Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/c0301d-5801-4ac6-b503-44ea64721c9e/1/71JAesFK0U9ZZnpM5b5aN4-ng-A.roa
File: 71JAesFK0U9ZZnpM5b5aN4-ng-A.roa (raw, json)
Hash identifier: 6qIiu/80CsmDN+JAupg3FIvYAFp3fyKHJ7/+WcTobt8=
Subject key identifier: EF:52:40:7A:C1:4A:D1:4F:59:66:7A:4C:E5:BE:5A:37:8F:A7:83:E0
Certificate issuer: /CN=7ca643bb399c6d87adc4c7cba5d2b72fbd00d046
Certificate serial: 019397741F29DC5B873F386D7AF34E0800E6
Authority key identifier: 7C:A6:43:BB:39:9C:6D:87:AD:C4:C7:CB:A5:D2:B7:2F:BD:00:D0:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fKZDuzmcbYetxMfLpdK3L70A0EY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/c0301d-5801-4ac6-b503-44ea64721c9e/1/71JAesFK0U9ZZnpM5b5aN4-ng-A.roa
Signing time: Thu 05 Dec 2024 15:33:09 +0000
ROA not before: Thu 05 Dec 2024 15:33:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 29802
IP address blocks: 45.87.48.0/22 maxlen: 22
45.91.164.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:97:74:1f:29:dc:5b:87:3f:38:6d:7a:f3:4e:08:00:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ca643bb399c6d87adc4c7cba5d2b72fbd00d046
Validity
Not Before: Dec 5 15:33:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ef52407ac14ad14f59667a4ce5be5a378fa783e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:cc:9a:93:78:2d:61:37:65:b9:ed:f4:ab:79:
f9:d3:49:e1:9b:6f:f7:72:90:93:b5:5a:d9:03:98:
95:4e:80:a8:33:55:45:0b:17:bb:79:01:24:be:2b:
4b:e0:0c:06:ae:d4:32:97:31:c4:03:3d:84:b1:5b:
76:64:85:58:61:03:f4:0a:e6:e8:d6:b9:29:58:9e:
53:84:f2:2b:5d:56:1f:dc:79:42:02:80:d5:fe:ab:
ad:c9:ca:43:82:a0:e1:43:fa:e1:dc:34:9f:be:89:
89:b7:ae:f7:cf:a8:39:62:cd:94:5e:d5:22:11:e0:
fe:d0:bf:1e:e9:a7:90:12:0b:bc:bc:16:e0:07:ba:
95:47:db:eb:60:c1:96:27:5a:69:85:21:5f:69:33:
b9:c7:c0:39:35:60:04:22:40:bc:3b:55:86:d0:da:
78:2f:8a:c5:f1:71:2e:7f:ce:8b:1e:12:32:e7:16:
49:69:b4:9e:b7:33:e2:3b:72:c4:cd:3b:2a:50:d4:
e0:b3:ed:c5:25:68:04:45:7a:fa:ee:7c:a5:1b:0d:
df:4d:fe:99:d8:b4:be:e6:df:4b:3c:b9:2b:a9:09:
63:f2:2b:87:c3:46:71:39:c1:d5:00:99:54:6f:cf:
f1:66:66:99:da:e7:83:e9:8b:58:d7:91:7b:3e:57:
e9:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:52:40:7A:C1:4A:D1:4F:59:66:7A:4C:E5:BE:5A:37:8F:A7:83:E0
X509v3 Authority Key Identifier:
keyid:7C:A6:43:BB:39:9C:6D:87:AD:C4:C7:CB:A5:D2:B7:2F:BD:00:D0:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fKZDuzmcbYetxMfLpdK3L70A0EY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/c0301d-5801-4ac6-b503-44ea64721c9e/1/71JAesFK0U9ZZnpM5b5aN4-ng-A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/c0301d-5801-4ac6-b503-44ea64721c9e/1/fKZDuzmcbYetxMfLpdK3L70A0EY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.87.48.0/22
45.91.164.0/22
Signature Algorithm: sha256WithRSAEncryption
44:d7:9a:50:6a:92:fb:47:1b:9d:9c:71:bf:67:37:34:8b:38:
b5:78:2a:70:f2:b9:59:60:8f:55:ed:94:27:f2:96:85:5d:ec:
97:af:79:b8:6f:44:cd:0a:32:88:d2:85:99:04:40:9d:2d:5f:
e2:97:e6:82:b7:3a:ec:11:31:22:12:b2:a0:04:3a:60:c8:0c:
a3:ad:72:eb:8e:ac:8d:24:21:b2:1e:8b:ff:86:d1:ec:d0:29:
f4:df:5a:cd:76:9e:d6:49:ce:d6:7e:8f:63:db:1b:1e:42:ce:
de:a1:b9:d0:32:29:e2:09:a4:4a:71:46:16:f2:a8:43:a3:74:
cb:b1:07:dd:2f:d9:72:d3:c9:6b:3a:df:e1:1c:85:4c:4a:41:
fb:f8:38:7b:2f:fe:13:e4:17:37:8d:df:10:2f:9b:57:63:8b:
4d:0d:7e:d4:fd:a8:a9:cd:ff:1d:73:53:b4:6a:e3:cc:55:e0:
20:f9:cb:01:e4:0b:0b:f1:ee:da:35:d4:e3:ba:cc:4f:7a:b7:
43:57:ac:34:ea:b3:cb:7a:e6:37:2a:08:47:95:5d:88:e3:86:
ca:3c:8a:93:19:19:65:c6:e5:56:69:d5:ac:ce:8b:dd:7d:19:
9e:38:34:3b:b7:b1:cf:69:85:7a:a3:aa:f8:c2:f2:d6:c2:c1:
c3:f4:f1:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:24:59 2025 by rpki-client