Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/c73b3b-5b5c-4a77-8b80-d2b697aefa02/1/Rb7F4D-VQenGCJGFIQ0pL_-8SdI.roa
File: Rb7F4D-VQenGCJGFIQ0pL_-8SdI.roa (raw, json)
Hash identifier: KCwYXkc96nmO8iiK2Z3c2R72L9yE00WdCTlXlazDdHs=
Subject key identifier: 45:BE:C5:E0:3F:95:41:E9:C6:08:91:85:21:0D:29:2F:FF:BC:49:D2
Certificate issuer: /CN=2ee74296fce8d20befa18799dae6ec7831d61c5a
Certificate serial: 019425223AEF516E4BA60CC545381D56F73E
Authority key identifier: 2E:E7:42:96:FC:E8:D2:0B:EF:A1:87:99:DA:E6:EC:78:31:D6:1C:5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LudClvzo0gvvoYeZ2ubseDHWHFo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/c73b3b-5b5c-4a77-8b80-d2b697aefa02/1/Rb7F4D-VQenGCJGFIQ0pL_-8SdI.roa
Signing time: Thu 02 Jan 2025 03:49:47 +0000
ROA not before: Thu 02 Jan 2025 03:49:47 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 25164
IP address blocks: 45.142.224.0/22 maxlen: 22
194.146.212.0/22 maxlen: 22
195.177.234.0/23 maxlen: 23
2a01:200::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:22:3a:ef:51:6e:4b:a6:0c:c5:45:38:1d:56:f7:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ee74296fce8d20befa18799dae6ec7831d61c5a
Validity
Not Before: Jan 2 03:49:47 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=45bec5e03f9541e9c6089185210d292fffbc49d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:33:1b:d3:22:ec:c9:5c:2a:39:87:a2:92:24:
62:83:50:52:7c:72:99:2f:1c:f5:59:65:41:32:18:
80:e9:c3:bb:02:14:2d:84:32:51:ce:00:7b:1e:84:
e5:3c:f7:94:33:15:58:ce:c6:fe:40:c8:9e:51:cf:
ab:af:0f:1f:37:af:16:8f:3c:fc:db:e8:b6:09:85:
16:82:9a:1c:ac:dc:5b:fc:9b:cf:e8:8e:6d:bb:91:
6b:ae:f1:cd:34:27:98:07:1b:78:94:0d:7b:e3:e1:
2e:b5:6a:f7:4d:43:2c:c4:e4:71:6d:da:a6:0c:ff:
18:4e:f8:0a:b3:04:10:81:c0:79:5e:23:12:c8:20:
bf:77:2a:2e:06:19:a6:46:9b:69:06:b0:18:0e:3c:
77:b6:b8:79:7b:c9:56:0c:af:c4:05:1b:fa:59:3e:
dd:27:57:d4:e2:9e:ef:1b:03:63:74:dd:b1:f4:72:
2f:97:87:cc:3d:1b:e7:82:9b:45:10:92:1c:41:9f:
d1:35:59:cb:75:4d:ec:44:96:cc:0b:8e:b5:2d:86:
af:e3:b4:09:03:4e:57:a4:3d:b6:36:fb:2f:d5:d4:
12:51:a0:74:3b:76:85:44:3b:c8:df:ec:57:ef:24:
96:a1:7b:b4:97:0a:31:07:15:c8:fe:a0:1f:f7:ca:
df:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:BE:C5:E0:3F:95:41:E9:C6:08:91:85:21:0D:29:2F:FF:BC:49:D2
X509v3 Authority Key Identifier:
keyid:2E:E7:42:96:FC:E8:D2:0B:EF:A1:87:99:DA:E6:EC:78:31:D6:1C:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LudClvzo0gvvoYeZ2ubseDHWHFo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/c73b3b-5b5c-4a77-8b80-d2b697aefa02/1/Rb7F4D-VQenGCJGFIQ0pL_-8SdI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/c73b3b-5b5c-4a77-8b80-d2b697aefa02/1/LudClvzo0gvvoYeZ2ubseDHWHFo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.142.224.0/22
194.146.212.0/22
195.177.234.0/23
IPv6:
2a01:200::/32
Signature Algorithm: sha256WithRSAEncryption
31:80:84:1c:53:05:4d:4a:3f:70:e7:96:f5:47:19:c2:1e:5d:
67:51:f5:87:a1:31:23:d4:4f:2e:11:55:03:c8:67:00:8c:9f:
2c:0f:dc:a7:0e:c3:7f:37:bf:4a:2a:e8:bc:b1:c5:1e:d6:c4:
f7:c9:3e:59:9d:bd:bb:f1:82:c6:de:8e:3a:d6:c8:ce:ef:31:
68:96:1a:f6:6f:3d:1f:3d:ca:e5:f9:f6:14:37:0c:0b:56:45:
5a:40:73:cf:cc:14:30:10:85:d2:b9:b4:47:02:bd:16:50:2a:
b8:b6:1c:d2:0a:6e:ac:0f:0c:ad:6d:a5:db:84:a4:27:89:29:
ba:4d:2e:17:6b:4f:95:e7:0d:0f:ab:37:62:74:f8:b2:7d:ed:
00:6a:19:fe:f3:5a:50:0f:a1:6c:10:db:4e:ca:de:92:f3:17:
04:c0:bd:25:21:75:6e:04:ab:bc:88:bb:b7:4a:39:45:a9:04:
f2:8d:1e:19:2e:a4:a0:c7:65:e8:dd:af:19:20:b1:b1:04:3b:
8e:98:f4:84:51:2b:9c:b4:17:92:3b:b2:89:5e:8e:17:17:b2:
0c:3c:fd:04:e8:92:c5:3e:cf:fe:c0:f2:4e:eb:5d:0d:82:69:
93:7d:f2:a7:59:65:c8:07:6b:04:b1:d9:65:68:fe:cb:e4:b9:
0c:fd:06:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:49:38 2025 by rpki-client