Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/efdfc9-da3a-46bd-8300-e1c8a4febdee/1/koXyrmlL8TV6kv-ynNvnYugzfR0.roa
File: koXyrmlL8TV6kv-ynNvnYugzfR0.roa (raw, json)
Hash identifier: GOGOtosuaVGe4tHk7fwfyT9PGqFfVztVqM7H2kaOye0=
Subject key identifier: 92:85:F2:AE:69:4B:F1:35:7A:92:FF:B2:9C:DB:E7:62:E8:33:7D:1D
Certificate issuer: /CN=4ce37f71c933bf827118c63c07774de98645d019
Certificate serial: 019421B222D70ABB3778A86D64227CD113EB
Authority key identifier: 4C:E3:7F:71:C9:33:BF:82:71:18:C6:3C:07:77:4D:E9:86:45:D0:19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TON_cckzv4JxGMY8B3dN6YZF0Bk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/efdfc9-da3a-46bd-8300-e1c8a4febdee/1/koXyrmlL8TV6kv-ynNvnYugzfR0.roa
Signing time: Wed 01 Jan 2025 11:48:29 +0000
ROA not before: Wed 01 Jan 2025 11:48:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 13030
IP address blocks: 45.131.252.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b2:22:d7:0a:bb:37:78:a8:6d:64:22:7c:d1:13:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ce37f71c933bf827118c63c07774de98645d019
Validity
Not Before: Jan 1 11:48:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9285f2ae694bf1357a92ffb29cdbe762e8337d1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:6a:46:6e:c4:91:eb:f9:d5:47:c0:0c:64:1f:
bd:6b:ce:19:86:e3:10:a6:6f:d4:60:56:7e:1e:5e:
ad:f7:35:38:4b:98:ab:c1:7d:98:62:7f:82:13:ac:
fc:25:5f:6a:a8:54:2a:95:a6:16:d5:ec:36:ad:ec:
7c:67:d5:09:fa:aa:9f:72:4c:86:dc:42:28:2e:75:
ab:a8:41:9a:8a:4c:9f:6f:bd:ec:ee:d3:e2:24:2c:
cf:16:eb:b2:30:71:6b:fc:4a:10:4c:d4:fa:83:60:
6d:7f:d8:9b:0a:c9:15:7c:b9:db:e3:d4:7a:45:b1:
da:56:71:ad:45:6d:b5:b3:e6:f0:78:38:04:96:5c:
ae:01:96:8e:e3:f3:af:37:5e:4e:92:63:45:f3:90:
55:dc:86:5d:db:7b:20:d2:30:26:5d:c8:03:d7:53:
8c:f1:ab:07:ed:a8:7f:b4:40:9c:11:e8:69:cd:f1:
8a:a1:38:48:7d:a3:ea:ed:ec:4a:9b:43:79:85:45:
54:3c:15:99:42:c7:aa:34:e0:ce:f5:ac:7c:38:88:
d0:d2:1c:ba:4d:31:8b:2f:05:a7:a8:3c:51:5a:51:
87:91:e2:e1:56:06:f7:7c:a9:fb:27:f9:a3:c1:90:
7d:ab:93:00:38:b1:0f:f0:ff:b4:7c:d1:77:9f:a6:
2d:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:85:F2:AE:69:4B:F1:35:7A:92:FF:B2:9C:DB:E7:62:E8:33:7D:1D
X509v3 Authority Key Identifier:
keyid:4C:E3:7F:71:C9:33:BF:82:71:18:C6:3C:07:77:4D:E9:86:45:D0:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TON_cckzv4JxGMY8B3dN6YZF0Bk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/efdfc9-da3a-46bd-8300-e1c8a4febdee/1/koXyrmlL8TV6kv-ynNvnYugzfR0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/efdfc9-da3a-46bd-8300-e1c8a4febdee/1/TON_cckzv4JxGMY8B3dN6YZF0Bk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.131.252.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:09:e3:0d:e4:7b:3a:41:d1:62:ed:04:d7:df:74:15:a7:9e:
f1:ea:07:75:a1:9d:ba:11:f8:18:76:b8:8d:45:31:c0:61:27:
cd:a5:93:50:34:17:2d:7d:fd:46:f7:f4:a3:da:ea:ec:72:28:
e7:22:91:a6:84:3a:53:41:9c:5e:81:20:33:0e:30:83:d0:0a:
d5:cb:d2:e0:15:86:0c:e8:2c:5c:01:a9:cc:c5:b5:fa:41:3a:
7e:b3:22:db:23:db:2e:87:bb:4f:89:57:09:d7:90:1a:dc:0a:
1a:8e:9e:90:3d:3b:f0:97:33:0d:44:58:5f:fc:b2:de:de:da:
e3:8e:da:f9:b8:a3:19:a8:55:20:ac:12:3b:96:f6:61:f2:c8:
fb:6b:d6:a9:30:dd:f0:d3:83:b0:ae:77:21:0b:91:f0:14:71:
c9:a8:1a:ba:33:05:58:2f:41:d9:b8:f5:5f:e5:3c:55:bd:93:
74:0d:6d:ac:d5:30:ce:3e:c6:02:de:59:34:13:a1:eb:1c:7e:
ba:18:ac:29:29:00:5b:a6:ec:0c:d7:29:9a:9f:b4:d3:08:14:
34:cf:19:be:a1:b7:59:a5:47:f3:dd:e2:32:ae:cd:b6:13:cb:
27:e6:f9:2c:9c:91:6c:16:4e:5d:8a:d4:24:05:0f:41:48:5a:
96:8f:95:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:51:47 2025 by rpki-client