Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/c0301d-5801-4ac6-b503-44ea64721c9e/1/70vKh_nRIlsGDeCCWIWnJDoMQow.roa
File: 70vKh_nRIlsGDeCCWIWnJDoMQow.roa (raw, json)
Hash identifier: 9/IlxykCR8D1ob5yM4nNThKcpH35vFsHMDpOK44EfG8=
Subject key identifier: EF:4B:CA:87:F9:D1:22:5B:06:0D:E0:82:58:85:A7:24:3A:0C:42:8C
Certificate issuer: /CN=7ca643bb399c6d87adc4c7cba5d2b72fbd00d046
Certificate serial: 019428273E21E88FB36476E5F142A374E7EA
Authority key identifier: 7C:A6:43:BB:39:9C:6D:87:AD:C4:C7:CB:A5:D2:B7:2F:BD:00:D0:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fKZDuzmcbYetxMfLpdK3L70A0EY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/c0301d-5801-4ac6-b503-44ea64721c9e/1/70vKh_nRIlsGDeCCWIWnJDoMQow.roa
Signing time: Thu 02 Jan 2025 17:54:07 +0000
ROA not before: Thu 02 Jan 2025 17:54:07 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 28753
IP address blocks: 45.81.24.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:27:3e:21:e8:8f:b3:64:76:e5:f1:42:a3:74:e7:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ca643bb399c6d87adc4c7cba5d2b72fbd00d046
Validity
Not Before: Jan 2 17:54:07 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ef4bca87f9d1225b060de0825885a7243a0c428c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:06:6a:5d:c5:a9:bf:da:5b:21:ee:04:5e:41:
e9:20:b9:b4:81:e5:2b:a8:6a:6f:b3:be:fc:7f:e3:
f7:dd:a3:83:92:ae:4a:a8:db:36:48:a6:dc:96:84:
91:91:c6:cc:3d:29:cf:f3:ab:85:ad:37:30:ed:ee:
e6:82:76:fe:c6:d5:16:76:c3:2d:1b:80:7e:cc:56:
5c:d2:96:b0:4a:70:d6:31:22:14:98:55:fc:7c:57:
13:30:b8:f0:bd:9a:88:3c:a3:ad:f9:92:64:58:e3:
0c:71:cd:0e:a6:83:41:6b:4e:ca:55:0a:18:79:24:
c4:9d:32:c1:21:54:58:0c:55:5e:a5:88:06:0a:6c:
11:4d:4b:87:63:c1:9d:69:e3:bf:fc:4c:4f:f0:9e:
aa:4e:8d:64:dd:cf:ed:f5:79:10:10:51:f6:8f:80:
9e:96:1b:a3:f3:89:1e:e8:fa:66:52:51:16:27:b0:
37:4e:fe:e7:e4:1e:c5:f3:84:fb:60:ab:73:0b:ce:
e5:62:b2:96:df:da:d6:c9:44:8a:fc:be:0b:c9:1c:
b1:ac:76:40:fe:93:32:e6:c1:ac:17:24:52:57:af:
02:f5:3d:17:f8:f7:71:d4:31:52:b6:16:8d:58:06:
78:9f:8f:fc:02:a3:57:f4:26:0c:0a:c0:ea:a4:a8:
bd:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:4B:CA:87:F9:D1:22:5B:06:0D:E0:82:58:85:A7:24:3A:0C:42:8C
X509v3 Authority Key Identifier:
keyid:7C:A6:43:BB:39:9C:6D:87:AD:C4:C7:CB:A5:D2:B7:2F:BD:00:D0:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fKZDuzmcbYetxMfLpdK3L70A0EY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/c0301d-5801-4ac6-b503-44ea64721c9e/1/70vKh_nRIlsGDeCCWIWnJDoMQow.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/c0301d-5801-4ac6-b503-44ea64721c9e/1/fKZDuzmcbYetxMfLpdK3L70A0EY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.81.24.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:30:de:47:ac:c4:9d:f8:4b:38:6d:67:6c:a2:1e:0e:bb:bd:
42:78:bd:f6:1f:eb:ba:96:62:62:f0:dd:1f:5d:50:bf:2a:e6:
b1:3a:8a:1c:6d:af:83:01:85:1b:b4:0b:a6:e4:c3:0e:e9:af:
46:cd:14:14:b6:d4:7d:d2:64:63:1e:52:de:60:f5:b1:34:fe:
c4:78:52:b0:a1:6f:dc:a0:5e:7d:72:50:e3:a2:42:d2:87:1c:
72:73:6d:28:e9:6d:7f:df:80:e9:9c:cf:30:64:66:e9:58:28:
0c:79:77:ae:1e:82:51:57:4f:96:0f:00:25:69:94:59:78:f0:
26:5c:d6:0b:c9:23:eb:92:00:52:51:21:99:07:32:1c:5c:e5:
e8:46:e1:2d:b7:37:fb:56:d1:be:8a:ca:ca:e6:ea:ae:39:15:
a9:1f:dc:98:ce:61:0f:50:ca:ed:81:77:11:c9:a1:a0:cf:ff:
b8:60:b9:a1:12:cf:d0:c8:6f:75:d5:3a:7b:91:8c:d2:9c:3a:
5c:d1:92:07:d2:bc:8c:78:1f:75:77:83:6e:ee:85:75:49:dc:
b8:cd:9b:23:82:1f:46:9e:d1:23:82:0d:5a:39:b7:b1:8b:d8:
6b:35:29:68:02:5c:bd:33:ac:3c:24:c1:ad:94:eb:1f:f8:7a:
ca:a6:42:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:23:52 2025 by rpki-client