Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/dEOTtr1c6IvfO_5Tz8T40Ex3fqQ.roa
File: dEOTtr1c6IvfO_5Tz8T40Ex3fqQ.roa (raw, json)
Hash identifier: +ruooNTPw8EBw4dSfTnIlbXsyBqFSmBTxKqIZu3opjg=
Subject key identifier: 74:43:93:B6:BD:5C:E8:8B:DF:3B:FE:53:CF:C4:F8:D0:4C:77:7E:A4
Certificate issuer: /CN=ff82309a6814678ad72e3f31a4fe0272f40bd986
Certificate serial: 01904628260E5B79FC219E3F757264C0A203
Authority key identifier: FF:82:30:9A:68:14:67:8A:D7:2E:3F:31:A4:FE:02:72:F4:0B:D9:86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/dEOTtr1c6IvfO_5Tz8T40Ex3fqQ.roa
Signing time: Sun 23 Jun 2024 17:32:34 +0000
ROA not before: Sun 23 Jun 2024 17:32:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 5065
IP address blocks: 45.13.179.0/24 maxlen: 24
45.145.17.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:46:28:26:0e:5b:79:fc:21:9e:3f:75:72:64:c0:a2:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff82309a6814678ad72e3f31a4fe0272f40bd986
Validity
Not Before: Jun 23 17:32:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=744393b6bd5ce88bdf3bfe53cfc4f8d04c777ea4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:65:11:30:11:0d:da:b3:c7:10:ef:ab:cc:a2:
28:87:5e:a7:95:b9:36:0e:db:2c:a7:fa:df:df:e4:
d5:77:cb:30:5f:3f:a6:1f:a7:c2:79:5e:6c:f3:ab:
a0:8d:0d:f3:79:0e:c0:94:ac:ff:bf:8a:43:28:80:
1d:36:90:dd:4f:83:04:fc:27:e8:4a:2b:70:90:5b:
69:c0:32:60:19:79:1e:9f:1d:f0:9a:58:6c:fa:f5:
92:59:84:4d:6f:b9:50:bf:be:6a:d0:b7:30:e2:a2:
ed:1c:1e:5b:55:0b:d5:b7:b3:dd:65:da:28:7b:e1:
7b:a5:bc:71:a0:d9:ab:10:0e:7d:44:3a:24:a5:0a:
2a:18:02:23:fe:d0:ea:af:5c:55:c6:79:89:9d:15:
e8:61:0f:49:c9:e6:94:b7:6a:8c:85:b1:76:b5:f9:
3f:eb:97:f6:df:5a:a9:91:c6:3c:71:a7:56:7e:62:
57:66:e9:67:b8:b4:9e:e9:34:cf:8c:57:c2:04:c4:
35:ab:a5:ee:17:f3:f8:eb:96:53:6b:fd:fe:3a:39:
8a:48:a3:9b:72:4d:13:09:52:64:f9:bb:7e:63:88:
57:d5:0c:d0:cd:95:90:d1:98:00:56:2d:01:54:c7:
3d:13:35:a1:8a:c2:13:7d:8b:3b:e5:4a:8d:f4:5e:
19:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:43:93:B6:BD:5C:E8:8B:DF:3B:FE:53:CF:C4:F8:D0:4C:77:7E:A4
X509v3 Authority Key Identifier:
keyid:FF:82:30:9A:68:14:67:8A:D7:2E:3F:31:A4:FE:02:72:F4:0B:D9:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/dEOTtr1c6IvfO_5Tz8T40Ex3fqQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.13.179.0/24
45.145.17.0/24
Signature Algorithm: sha256WithRSAEncryption
04:e6:b5:bc:14:11:65:48:65:cc:d4:3c:7b:30:ed:3e:fb:7b:
4e:58:4b:c3:da:be:7a:e2:9b:a3:ee:b2:a1:77:4d:54:bd:de:
e0:af:0b:80:ec:ec:72:20:b1:63:32:8e:94:a3:bc:5d:02:52:
46:de:52:19:86:4e:a0:f0:a3:52:04:c0:60:17:77:91:4d:50:
50:7a:98:69:b3:68:c8:f5:80:0d:35:17:20:eb:ca:79:5f:6f:
39:6d:4c:45:48:05:32:f3:d0:9d:63:df:05:7d:9b:7b:c6:6c:
b6:d3:d1:76:62:f5:e8:5f:6b:af:c2:34:19:15:18:f4:19:1d:
47:4a:3b:9a:1f:24:3b:b2:8f:b3:c8:17:a6:43:91:af:2b:7c:
d0:ea:67:e4:40:9f:91:8b:5a:c7:3f:96:83:b5:5c:07:97:24:
c1:d1:66:f6:5e:38:85:3d:87:6a:ff:14:fd:82:4c:9a:22:38:
76:c9:ed:1a:20:b4:98:36:70:16:2b:ab:ef:01:92:83:4b:48:
60:48:36:1e:31:d7:11:b2:0c:eb:87:e4:49:b1:7d:6c:8b:ad:
7d:5f:8c:e0:4e:d2:1b:e7:e7:9b:ad:83:1a:bf:15:50:a3:f6:
44:fd:64:60:d2:7f:f5:ca:ec:ea:d9:23:1c:00:6a:cd:27:b4:
3a:df:47:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:29:21 2025 by rpki-client