Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/f3695c-e340-4e2f-afeb-6b95d3c89c91/1/tT8Bhk3TRbD92onTtD9xdUFkuBo.roa
File: tT8Bhk3TRbD92onTtD9xdUFkuBo.roa (raw, json)
Hash identifier: nGHXcTt4lmnaxv72VD2WiGZwBBegRpFmPrLz3wSYepE=
Subject key identifier: B5:3F:01:86:4D:D3:45:B0:FD:DA:89:D3:B4:3F:71:75:41:64:B8:1A
Certificate issuer: /CN=4caf11150ce5fe9f70f36c9806747bb682b1ca21
Certificate serial: 019424449C7338834729E82ED3DB35EE6F14
Authority key identifier: 4C:AF:11:15:0C:E5:FE:9F:70:F3:6C:98:06:74:7B:B6:82:B1:CA:21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TK8RFQzl_p9w82yYBnR7toKxyiE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/f3695c-e340-4e2f-afeb-6b95d3c89c91/1/tT8Bhk3TRbD92onTtD9xdUFkuBo.roa
Signing time: Wed 01 Jan 2025 23:47:43 +0000
ROA not before: Wed 01 Jan 2025 23:47:43 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48817
IP address blocks: 45.67.64.0/22 maxlen: 24
2a09:7140::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:44:9c:73:38:83:47:29:e8:2e:d3:db:35:ee:6f:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4caf11150ce5fe9f70f36c9806747bb682b1ca21
Validity
Not Before: Jan 1 23:47:43 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b53f01864dd345b0fdda89d3b43f71754164b81a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:30:5a:f2:e1:00:40:33:ba:0c:fc:8f:05:70:
91:09:f4:1e:d1:46:bb:41:f7:e3:df:8c:7e:98:23:
88:22:27:26:53:8a:95:e0:ed:a0:e0:10:2d:2d:a7:
f3:2f:62:0d:7e:8d:b2:d1:39:22:cc:e5:cc:33:9f:
10:56:b5:a1:da:cc:0c:a5:06:01:e0:af:15:0e:6e:
d5:f2:7f:ae:86:31:42:84:50:be:45:dd:b2:da:38:
2e:80:33:68:66:24:3b:23:62:f9:13:02:f4:9b:46:
90:83:91:3d:09:d0:1a:59:c4:4f:80:ca:f8:f5:9c:
b4:9a:62:55:c5:20:44:25:21:5b:0e:b0:09:bb:64:
6c:6a:06:3e:a8:4a:42:b4:8a:1f:c0:1e:33:2b:0d:
48:48:58:e7:20:6f:0e:50:25:e3:10:73:c2:f3:e7:
72:dd:d6:87:21:40:72:9f:a4:25:70:a0:d6:71:1c:
dc:4b:d6:57:12:44:e6:5b:bb:a3:ad:af:4c:df:50:
f2:8a:6e:de:99:69:ee:ef:2b:8b:3f:1a:ee:80:f9:
4f:4f:52:ec:ee:29:84:e0:70:e1:82:d9:9b:0c:bb:
5c:75:bc:26:22:4d:ac:33:5c:5f:c4:0f:8a:ad:d5:
57:f6:6f:00:d9:36:8f:8f:04:25:73:33:05:33:91:
8e:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:3F:01:86:4D:D3:45:B0:FD:DA:89:D3:B4:3F:71:75:41:64:B8:1A
X509v3 Authority Key Identifier:
keyid:4C:AF:11:15:0C:E5:FE:9F:70:F3:6C:98:06:74:7B:B6:82:B1:CA:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TK8RFQzl_p9w82yYBnR7toKxyiE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/f3695c-e340-4e2f-afeb-6b95d3c89c91/1/tT8Bhk3TRbD92onTtD9xdUFkuBo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/f3695c-e340-4e2f-afeb-6b95d3c89c91/1/TK8RFQzl_p9w82yYBnR7toKxyiE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.67.64.0/22
IPv6:
2a09:7140::/29
Signature Algorithm: sha256WithRSAEncryption
10:c7:e2:7e:76:5e:72:94:21:80:9d:6f:77:46:c9:76:e5:20:
1d:92:5c:8e:e6:88:e6:6c:63:75:fc:8f:08:c8:42:8f:63:9f:
03:6f:bc:3a:4f:0f:e9:26:85:46:bc:f4:96:72:e8:c3:61:b5:
48:b5:1d:37:db:21:26:19:cd:cc:fa:c3:4c:94:b8:24:75:38:
e8:6f:f6:54:c3:6b:1b:6d:6b:bf:32:1e:64:ae:33:47:17:5b:
9f:1a:6e:25:1e:bd:30:92:3f:38:d4:26:b4:6d:5c:b6:04:1d:
a7:97:18:10:dc:41:8f:c3:e5:4d:13:d6:0e:9a:03:0b:8d:1b:
29:e9:fe:03:01:1f:aa:ce:a8:84:0e:14:be:79:82:c1:ea:64:
98:3e:d3:7a:02:20:5f:c7:8a:57:9f:31:27:84:c5:13:63:d8:
e0:47:e8:51:d8:43:17:5a:92:f4:83:12:78:2d:9f:d5:ba:24:
2d:5d:f3:20:54:03:4b:73:d6:2f:f7:9d:46:60:b2:61:35:c7:
6e:4a:3a:81:be:6b:e4:85:a8:e3:0a:e8:84:d3:94:23:ac:ba:
90:f3:30:c6:e1:13:1e:4f:4e:ae:12:68:4a:12:70:7d:e1:8f:
51:fa:a7:98:e7:d3:fc:c9:93:3c:2b:c3:e5:ae:9d:5c:dc:87:
ab:d8:5c:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:38:29 2025 by rpki-client