Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/d9cc8d-95ac-4848-b097-9d63b0476e24/1/rs9tHLr8zyXOfjLVtvASmrQRyII.roa
File: rs9tHLr8zyXOfjLVtvASmrQRyII.roa (raw, json)
Hash identifier: TPmV5eCt75VU6HkVEIxwqSqz2UP53y06YcldQPwtkco=
Subject key identifier: AE:CF:6D:1C:BA:FC:CF:25:CE:7E:32:D5:B6:F0:12:9A:B4:11:C8:82
Certificate issuer: /CN=712ff11dd0c66ce67fe0f1d749c0909ef3418d29
Certificate serial: 01946410369BCE34A50AE3E6AAEF31B536FA
Authority key identifier: 71:2F:F1:1D:D0:C6:6C:E6:7F:E0:F1:D7:49:C0:90:9E:F3:41:8D:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cS_xHdDGbOZ_4PHXScCQnvNBjSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/d9cc8d-95ac-4848-b097-9d63b0476e24/1/rs9tHLr8zyXOfjLVtvASmrQRyII.roa
Signing time: Tue 14 Jan 2025 09:06:11 +0000
ROA not before: Tue 14 Jan 2025 09:06:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60134
IP address blocks: 45.147.129.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:64:10:36:9b:ce:34:a5:0a:e3:e6:aa:ef:31:b5:36:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=712ff11dd0c66ce67fe0f1d749c0909ef3418d29
Validity
Not Before: Jan 14 09:06:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=aecf6d1cbafccf25ce7e32d5b6f0129ab411c882
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:97:04:55:52:c7:84:8c:70:10:9c:ff:29:73:
9e:7f:b2:27:51:c4:27:ec:39:3e:9c:1a:a8:5d:6a:
d5:83:94:10:5e:c8:5a:89:4d:ed:e1:89:1b:4d:8c:
5e:fb:ee:6a:e5:f1:28:97:98:81:6d:7f:b8:71:49:
6a:60:81:59:80:16:3c:9c:b2:6a:78:24:46:18:30:
35:2a:35:67:b3:9f:28:2c:5d:4d:6a:16:b5:08:db:
9f:3a:20:2d:9f:da:74:c3:4d:6e:4f:0c:40:93:7f:
38:71:ff:24:c2:70:5e:d4:79:a4:20:14:c1:36:16:
42:54:20:87:c2:2a:b5:dc:fd:5f:fb:a0:1f:08:24:
74:1a:64:c4:00:b4:b8:88:19:d9:5e:81:98:26:59:
72:90:7c:cf:e4:47:28:eb:34:84:dc:27:93:83:5c:
9d:18:bf:c9:b2:fe:34:59:00:6d:9d:d9:47:8e:a4:
44:10:d0:3c:9f:68:01:20:da:48:61:88:03:dc:db:
db:4d:ec:d2:54:c8:9e:c4:51:61:85:1a:f8:ca:af:
09:9b:40:bd:08:98:37:f1:5d:ec:27:60:5f:65:08:
cc:df:a9:72:f7:e3:37:f9:ba:46:44:75:23:9b:87:
aa:4d:c9:b9:44:f0:82:be:d6:8a:87:a9:89:26:af:
ce:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:CF:6D:1C:BA:FC:CF:25:CE:7E:32:D5:B6:F0:12:9A:B4:11:C8:82
X509v3 Authority Key Identifier:
keyid:71:2F:F1:1D:D0:C6:6C:E6:7F:E0:F1:D7:49:C0:90:9E:F3:41:8D:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cS_xHdDGbOZ_4PHXScCQnvNBjSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/d9cc8d-95ac-4848-b097-9d63b0476e24/1/rs9tHLr8zyXOfjLVtvASmrQRyII.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/d9cc8d-95ac-4848-b097-9d63b0476e24/1/cS_xHdDGbOZ_4PHXScCQnvNBjSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.147.129.0/24
Signature Algorithm: sha256WithRSAEncryption
58:7d:37:da:5c:10:ab:2f:75:69:26:1f:a4:1a:fe:36:33:5a:
0c:20:9f:c5:82:fe:f2:a6:82:ae:0c:27:3a:88:70:66:e0:64:
76:77:1e:b2:64:6f:fc:bf:7a:18:c7:77:0d:f2:68:25:27:60:
e5:bf:2e:b7:2f:73:b6:ba:33:24:4e:4f:7c:3e:39:10:3a:9d:
f8:a4:05:e6:e1:8a:98:d2:b8:af:43:0d:1d:af:1a:b7:64:8d:
bc:1c:63:e7:da:18:bd:a3:db:62:c2:bb:74:1c:f0:54:09:ab:
e3:cf:a4:25:c1:d8:27:18:c5:ca:0b:5e:00:13:07:a3:52:32:
28:5f:8e:f1:a0:85:cc:09:d1:f8:b8:92:ca:78:01:8a:d7:29:
d5:d2:f2:8b:95:1d:0d:55:aa:8d:5c:d9:3b:fb:db:bf:9e:92:
f8:d8:1f:94:9a:d9:9f:9d:30:c4:ac:86:16:e8:e9:40:d3:3e:
4a:a8:54:68:91:43:33:70:03:96:a3:5c:51:cc:64:d4:7a:20:
98:5f:bf:48:d1:75:ce:75:b3:e1:dd:98:49:5e:d0:fc:60:f0:
56:87:b3:eb:98:e3:32:0a:b7:a3:da:0a:78:59:82:37:cb:dc:
b8:c8:cf:f9:34:a2:ac:08:bd:0c:57:74:c8:84:03:61:e1:1a:
6d:e9:4b:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:58:17 2025 by rpki-client