Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/4953ee-910f-4b8e-b464-2650edd3013f/1/0MrgjigrDPt6rPegZME8cXiUORo.roa
File: 0MrgjigrDPt6rPegZME8cXiUORo.roa (raw, json)
Hash identifier: 7glCaQ9Yvpvmun3d90ogrApzDsZCqJLUsDw/+14dTgE=
Subject key identifier: D0:CA:E0:8E:28:2B:0C:FB:7A:AC:F7:A0:64:C1:3C:71:78:94:39:1A
Certificate issuer: /CN=f8d7213f3585b7112dff0cb43c192b1caf307d18
Certificate serial: 019424448331311977BF766BFBCF485FCD40
Authority key identifier: F8:D7:21:3F:35:85:B7:11:2D:FF:0C:B4:3C:19:2B:1C:AF:30:7D:18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-NchPzWFtxEt_wy0PBkrHK8wfRg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/4953ee-910f-4b8e-b464-2650edd3013f/1/0MrgjigrDPt6rPegZME8cXiUORo.roa
Signing time: Wed 01 Jan 2025 23:47:37 +0000
ROA not before: Wed 01 Jan 2025 23:47:37 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 7155
IP address blocks: 45.140.216.0/22 maxlen: 24
2a0f:1b00::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:44:83:31:31:19:77:bf:76:6b:fb:cf:48:5f:cd:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8d7213f3585b7112dff0cb43c192b1caf307d18
Validity
Not Before: Jan 1 23:47:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d0cae08e282b0cfb7aacf7a064c13c717894391a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:e8:49:5a:48:ab:46:ff:03:f2:3b:48:4f:31:
eb:5d:87:46:1d:bd:41:e2:17:1b:95:ec:f3:39:10:
78:f4:a6:a5:f1:2a:f0:c5:aa:7b:a4:83:15:3c:54:
1a:4c:21:4e:ad:82:08:74:c2:49:3b:e7:81:9f:ff:
cb:46:90:5a:e9:ca:77:0c:60:c0:4f:74:a0:1b:a4:
d6:b5:a5:b1:73:f7:1c:a5:89:5a:ee:c1:ee:59:ae:
07:57:19:bf:7b:dd:91:1c:2c:52:aa:ab:34:d4:cb:
1e:73:1b:e1:f1:fc:69:87:f7:53:8e:73:8b:94:7e:
03:54:92:97:b3:6f:a4:d0:94:8d:81:b7:40:e4:47:
7a:80:e3:5a:67:0c:26:66:3c:28:ca:9e:90:24:9a:
ef:ed:85:1c:c1:d3:ea:05:bb:b7:4c:0b:55:41:60:
9d:f3:77:f0:6f:18:9d:46:38:e3:9b:ac:14:c6:91:
9f:bb:eb:2a:c1:25:f5:8e:44:44:ce:33:ad:1d:3e:
b1:1b:19:a1:bb:62:3a:44:55:91:09:2a:e8:a7:fd:
a2:38:a7:ef:e9:4b:16:b1:1a:26:dd:ec:d5:27:1a:
17:c8:3b:3f:61:16:75:1a:e7:98:7c:c1:31:ec:cb:
6e:bd:ee:8f:6a:f3:a2:1a:5e:ab:2b:eb:74:c9:2a:
4b:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:CA:E0:8E:28:2B:0C:FB:7A:AC:F7:A0:64:C1:3C:71:78:94:39:1A
X509v3 Authority Key Identifier:
keyid:F8:D7:21:3F:35:85:B7:11:2D:FF:0C:B4:3C:19:2B:1C:AF:30:7D:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-NchPzWFtxEt_wy0PBkrHK8wfRg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/4953ee-910f-4b8e-b464-2650edd3013f/1/0MrgjigrDPt6rPegZME8cXiUORo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/4953ee-910f-4b8e-b464-2650edd3013f/1/1-NchPzWFtxEt_wy0PBkrHK8wfRg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.140.216.0/22
IPv6:
2a0f:1b00::/29
Signature Algorithm: sha256WithRSAEncryption
3d:27:5a:42:41:50:12:c1:af:bb:d0:e7:af:4a:68:64:aa:82:
c0:6f:e5:b7:d7:dd:bc:6c:86:be:f5:2d:38:3b:b8:2b:ed:f9:
d5:93:f8:cb:3b:3c:76:9b:0a:4b:9d:a1:f2:92:6d:72:a5:f9:
0a:da:98:26:83:3d:28:fd:4e:3d:b1:30:0c:38:5e:f0:cb:c2:
fc:19:57:69:be:fb:8a:29:2b:18:41:ac:1d:29:c3:4a:07:32:
fc:80:37:bf:40:2d:24:6d:71:16:f3:bc:ef:e7:36:2b:1a:54:
ce:25:78:13:46:9a:2f:17:1d:79:d4:b1:75:88:0c:1c:5f:43:
8b:c8:d6:e0:4d:a9:df:cd:74:6c:80:c0:ac:7a:d3:c2:5a:cc:
99:1c:ae:40:e7:0f:b9:9b:ef:00:80:6a:5a:db:0e:72:39:8a:
63:d6:2b:e9:11:53:d5:31:f8:84:b3:c3:b5:60:ae:1e:ed:80:
73:a1:68:3c:90:cf:a5:f4:82:39:bf:f7:1e:0c:e7:0d:54:8b:
bb:c9:c1:48:d3:06:83:55:0c:40:9d:73:99:83:38:01:77:d3:
25:7c:8c:77:c7:3f:d8:8b:90:6d:6d:17:48:22:33:72:c7:62:
0e:ea:48:8f:0f:36:5a:60:af:b0:d4:bb:de:ba:00:40:9b:20:
44:f0:5c:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 04:54:13 2025 by rpki-client