Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/1c78e3-67d6-4e90-aeb5-0852cb353293/1/1-VmFvbdwine_GCcQDaykLpCz_Lc.roa
File: 1-VmFvbdwine_GCcQDaykLpCz_Lc.roa (raw, json)
Hash identifier: /HhkyMMLzR+EDBQMNo5iaHpbzZC3H2S6CjnVaHqtW2c=
Subject key identifier: F9:59:85:BD:B7:70:8A:77:BF:18:27:10:0D:AC:A4:2E:90:B3:FC:B7
Certificate issuer: /CN=8b37183341a2ab6df3c59ec827ed71200b5a6244
Certificate serial: 01936910D50BB933456E287FCBA01174F3DA
Authority key identifier: 8B:37:18:33:41:A2:AB:6D:F3:C5:9E:C8:27:ED:71:20:0B:5A:62:44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/1c78e3-67d6-4e90-aeb5-0852cb353293/1/1-VmFvbdwine_GCcQDaykLpCz_Lc.roa
Signing time: Tue 26 Nov 2024 15:22:11 +0000
ROA not before: Tue 26 Nov 2024 15:22:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 134835
IP address blocks: 45.153.10.0/24 maxlen: 24
45.153.11.0/24 maxlen: 24
45.155.220.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:69:10:d5:0b:b9:33:45:6e:28:7f:cb:a0:11:74:f3:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b37183341a2ab6df3c59ec827ed71200b5a6244
Validity
Not Before: Nov 26 15:22:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f95985bdb7708a77bf1827100daca42e90b3fcb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:25:71:95:96:45:a0:66:88:13:e0:f6:60:1f:
de:4f:50:4c:ac:86:33:51:fe:0c:b4:08:83:96:a8:
19:b1:ff:a2:9c:8a:22:4a:08:1e:3b:55:f9:ee:8c:
1c:70:14:42:a5:22:2f:b6:52:cf:b7:cd:79:f4:b9:
9b:02:c8:f0:cc:86:60:bb:81:19:d6:bb:b0:cd:86:
86:d2:fd:39:8d:65:e2:42:71:6d:9b:c4:7a:be:b8:
a7:9e:43:99:e5:e2:41:a3:43:64:d2:dc:e2:6b:9e:
ac:40:bd:56:e2:75:a0:c1:a7:63:4a:b8:b8:bd:3a:
8d:35:3f:5a:a5:8e:29:d9:75:2c:4d:e0:c6:5d:d8:
16:32:bc:d6:2a:3d:77:a9:12:95:90:f0:e5:0e:a0:
67:f7:2a:01:55:96:47:19:da:ba:ad:43:92:f6:57:
73:36:76:08:e7:89:bd:41:bd:3e:bb:4e:3f:34:92:
5c:cf:1f:4e:5f:7e:91:50:70:e2:9a:f0:a3:a4:8a:
76:24:96:73:12:34:9a:74:bf:4e:71:7f:fa:0d:2e:
de:9a:82:ca:47:11:05:d0:25:97:0d:cd:4d:d8:b9:
94:43:2d:55:0a:11:64:3f:2f:cf:0c:bd:c7:02:e4:
f3:aa:66:ef:ab:87:7c:f8:29:37:6c:02:12:a8:b0:
25:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:59:85:BD:B7:70:8A:77:BF:18:27:10:0D:AC:A4:2E:90:B3:FC:B7
X509v3 Authority Key Identifier:
keyid:8B:37:18:33:41:A2:AB:6D:F3:C5:9E:C8:27:ED:71:20:0B:5A:62:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/1c78e3-67d6-4e90-aeb5-0852cb353293/1/1-VmFvbdwine_GCcQDaykLpCz_Lc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/1c78e3-67d6-4e90-aeb5-0852cb353293/1/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.153.10.0/23
45.155.220.0/24
Signature Algorithm: sha256WithRSAEncryption
bd:08:e8:be:80:f7:dd:fa:ac:17:04:66:26:7b:30:45:f5:d0:
fd:49:08:18:b8:fe:a9:dd:9e:a9:05:2e:b1:9f:57:8a:1f:f9:
80:fa:20:ef:cd:9a:3e:0a:b5:3e:e8:60:47:e1:0a:f2:03:5c:
cd:36:94:bb:c7:cf:27:63:19:20:92:85:6b:23:a0:34:04:51:
62:d9:8a:76:7b:42:e0:78:2f:63:98:50:03:dd:bf:62:27:5d:
75:2b:19:16:97:c0:3b:26:80:13:ab:51:a7:b6:28:95:81:e1:
76:26:eb:b6:91:a2:5c:3b:2f:ee:09:56:6d:ec:51:a5:fa:c5:
2e:ea:d5:cf:85:d0:f8:ba:5d:fb:63:68:2c:38:5f:3e:b4:22:
ff:76:d4:1f:32:c5:ca:15:fb:04:d8:a9:ea:78:60:51:4e:48:
44:be:ae:e4:3d:4d:ab:65:de:97:1b:1c:6f:7e:02:ed:95:06:
fa:84:4b:c7:3b:6c:11:06:7a:31:01:b7:38:74:f8:7d:5a:f2:
1f:13:30:f2:aa:ab:84:cb:b3:32:28:69:bf:a2:dc:42:1b:c2:
8a:14:7d:db:51:f1:b0:41:3a:d8:7e:50:4f:6b:be:78:e0:15:
07:63:d2:06:4e:29:9c:a3:62:a1:9e:b1:75:91:09:01:ea:14:
ed:65:d4:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 22:29:24 2025 by rpki-client