Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/e90ff2-6c91-4eb8-a4b1-c5febe487c40/1/CNmJJKt3ACjx2VO51daqHUFA1ig.roa
File: CNmJJKt3ACjx2VO51daqHUFA1ig.roa (raw, json)
Hash identifier: GRBxouS17KxIhr3BAOufUKRbPiek0R40LWyYw0NkBpQ=
Subject key identifier: 08:D9:89:24:AB:77:00:28:F1:D9:53:B9:D5:D6:AA:1D:41:40:D6:28
Certificate issuer: /CN=8133d89c06a8a1cc9dbc362201f7ec559d7fdd48
Certificate serial: 019421B2329D88805D46A1127BEE27D41855
Authority key identifier: 81:33:D8:9C:06:A8:A1:CC:9D:BC:36:22:01:F7:EC:55:9D:7F:DD:48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gTPYnAaoocydvDYiAffsVZ1_3Ug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/e90ff2-6c91-4eb8-a4b1-c5febe487c40/1/CNmJJKt3ACjx2VO51daqHUFA1ig.roa
Signing time: Wed 01 Jan 2025 11:48:34 +0000
ROA not before: Wed 01 Jan 2025 11:48:34 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 197071
IP address blocks: 45.157.11.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b2:32:9d:88:80:5d:46:a1:12:7b:ee:27:d4:18:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8133d89c06a8a1cc9dbc362201f7ec559d7fdd48
Validity
Not Before: Jan 1 11:48:34 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=08d98924ab770028f1d953b9d5d6aa1d4140d628
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:b9:db:68:d0:48:22:e1:c8:27:69:a9:ae:15:
91:19:42:b3:06:23:fb:de:ef:b1:ce:af:88:df:50:
d1:f5:5d:a5:9e:84:c4:ed:98:36:e1:15:3a:80:8e:
84:b3:8b:5b:b7:e8:7d:ee:60:ac:ef:00:80:3d:14:
58:92:73:db:c1:36:bc:13:5c:69:55:61:2d:cf:11:
23:da:47:4f:79:88:fc:8c:19:8f:8c:60:d7:01:d1:
95:0e:45:d7:d1:9c:16:69:79:70:cb:31:83:6b:b9:
41:1d:df:70:4e:25:9d:c2:4d:0b:5b:ee:c1:a8:8c:
68:27:70:49:5f:26:d4:3d:32:1a:32:9d:d5:d3:5a:
b3:39:aa:34:e9:b7:d5:22:0a:17:7b:d9:74:63:cb:
7c:57:24:75:e1:60:02:93:91:56:c9:96:ec:75:79:
76:a4:2b:3c:98:89:56:d1:bb:19:2d:d0:70:80:2d:
b7:ce:05:55:a9:22:95:cf:db:f0:79:fe:38:3d:f6:
5a:87:3c:63:c8:33:f4:ba:d0:31:db:44:65:c7:05:
98:4f:9a:b5:a2:5a:b7:44:ef:a2:18:85:11:7e:67:
0a:b5:27:22:9d:d6:bd:23:a9:4f:69:3f:39:b7:a5:
0f:b8:00:d2:d6:b2:8a:64:59:b8:16:53:5e:59:ce:
3a:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:D9:89:24:AB:77:00:28:F1:D9:53:B9:D5:D6:AA:1D:41:40:D6:28
X509v3 Authority Key Identifier:
keyid:81:33:D8:9C:06:A8:A1:CC:9D:BC:36:22:01:F7:EC:55:9D:7F:DD:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gTPYnAaoocydvDYiAffsVZ1_3Ug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/e90ff2-6c91-4eb8-a4b1-c5febe487c40/1/CNmJJKt3ACjx2VO51daqHUFA1ig.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/e90ff2-6c91-4eb8-a4b1-c5febe487c40/1/gTPYnAaoocydvDYiAffsVZ1_3Ug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.157.11.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:75:17:f2:fb:84:fe:72:13:a5:06:e4:12:ab:39:f7:34:17:
b3:a8:c7:65:36:20:2a:33:6e:d3:20:1e:63:c4:0e:32:5a:90:
5b:ed:97:b4:da:fb:68:b4:32:28:98:0a:f5:3f:ec:db:62:b8:
f5:06:b9:27:eb:df:7d:7a:a6:3f:94:42:45:b4:af:3e:2e:70:
7d:f9:c3:19:a7:b7:ba:68:a6:7b:34:68:f9:43:6b:7a:52:d5:
9e:99:e8:08:fd:36:82:73:a6:75:f0:b4:4c:38:b9:f9:e2:5e:
3f:a4:21:78:7d:05:24:da:2b:9c:1b:ef:4a:c8:7a:2b:61:29:
db:8f:3b:3e:0c:fb:59:e6:da:8f:3f:3b:30:80:75:67:5d:3d:
32:1a:ee:60:4b:2b:2b:8a:d4:dc:3c:03:99:e3:87:2e:2c:72:
67:f1:3f:ed:13:1f:4b:06:2b:b5:01:43:72:53:42:75:1c:92:
2b:8f:a3:00:4e:59:24:b5:b0:9c:fd:c2:46:f0:b1:e0:dd:eb:
68:7b:92:55:80:ee:cd:a7:9b:c9:6e:3d:67:8b:da:ee:86:9d:
d1:aa:09:f7:3c:10:6c:8a:f5:da:82:85:84:5e:04:28:78:52:
db:a0:29:98:73:80:99:eb:47:01:50:90:9c:84:19:1b:7a:32:
52:df:f7:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:25:58 2025 by rpki-client