Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/1bc0cb-dfa4-4151-a61b-335a7e4384b1/1/SeIt97BFvfmAuMe5gHZCeKi7-vg.roa
File: SeIt97BFvfmAuMe5gHZCeKi7-vg.roa (raw, json)
Hash identifier: Ap7ZifsfgDnz0nbs7rFlGfSlNzYLWt80Xr0fAwZ1Qd8=
Subject key identifier: 49:E2:2D:F7:B0:45:BD:F9:80:B8:C7:B9:80:76:42:78:A8:BB:FA:F8
Certificate issuer: /CN=5ad0c41fde99651b132906ff0602b47b5607a5be
Certificate serial: 01906DDC164898AEA1716080894FB7BA2CD1
Authority key identifier: 5A:D0:C4:1F:DE:99:65:1B:13:29:06:FF:06:02:B4:7B:56:07:A5:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WtDEH96ZZRsTKQb_BgK0e1YHpb4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/1bc0cb-dfa4-4151-a61b-335a7e4384b1/1/SeIt97BFvfmAuMe5gHZCeKi7-vg.roa
Signing time: Mon 01 Jul 2024 10:34:18 +0000
ROA not before: Mon 01 Jul 2024 10:34:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 3352
IP address blocks: 45.153.96.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:6d:dc:16:48:98:ae:a1:71:60:80:89:4f:b7:ba:2c:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ad0c41fde99651b132906ff0602b47b5607a5be
Validity
Not Before: Jul 1 10:34:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=49e22df7b045bdf980b8c7b980764278a8bbfaf8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:2f:5f:72:95:8d:03:2c:4a:fc:e2:fa:37:c4:
ba:0e:93:22:9a:0e:f3:c0:32:c3:69:e1:0e:41:ee:
f7:fe:39:04:8e:fb:4d:e0:3b:cf:a5:94:8e:fd:55:
e2:34:f3:74:b1:ae:43:ce:db:ac:f7:9c:2c:e7:a6:
9c:d1:2b:b8:5c:0d:e6:a5:f8:e8:f5:89:37:e9:83:
ae:32:5c:17:b5:a7:46:ed:2a:0d:f7:4a:e6:62:1b:
f0:82:82:af:ae:73:57:9e:49:89:b5:c7:60:d0:fe:
9a:e9:0b:0f:4f:5e:6f:0b:03:8c:5a:0b:bb:3e:79:
13:92:a3:76:bc:80:04:dc:d1:8a:d9:20:e0:5b:cc:
80:02:38:7b:bd:35:a4:a4:6b:60:79:aa:9d:f3:b7:
13:7f:93:3d:5a:7d:32:9f:98:be:0f:2c:f1:87:be:
90:69:46:66:da:37:f1:9e:59:e2:16:d3:bf:0a:0f:
88:6e:a5:b4:34:a8:33:4e:3b:87:3b:a1:df:00:f8:
24:f4:1f:bd:4f:87:6b:e5:15:ad:2e:17:f4:09:63:
13:f5:b9:d3:08:df:8e:41:b7:1c:3d:9b:e2:a2:50:
0e:b2:82:a2:3d:58:75:d1:47:a6:d7:ee:42:9e:d2:
3e:7e:48:bd:21:67:d0:fc:81:07:ac:4f:f5:92:ef:
e6:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:E2:2D:F7:B0:45:BD:F9:80:B8:C7:B9:80:76:42:78:A8:BB:FA:F8
X509v3 Authority Key Identifier:
keyid:5A:D0:C4:1F:DE:99:65:1B:13:29:06:FF:06:02:B4:7B:56:07:A5:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WtDEH96ZZRsTKQb_BgK0e1YHpb4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/1bc0cb-dfa4-4151-a61b-335a7e4384b1/1/SeIt97BFvfmAuMe5gHZCeKi7-vg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/1bc0cb-dfa4-4151-a61b-335a7e4384b1/1/WtDEH96ZZRsTKQb_BgK0e1YHpb4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.153.96.0/22
Signature Algorithm: sha256WithRSAEncryption
7f:3e:30:56:a2:9b:44:32:b2:b8:3d:07:51:e7:e5:61:c7:b1:
44:68:47:81:d5:f4:ce:95:6c:55:3e:18:22:af:fe:73:c8:e0:
35:c5:b1:40:fd:cf:b5:71:39:e8:e1:a5:c0:53:88:72:cd:5a:
5e:00:76:88:61:92:90:e1:a9:1e:61:a0:34:f5:71:b5:33:e9:
8c:23:aa:af:6d:14:ad:22:cd:4e:54:61:e9:fb:b1:8a:af:13:
f4:df:6a:d1:bf:3a:ff:b4:bf:fe:8d:46:ae:a2:59:e1:1c:36:
1d:b8:e8:26:e3:76:0b:28:c8:62:04:0d:71:f9:8f:cd:74:29:
59:15:da:bc:b8:94:5a:d4:7a:a4:f2:8f:df:ed:dd:d7:a5:83:
fe:10:de:92:3d:09:80:3a:ce:75:eb:a5:bb:ca:6f:eb:e1:a3:
33:98:18:4b:93:d8:62:f3:91:50:f6:2e:ff:86:57:78:e6:ae:
9c:86:0c:29:f7:25:23:ac:b4:fc:c5:b4:21:00:97:9c:4e:cd:
f6:e6:61:1c:11:07:26:85:06:13:da:32:32:f6:cd:ae:c0:52:
ea:b1:93:e1:96:70:a7:54:cd:80:40:3d:9c:82:87:aa:e0:d6:
fe:ae:91:3a:8c:22:ed:0e:ba:eb:ec:4d:98:1c:02:92:9e:8a:
1c:39:33:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:56:11 2025 by rpki-client