Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/fb5cde-9e0e-4586-aff1-9552d54afffe/1/Q9B66TDUHiRUqumLGzgcEv68QBk.roa
File: Q9B66TDUHiRUqumLGzgcEv68QBk.roa (raw, json)
Hash identifier: 0NgKHUM4+noYV7VGO3n+kXKPw+HPz65TkuZFguaAl5I=
Subject key identifier: 43:D0:7A:E9:30:D4:1E:24:54:AA:E9:8B:1B:38:1C:12:FE:BC:40:19
Certificate issuer: /CN=16ec858faa2fc7816eb22903d909f9a3fbbc1660
Certificate serial: 018CC8DF2C8A3E0D6519A085F0953338100E
Authority key identifier: 16:EC:85:8F:AA:2F:C7:81:6E:B2:29:03:D9:09:F9:A3:FB:BC:16:60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FuyFj6ovx4FusikD2Qn5o_u8FmA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/fb5cde-9e0e-4586-aff1-9552d54afffe/1/Q9B66TDUHiRUqumLGzgcEv68QBk.roa
Signing time: Tue 02 Jan 2024 06:31:58 +0000
ROA not before: Tue 02 Jan 2024 06:31:58 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 24904
IP address blocks: 45.128.40.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:df:2c:8a:3e:0d:65:19:a0:85:f0:95:33:38:10:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16ec858faa2fc7816eb22903d909f9a3fbbc1660
Validity
Not Before: Jan 2 06:31:58 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=43d07ae930d41e2454aae98b1b381c12febc4019
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:47:31:56:c1:8a:fc:9b:24:d8:4b:40:ba:8d:
6e:ec:83:34:b7:60:55:61:7a:4d:62:79:7a:be:09:
39:e8:08:16:c7:0a:e0:40:05:4b:c6:1c:ba:9a:26:
42:97:6c:8a:f2:34:ea:84:1a:c9:1f:09:be:d7:8e:
14:69:09:4b:ca:ff:a4:01:ae:44:d4:d7:6a:81:01:
22:bb:58:d5:ad:2f:f4:ee:54:47:33:83:bc:a9:a0:
ab:df:be:41:1c:52:cd:d3:31:3c:44:d0:b4:64:7b:
ef:fc:48:e9:f9:78:bd:93:48:45:13:4b:de:54:35:
b6:9f:4b:1c:3c:7d:cc:da:16:8f:b0:4a:a2:bf:e6:
3b:e4:ed:ca:72:ff:74:6f:3e:68:69:dd:0d:9c:f1:
66:e9:e6:99:64:0b:52:04:10:77:62:ff:82:a4:40:
81:98:7e:1c:26:41:bd:7c:f7:3d:ed:9d:70:6e:ad:
04:e2:bc:41:48:1e:0b:95:76:81:8b:fd:de:73:dd:
ce:33:ac:50:eb:ae:0c:54:3f:17:78:17:18:a6:ae:
e0:88:6f:f0:85:06:69:6b:f5:83:df:9e:62:94:b9:
64:c4:b2:c9:ac:34:59:a1:c9:ef:78:61:c1:3a:a3:
d1:7a:c1:a9:00:51:00:58:7e:b4:ee:ac:6d:04:29:
89:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:D0:7A:E9:30:D4:1E:24:54:AA:E9:8B:1B:38:1C:12:FE:BC:40:19
X509v3 Authority Key Identifier:
keyid:16:EC:85:8F:AA:2F:C7:81:6E:B2:29:03:D9:09:F9:A3:FB:BC:16:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FuyFj6ovx4FusikD2Qn5o_u8FmA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/fb5cde-9e0e-4586-aff1-9552d54afffe/1/Q9B66TDUHiRUqumLGzgcEv68QBk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/fb5cde-9e0e-4586-aff1-9552d54afffe/1/FuyFj6ovx4FusikD2Qn5o_u8FmA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.128.40.0/22
Signature Algorithm: sha256WithRSAEncryption
78:c1:79:b9:f0:bd:97:ea:67:9f:b9:ac:47:4e:12:9a:cb:14:
30:6e:50:45:3b:09:73:76:8c:13:1d:32:5b:68:e2:16:a3:5d:
af:1c:9a:a6:1e:af:04:c5:6a:ee:75:61:09:7c:57:56:b8:e3:
d2:be:0b:99:1b:8b:fa:83:93:2e:43:c0:9a:92:44:92:4c:f5:
1d:13:c8:70:1a:d0:ba:fa:fb:1a:94:ee:c4:0a:81:05:77:45:
04:a3:9e:5f:86:05:6a:d1:a1:1d:27:db:46:ed:f8:2f:97:8f:
a2:6b:90:f0:2c:e6:42:6a:5d:73:63:7f:e5:3f:da:8e:13:b9:
1a:1b:73:46:7b:c7:44:1c:35:57:41:5e:5c:37:14:18:74:5a:
2c:d0:70:26:ef:b1:fd:09:83:28:cd:64:64:ec:6c:c6:42:71:
dd:72:6f:af:1c:90:62:0b:fb:5a:11:50:6c:73:6f:6f:18:63:
61:61:5f:1c:ea:d7:ca:05:c4:a2:0c:c9:00:0e:a7:0b:3c:dd:
ea:21:af:b5:d8:1f:ca:d4:c8:ff:0d:00:79:d7:df:0a:c6:54:
ba:40:5a:4e:e6:b2:a5:95:0c:4f:11:f8:94:34:1c:29:b0:ad:
75:6c:7e:5f:a6:9c:72:98:f7:13:55:14:66:47:e1:09:76:18:
a5:32:c7:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:25:21 2025 by rpki-client