Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/1c78e3-67d6-4e90-aeb5-0852cb353293/1/zB9lSUL3fbsMyKzRk-CfCNUppgk.roa
File: zB9lSUL3fbsMyKzRk-CfCNUppgk.roa (raw, json)
Hash identifier: 4PTNCiPX9DKwhamcRPZBIonDg17MgFB+0L8lXZhBDcI=
Subject key identifier: CC:1F:65:49:42:F7:7D:BB:0C:C8:AC:D1:93:E0:9F:08:D5:29:A6:09
Certificate issuer: /CN=8b37183341a2ab6df3c59ec827ed71200b5a6244
Certificate serial: 019368EB4DB0EC9E919A0F34DDF11ACF487F
Authority key identifier: 8B:37:18:33:41:A2:AB:6D:F3:C5:9E:C8:27:ED:71:20:0B:5A:62:44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/1c78e3-67d6-4e90-aeb5-0852cb353293/1/zB9lSUL3fbsMyKzRk-CfCNUppgk.roa
Signing time: Tue 26 Nov 2024 14:41:11 +0000
ROA not before: Tue 26 Nov 2024 14:41:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212238
IP address blocks: 45.152.177.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:68:eb:4d:b0:ec:9e:91:9a:0f:34:dd:f1:1a:cf:48:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b37183341a2ab6df3c59ec827ed71200b5a6244
Validity
Not Before: Nov 26 14:41:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=cc1f654942f77dbb0cc8acd193e09f08d529a609
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:a5:d3:9f:2c:9c:ab:cd:95:fd:5b:8a:a1:df:
16:ba:ae:71:ef:28:37:38:ee:6c:c8:1b:94:be:e2:
d1:3e:0a:ed:bb:de:44:52:d0:6e:d1:c0:03:96:16:
6b:9d:a1:d9:f6:8d:11:52:b9:04:eb:a8:d3:f8:ff:
ff:75:a2:d8:83:2a:58:c8:4c:eb:08:80:9d:e5:27:
be:78:a8:19:78:37:3c:ee:de:2e:5c:a9:bd:16:84:
77:77:b0:b0:11:18:b9:6b:20:83:8c:00:2b:46:62:
27:6c:46:d3:88:e5:fe:44:b8:29:63:b4:c8:4b:59:
80:c6:e4:af:da:5e:2c:43:80:7a:c3:ce:22:f0:c5:
07:d0:05:0a:5f:74:7b:27:3d:22:6d:e7:93:d7:29:
4f:2e:8e:b3:89:12:c0:50:76:6d:64:a0:d8:47:f5:
17:4e:e6:9e:60:73:5c:f1:6e:b4:5c:08:79:13:28:
48:72:06:68:c3:a2:3f:79:8d:51:75:4a:e3:91:a6:
6e:cb:42:03:53:06:ae:bb:b6:64:f9:a0:be:06:24:
90:47:ff:7e:57:17:ba:6c:a0:fc:ea:87:f7:c5:a0:
97:5e:a6:a9:20:a8:73:a6:be:85:96:a9:57:c5:52:
ac:ab:b0:5f:7a:9d:7f:ba:77:f0:8b:94:9d:f4:2c:
9f:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:1F:65:49:42:F7:7D:BB:0C:C8:AC:D1:93:E0:9F:08:D5:29:A6:09
X509v3 Authority Key Identifier:
keyid:8B:37:18:33:41:A2:AB:6D:F3:C5:9E:C8:27:ED:71:20:0B:5A:62:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/1c78e3-67d6-4e90-aeb5-0852cb353293/1/zB9lSUL3fbsMyKzRk-CfCNUppgk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/1c78e3-67d6-4e90-aeb5-0852cb353293/1/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.152.177.0/24
Signature Algorithm: sha256WithRSAEncryption
96:4d:7a:bc:a3:41:16:86:79:b2:6a:e9:a7:12:3c:63:6f:b8:
57:54:51:39:a9:ea:d8:09:36:7d:8b:31:75:5f:d6:7e:88:23:
30:9e:b9:46:b6:84:6c:a7:13:1c:60:3a:59:ab:00:f2:c0:84:
e3:7d:5d:76:fc:cf:96:48:6e:0b:d9:d4:d1:b1:27:c1:ab:6b:
c0:d7:8e:8e:97:e6:fb:4f:8f:64:80:6e:98:f1:26:99:60:3b:
a9:09:c9:a9:a9:4e:c4:4e:15:0c:05:e2:44:7a:8d:03:18:8c:
46:2e:1f:e5:05:46:30:c3:ff:dc:35:37:91:8f:9c:9b:7b:0c:
f1:fd:3f:41:da:2a:26:1d:b1:45:a3:05:75:2f:2c:a3:41:8c:
af:c4:af:b2:1f:1c:c5:87:22:af:59:5d:8d:6c:2c:e8:e6:32:
df:59:a7:15:bc:94:48:36:58:d9:ab:58:3a:dd:70:36:ec:7c:
07:0d:0c:87:7b:42:16:19:12:d5:31:f3:f0:04:4a:9f:24:c4:
cf:b1:48:dd:9f:ca:ee:d7:37:a3:d9:cd:e0:22:e9:e3:72:0d:
54:42:d6:78:fb:88:bd:32:8b:da:0b:cc:e9:80:c2:73:be:21:
dd:87:59:f1:28:6d:d9:09:54:02:7a:fc:98:b4:e3:c1:dd:ad:
05:6d:55:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 22:29:17 2025 by rpki-client