Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/b463a6-282f-45f0-b4ba-cdf92fbe8f0b/1/gP_zsXfkqrzssG9MD4Zd7ibjL_Y.roa
File: gP_zsXfkqrzssG9MD4Zd7ibjL_Y.roa (raw, json)
Hash identifier: I686Ip553hliGvYAsWQzyhxBsV7CF+b8RDLkN0tXgB4=
Subject key identifier: 80:FF:F3:B1:77:E4:AA:BC:EC:B0:6F:4C:0F:86:5D:EE:26:E3:2F:F6
Certificate issuer: /CN=ac91f230a0e2eeda3810522e74a698200713e620
Certificate serial: 0194228E1F3C8DBBA05DC2B29A0A950CC3B1
Authority key identifier: AC:91:F2:30:A0:E2:EE:DA:38:10:52:2E:74:A6:98:20:07:13:E6:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rJHyMKDi7to4EFIudKaYIAcT5iA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/b463a6-282f-45f0-b4ba-cdf92fbe8f0b/1/gP_zsXfkqrzssG9MD4Zd7ibjL_Y.roa
Signing time: Wed 01 Jan 2025 15:48:46 +0000
ROA not before: Wed 01 Jan 2025 15:48:46 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208403
IP address blocks: 45.131.20.0/24 maxlen: 24
45.131.21.0/24 maxlen: 24
45.131.22.0/24 maxlen: 24
45.131.23.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8e:1f:3c:8d:bb:a0:5d:c2:b2:9a:0a:95:0c:c3:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac91f230a0e2eeda3810522e74a698200713e620
Validity
Not Before: Jan 1 15:48:46 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=80fff3b177e4aabcecb06f4c0f865dee26e32ff6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:72:e8:65:35:9a:ca:8a:91:39:05:cb:9d:21:
22:72:d5:fb:c6:26:79:cd:b3:ce:7a:9d:d9:37:92:
06:52:5f:05:a6:5d:42:de:e1:9a:90:2c:1f:af:9c:
ce:5a:50:40:9b:cc:ca:18:02:43:43:ed:87:6e:97:
19:d0:5d:a7:c5:30:ff:94:10:ab:59:ba:d5:0d:5d:
47:b2:58:20:ab:be:8b:28:98:9f:d3:1a:29:a8:2b:
10:0f:3a:25:6c:c9:bb:d3:67:93:74:41:fa:19:fb:
ee:51:9d:7d:e5:75:e3:3d:37:bd:93:65:3b:fc:75:
36:b6:01:41:9f:7a:2c:b8:66:ae:ca:94:d2:d5:8f:
0d:5f:68:08:11:41:76:66:5d:ec:88:8a:24:65:b1:
c1:b0:2f:fb:59:64:b4:0e:5e:0a:c7:38:b4:e6:cc:
25:50:5f:83:bf:de:62:55:f8:70:15:11:88:b0:f5:
f8:c3:78:74:32:83:1d:b7:ae:a4:cb:45:13:3a:66:
17:ec:81:15:22:3d:34:94:75:ff:e7:8f:33:1f:9c:
f8:3e:87:24:1c:da:36:ba:76:2b:e6:22:88:21:03:
ac:e9:9b:0c:d9:eb:a4:40:24:1e:90:74:f4:70:64:
c7:95:b3:94:27:c8:94:a5:5d:34:3c:ea:44:57:09:
6c:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:FF:F3:B1:77:E4:AA:BC:EC:B0:6F:4C:0F:86:5D:EE:26:E3:2F:F6
X509v3 Authority Key Identifier:
keyid:AC:91:F2:30:A0:E2:EE:DA:38:10:52:2E:74:A6:98:20:07:13:E6:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rJHyMKDi7to4EFIudKaYIAcT5iA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/b463a6-282f-45f0-b4ba-cdf92fbe8f0b/1/gP_zsXfkqrzssG9MD4Zd7ibjL_Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/b463a6-282f-45f0-b4ba-cdf92fbe8f0b/1/rJHyMKDi7to4EFIudKaYIAcT5iA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.131.20.0/22
Signature Algorithm: sha256WithRSAEncryption
50:39:b6:85:61:f8:6c:54:06:ac:2f:8c:43:f9:1b:6c:92:96:
c3:36:75:32:8f:dd:02:73:30:af:ce:14:97:8f:4a:a7:c4:d0:
63:d5:62:39:9e:e4:b1:a7:a0:0f:7d:04:ae:1c:61:7a:b8:55:
4e:40:8b:c9:87:07:48:db:7f:d4:21:d0:86:ef:df:1c:2f:a1:
f8:03:d9:3c:db:c5:f2:0b:20:f7:a0:b7:23:6f:b6:b3:36:79:
1a:17:d0:66:53:f7:87:51:a9:af:b6:eb:3e:83:e6:a9:b9:4f:
cb:b7:e6:63:25:60:fa:b7:c0:47:21:fc:bb:87:49:7a:dd:90:
4e:d0:b8:73:d4:ac:6e:2a:ca:da:ca:89:64:d4:f0:49:fd:c4:
61:ab:1f:bb:5a:ce:18:23:4d:d7:af:eb:86:f0:1d:b1:16:52:
b0:3d:32:ec:b2:b5:48:f8:ed:bd:67:f5:e9:9c:95:d7:d8:cf:
24:89:5b:43:e0:fe:8a:e0:32:13:c8:c5:8a:21:61:e5:bb:1b:
60:67:6e:82:1d:98:23:c3:8c:72:57:c6:80:c7:65:99:85:97:
5c:f5:e6:65:64:72:06:9b:56:90:10:7b:08:af:12:0e:67:73:
c1:fd:7d:c3:35:70:2f:2b:f7:0c:e2:dd:f0:91:47:a4:4e:b3:
ad:e5:83:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:45:05 2025 by rpki-client