Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/efc9f1-bec3-4771-b480-0184e81aead9/1/S4RJSJ4i1MYPTUUxtCmA5ZX4Czc.roa
File: S4RJSJ4i1MYPTUUxtCmA5ZX4Czc.roa (raw, json)
Hash identifier: dO0JekyTej4OeFDJ56mfA43cKJlW68IvyEqWkG9TsF0=
Subject key identifier: 4B:84:49:48:9E:22:D4:C6:0F:4D:45:31:B4:29:80:E5:95:F8:0B:37
Certificate issuer: /CN=81cdc17dad03bcb9bc34a9e377ab2070852dca65
Certificate serial: 0194236906A15D59ADFFD05872E59FAC5BB6
Authority key identifier: 81:CD:C1:7D:AD:03:BC:B9:BC:34:A9:E3:77:AB:20:70:85:2D:CA:65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gc3Bfa0DvLm8NKnjd6sgcIUtymU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/efc9f1-bec3-4771-b480-0184e81aead9/1/S4RJSJ4i1MYPTUUxtCmA5ZX4Czc.roa
Signing time: Wed 01 Jan 2025 19:47:52 +0000
ROA not before: Wed 01 Jan 2025 19:47:52 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 47576
IP address blocks: 45.12.99.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:69:06:a1:5d:59:ad:ff:d0:58:72:e5:9f:ac:5b:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81cdc17dad03bcb9bc34a9e377ab2070852dca65
Validity
Not Before: Jan 1 19:47:52 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4b8449489e22d4c60f4d4531b42980e595f80b37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:f8:0d:f1:26:13:e2:31:25:21:08:f0:7f:e3:
88:1b:a7:c0:15:1a:e7:30:80:e1:6c:b0:b5:d4:18:
4e:1d:85:ec:73:f8:ac:45:da:55:8d:ec:10:27:0f:
fc:e2:49:f5:0d:fa:06:fe:95:42:0f:45:2f:64:a1:
30:4f:ef:a2:08:53:49:50:a8:df:ea:ba:78:d5:f6:
c4:8b:08:5d:25:b4:d1:a6:5e:64:df:df:be:70:7b:
9e:1d:9f:e2:b1:11:ad:5c:09:b8:35:7d:1f:2b:99:
c3:6a:61:ef:6c:c1:1e:22:72:21:51:86:c0:f1:94:
66:e0:06:ca:20:30:6a:c4:de:8b:4b:95:ae:a8:6f:
d0:92:3d:bb:28:6c:bb:21:09:86:c5:4e:27:ae:8a:
7c:53:b8:6a:f5:1b:47:82:9e:48:7c:a8:01:eb:38:
6d:02:f4:17:2f:9c:72:1d:38:26:25:f0:17:9e:6a:
aa:30:2d:e1:9a:49:c8:d2:1d:c6:27:f1:b0:f7:7a:
80:3b:6d:86:3d:6a:42:f6:99:9c:46:53:92:f3:47:
74:01:dc:33:9f:1f:c6:84:9f:14:80:e2:f2:77:0b:
e5:f1:6e:85:d3:cb:14:0f:e1:d0:b2:77:00:7a:4a:
58:56:a4:83:a7:f4:25:8c:55:7c:13:cb:d1:9d:58:
46:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:84:49:48:9E:22:D4:C6:0F:4D:45:31:B4:29:80:E5:95:F8:0B:37
X509v3 Authority Key Identifier:
keyid:81:CD:C1:7D:AD:03:BC:B9:BC:34:A9:E3:77:AB:20:70:85:2D:CA:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gc3Bfa0DvLm8NKnjd6sgcIUtymU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/efc9f1-bec3-4771-b480-0184e81aead9/1/S4RJSJ4i1MYPTUUxtCmA5ZX4Czc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/efc9f1-bec3-4771-b480-0184e81aead9/1/gc3Bfa0DvLm8NKnjd6sgcIUtymU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.12.99.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:e2:e0:33:64:62:e5:69:2a:10:8d:11:a0:00:96:37:7e:5c:
7a:24:db:62:d4:53:b0:30:f6:36:18:50:25:c2:15:8c:92:bb:
bb:e2:95:4f:c5:db:54:31:55:a5:fa:1c:3a:c3:36:9c:17:90:
d8:90:30:33:5f:b0:6f:7d:e3:24:48:8a:f0:7d:cc:bd:f4:67:
a5:02:2e:72:4b:f6:e2:f7:57:b7:84:93:e9:9e:82:4b:6c:5f:
be:89:7c:45:3b:e7:4f:0b:24:3e:72:ac:7b:c1:0f:53:6f:19:
2d:d0:0f:3d:84:ec:6c:a9:66:e6:50:85:f7:56:2a:7d:0c:e1:
e4:21:1b:46:ac:c6:f7:ad:85:68:41:11:d9:8d:fe:8f:ec:aa:
df:0f:87:9b:d8:8d:58:e5:74:fd:91:7d:52:f4:36:5d:36:86:
0d:e5:1e:3c:68:ab:a4:48:53:13:aa:af:d5:60:a6:ef:d2:ce:
51:4c:01:4f:cc:a2:8b:4e:3c:32:0f:9f:92:f9:6f:a8:48:a4:
66:b9:90:0c:7d:1b:a5:9a:03:2c:19:16:46:c6:67:c1:c8:92:
07:bf:09:64:ea:e8:cf:b7:91:af:49:a5:94:9a:5c:7e:d9:44:
c8:aa:07:8d:3c:68:ee:86:0a:e9:6e:55:54:b5:3f:56:ee:a0:
1c:2b:a5:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 03:32:22 2025 by rpki-client