73:3f:4b:bb:38:dd:15:
a5:89:40:c9:93:2c:e9:dd:9e:86:b7:4d:49:ef:5a:
f4:d4:2a:7a:89:ff:5d:91:4a:20:8f:53:cf:b6:ee:
b3:98:39:ce:c0:01:9e:49:7b:20:80:08:07:b1:e2:
75:e7:49:d3:c3:8a:86:19:8b:b1:cd:8c:ed:c1:de:
5b:11:ff:95:16:34:24:5f:f7:5b:a8:44:48:ad:c0:
e9:6f:75:5d:d0:88:3d:64:86:7c:a1:bf:9d:73:d2:
7f:20:10:ac:af:19:40:f7:ce:26:8f:56:d4:d7:b6:
55:a5:d4:27:2a:3e:b4:6e:6d:b8:43:76:14:40:ab:
e3:e3:9a:d7:6f:b8:9d:2a:60:be:ed:99:19:c1:71:
b6:d0:07:b0:86:00:55:14:e5:25:1b:4a:8b:11:5e:
99:7f:56:e6:46:74:03:b0:41:b5:33:3b:92:fb:6b:
2d:bb:82:75:23:f3:fd:b5:e4:4d:a4:b9:5a:1a:ef:
25:62:f5:ec:51:b2:e3:b9:95:9e:7b:96:2d:fa:61:
d2:64:f0:ae:c6:db:bc:e3:a0:7e:68:c8:b6:d0:e1:
49:9a:52:e9:4b:2f:81:af:b4:93:01:61:49:29:39:
9b:4e:ab:4d:a0:9b:82:e0:f6:1d:b3:5a:e9:af:35:
85:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:4D:10:6C:92:FA:98:7C:C0:E2:F3:67:A5:E7:24:FE:D3:15:56:F1
X509v3 Authority Key Identifier:
keyid:18:10:17:72:24:89:96:B8:7D:90:84:0C:2D:27:D6:25:49:45:81:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GBAXciSJlrh9kIQMLSfWJUlFgXM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/uk0QbJL6mHzA4vNnpeck_tMVVvE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/GBAXciSJlrh9kIQMLSfWJUlFgXM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.146.234.0/23
Signature Algorithm: sha256WithRSAEncryption
10:b0:1f:23:3d:30:3b:61:9c:0f:92:0b:03:90:68:4a:3f:16:
52:bb:10:0b:ea:92:31:e6:53:8c:9c:d1:b9:17:fb:e7:54:cd:
0e:1f:11:6c:47:7c:40:9d:d6:b2:39:e4:20:43:96:04:c4:fe:
ba:d8:11:e4:31:27:79:80:ae:67:a4:68:35:ff:e5:fc:86:06:
97:ac:3d:c2:fb:4d:06:16:43:f1:85:22:7c:ea:b5:5d:61:68:
69:50:ef:a6:a1:38:d3:6f:da:dd:9c:be:85:6b:26:d8:03:8d:
45:c4:da:fc:9a:17:82:7e:6d:80:9d:7a:ed:5d:ed:74:cc:f6:
27:a1:f7:f2:ac:2e:99:80:e7:1c:15:f3:38:d4:51:cd:f7:b6:
cb:67:5b:fa:47:a2:0b:1b:e6:a4:2d:ce:58:19:f9:05:db:56:
ba:49:ed:04:f4:97:25:cc:99:8d:5c:09:0c:33:27:7a:4d:90:
2b:91:4f:f0:1a:7a:9e:e5:31:d3:e9:ca:8d:cb:39:5f:d6:54:
15:31:92:56:fd:ea:bb:38:64:5b:01:84:31:57:15:d4:b0:ef:
e7:06:83:43:a5:8c:f8:f7:b6:c3:9c:d1:72:9d:30:f9:35:a8:
16:c5:11:36:bb:81:b0:5f:3e:02:6b:fa:cb:0b:74:6a:29:d2:
da:ff:67:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 10:13:01 2025 by rpki-client