Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/fa342e-b3bc-4373-8c6b-8854c82b545d/1/k5xMorPADX6pjlz13eIpCR1YD6Y.roa
File: k5xMorPADX6pjlz13eIpCR1YD6Y.roa (raw, json)
Hash identifier: zYtUaU0ku4oMSnzZFqoPkHIdrXIDxibBJ6DcraKtexc=
Subject key identifier: 93:9C:4C:A2:B3:C0:0D:7E:A9:8E:5C:F5:DD:E2:29:09:1D:58:0F:A6
Certificate issuer: /CN=cb335dc6feb385f6a23344056a13c2c595028e91
Certificate serial: 019420D6442AC72F02ECDACF4ED2C85CD021
Authority key identifier: CB:33:5D:C6:FE:B3:85:F6:A2:33:44:05:6A:13:C2:C5:95:02:8E:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yzNdxv6zhfaiM0QFahPCxZUCjpE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/fa342e-b3bc-4373-8c6b-8854c82b545d/1/k5xMorPADX6pjlz13eIpCR1YD6Y.roa
Signing time: Wed 01 Jan 2025 07:48:20 +0000
ROA not before: Wed 01 Jan 2025 07:48:20 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 61361
IP address blocks: 45.80.0.0/22 maxlen: 22
2a0e:3780::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d6:44:2a:c7:2f:02:ec:da:cf:4e:d2:c8:5c:d0:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb335dc6feb385f6a23344056a13c2c595028e91
Validity
Not Before: Jan 1 07:48:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=939c4ca2b3c00d7ea98e5cf5dde229091d580fa6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:b9:1d:0e:5e:b9:91:60:9a:06:4a:e8:94:8f:
fa:39:50:f3:e4:1b:05:b4:87:f8:b3:d8:e4:be:d4:
df:f5:ff:75:42:e0:5a:8a:5a:5b:d1:85:3d:14:a5:
5b:9c:c9:de:93:6e:9a:97:58:7d:00:11:e1:e1:7c:
d3:49:ca:e8:51:04:4d:5f:5b:e8:d0:7f:d9:fa:76:
a5:45:cd:07:85:33:f7:ac:28:bd:3a:d5:63:dd:0b:
f0:a6:e4:73:b2:a3:11:9b:fa:d2:7c:c9:04:18:98:
7a:1d:ed:77:30:65:b1:5b:bf:31:81:6d:82:99:df:
bb:20:8e:55:99:3c:8b:6b:06:48:b6:94:fc:5c:6d:
37:48:06:e3:82:28:92:a0:44:f3:ca:df:69:3f:f2:
57:a0:5a:79:ca:e8:f5:8f:ae:7e:41:36:a8:ef:2f:
f0:ae:4a:11:84:f6:49:ea:ad:c1:c8:97:98:bd:5e:
80:b2:89:6b:74:8d:82:61:7d:93:e4:26:1c:de:54:
2b:ef:cb:ab:c3:7f:8c:a3:ba:fc:9e:0b:5c:9b:3a:
5d:e2:5e:b6:a2:1a:9e:c0:1c:38:7a:4e:cf:cb:69:
34:d9:3c:69:d9:c4:07:5c:c1:75:ba:6d:a1:27:39:
52:45:c4:66:0f:69:40:9f:84:86:1c:d1:da:7e:61:
c5:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:9C:4C:A2:B3:C0:0D:7E:A9:8E:5C:F5:DD:E2:29:09:1D:58:0F:A6
X509v3 Authority Key Identifier:
keyid:CB:33:5D:C6:FE:B3:85:F6:A2:33:44:05:6A:13:C2:C5:95:02:8E:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yzNdxv6zhfaiM0QFahPCxZUCjpE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/fa342e-b3bc-4373-8c6b-8854c82b545d/1/k5xMorPADX6pjlz13eIpCR1YD6Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/fa342e-b3bc-4373-8c6b-8854c82b545d/1/yzNdxv6zhfaiM0QFahPCxZUCjpE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.80.0.0/22
IPv6:
2a0e:3780::/29
Signature Algorithm: sha256WithRSAEncryption
64:05:7b:ec:fc:48:9a:a3:96:04:76:21:7d:e2:d1:fa:01:63:
b0:9c:c4:98:4a:31:42:3a:55:bf:3f:07:9f:00:30:9b:fb:98:
fb:8d:bb:c6:f4:09:68:c5:ea:68:21:12:fb:c0:93:b0:24:ab:
b0:18:d5:2f:c4:9f:ac:dc:6f:01:f6:14:ba:12:18:34:87:1b:
a9:5e:5c:ff:7d:15:99:7d:21:30:c1:48:62:cf:86:fb:87:91:
64:04:30:aa:96:7c:6c:88:e0:1b:a7:40:ca:2a:e7:25:7a:a8:
6b:35:25:2c:7f:12:62:a2:aa:f2:f9:a6:1d:12:98:88:be:ce:
65:fb:61:04:1a:dc:34:c6:a8:30:ce:79:f6:15:33:d8:73:98:
42:08:24:cc:ff:d0:16:62:10:7b:e7:44:75:9b:d0:60:0e:de:
e4:e9:34:c0:ab:53:73:cc:ed:09:7c:a9:fb:6c:06:80:2a:99:
c5:09:ca:b0:eb:f9:7e:69:d1:19:5e:d8:4e:58:e0:b4:37:12:
9d:e7:71:d1:9a:32:8c:0a:64:14:0d:fe:51:a7:05:f7:33:c7:
50:ba:8f:d4:58:0e:19:86:aa:78:0b:dc:9d:3d:f2:99:7d:4d:
9a:88:4b:6c:60:16:7a:ad:0a:bd:62:35:c8:45:9f:e4:67:af:
25:70:12:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 10:58:54 2025 by rpki-client