Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/45Db8IKTun51UIWrf_qu589b3Fg.roa
File: 45Db8IKTun51UIWrf_qu589b3Fg.roa (raw, json)
Hash identifier: sVAMN8p9OeTA/f1/OINUI11KNyVZTyv1vnlZJMuvSXk=
Subject key identifier: E3:90:DB:F0:82:93:BA:7E:75:50:85:AB:7F:FA:AE:E7:CF:5B:DC:58
Certificate issuer: /CN=ff82309a6814678ad72e3f31a4fe0272f40bd986
Certificate serial: 018F9BD2F3C37BDA694048A2E62155F0EFB2
Authority key identifier: FF:82:30:9A:68:14:67:8A:D7:2E:3F:31:A4:FE:02:72:F4:0B:D9:86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/45Db8IKTun51UIWrf_qu589b3Fg.roa
Signing time: Tue 21 May 2024 15:44:04 +0000
ROA not before: Tue 21 May 2024 15:44:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 45.145.17.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:9b:d2:f3:c3:7b:da:69:40:48:a2:e6:21:55:f0:ef:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff82309a6814678ad72e3f31a4fe0272f40bd986
Validity
Not Before: May 21 15:44:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e390dbf08293ba7e755085ab7ffaaee7cf5bdc58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:61:e6:27:41:37:6a:36:5f:6f:1f:ad:0b:13:
b5:44:46:92:c8:b8:e0:9f:ab:ea:f4:ef:47:2b:8a:
ce:f3:36:0b:b7:8e:8e:7a:6c:3e:52:19:a9:e5:81:
13:f5:28:07:c8:09:39:37:00:50:8f:e3:72:30:1f:
ea:fb:fc:d9:a4:3b:b1:95:0c:04:87:92:69:bd:98:
bd:dd:79:e5:c3:cb:cc:5d:86:65:aa:1a:41:e5:f1:
3e:56:42:55:48:bc:da:07:79:d7:41:ae:8a:87:9e:
e0:08:00:9d:fb:0e:ea:06:d9:99:68:8e:fa:c9:29:
b2:58:e6:f5:71:d0:42:e2:ea:f2:3b:db:49:24:46:
09:40:30:b8:9e:86:39:8c:65:c5:28:a9:6a:59:9c:
97:bc:9a:d7:be:ff:e9:39:92:21:81:c6:59:32:e0:
39:ad:8e:fc:97:55:c6:1f:96:72:09:a6:b9:c5:f5:
0d:b8:bd:91:a2:9d:a0:6d:d6:64:6a:e7:c2:b0:81:
df:fe:45:5b:e1:d8:ca:a6:1b:7b:2a:97:11:75:01:
c1:69:b5:87:3e:c8:2a:3f:31:3b:8d:06:ec:e5:57:
d5:5d:c0:97:5f:a8:07:0e:57:41:ac:f2:fb:64:54:
6e:1a:d5:29:9c:f6:44:e9:96:02:25:88:71:85:92:
71:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:90:DB:F0:82:93:BA:7E:75:50:85:AB:7F:FA:AE:E7:CF:5B:DC:58
X509v3 Authority Key Identifier:
keyid:FF:82:30:9A:68:14:67:8A:D7:2E:3F:31:A4:FE:02:72:F4:0B:D9:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/45Db8IKTun51UIWrf_qu589b3Fg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.145.17.0/24
Signature Algorithm: sha256WithRSAEncryption
82:80:e1:c0:fe:9e:3c:40:23:99:b2:74:d8:03:d8:ea:2a:10:
96:9f:a4:94:f7:af:4a:1b:fd:a6:7e:42:97:23:8f:bb:05:5e:
a8:81:6a:62:e9:c6:fa:34:e0:5e:ba:60:a2:c3:b1:dc:7b:17:
6a:28:2c:a9:73:a2:6d:86:2a:6a:99:89:a1:cb:b4:d8:14:7a:
ee:14:a0:c2:fa:a2:37:1a:c4:93:9a:eb:16:40:67:41:f4:53:
45:d0:ff:ea:39:17:d8:bd:96:35:09:ae:70:44:73:ab:3c:a4:
b5:3f:19:bf:15:d9:66:ce:85:97:46:74:de:fe:86:0a:ab:ca:
47:45:3b:ef:2c:c0:6b:58:18:3e:67:a8:ea:57:5a:10:dd:03:
d5:44:1e:b6:ba:ac:81:f2:e3:fe:22:96:e8:7b:1f:c4:b2:2c:
74:95:8c:c6:8b:98:2c:7b:4c:b5:3f:69:8b:89:7b:40:3e:cf:
e1:9a:20:97:fa:2a:b4:67:54:9a:45:a1:f9:9c:d9:3a:ea:c2:
04:f5:8d:36:2d:ea:26:39:ed:c7:9d:6e:27:3e:f5:9d:92:bd:
80:0a:27:ff:c2:97:a3:67:68:59:6e:9a:38:6b:0e:b4:46:96:
20:57:1e:6d:ff:16:2c:ba:c1:c5:97:e0:61:b0:f3:73:e0:b8:
db:1c:40:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:44:34 2025 by rpki-client