Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/0735e3-00aa-405d-89bb-96a404c790b7/1/UiEHpV0o6qgUlIUCJot-mLBGbEo.roa
File: UiEHpV0o6qgUlIUCJot-mLBGbEo.roa (raw, json)
Hash identifier: JB7oqg+ekzeyIxYz3rpOr9y9GE4UMR/u2AViW+Bo8hQ=
Subject key identifier: 52:21:07:A5:5D:28:EA:A8:14:94:85:02:26:8B:7E:98:B0:46:6C:4A
Certificate issuer: /CN=787650d0951529b1a817232c12c42e49b889e1b8
Certificate serial: 018DD508EC18DDF01DB54AA739823A1BC6D4
Authority key identifier: 78:76:50:D0:95:15:29:B1:A8:17:23:2C:12:C4:2E:49:B8:89:E1:B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eHZQ0JUVKbGoFyMsEsQuSbiJ4bg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/0735e3-00aa-405d-89bb-96a404c790b7/1/UiEHpV0o6qgUlIUCJot-mLBGbEo.roa
Signing time: Fri 23 Feb 2024 08:15:48 +0000
ROA not before: Fri 23 Feb 2024 08:15:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 209155
IP address blocks: 45.150.149.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:d5:08:ec:18:dd:f0:1d:b5:4a:a7:39:82:3a:1b:c6:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=787650d0951529b1a817232c12c42e49b889e1b8
Validity
Not Before: Feb 23 08:15:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=522107a55d28eaa814948502268b7e98b0466c4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:70:69:30:fd:74:8c:0a:d9:63:fd:77:e2:da:
6d:77:de:f9:35:35:73:92:31:29:37:1d:55:0c:31:
97:5f:5d:ca:01:27:08:d9:07:86:ef:b9:ad:77:f4:
b9:a4:dc:bd:7e:49:fb:ba:e5:1f:c9:36:d7:30:e5:
ef:0f:62:68:fb:fd:20:aa:4d:4e:83:54:05:10:4b:
49:d3:58:e8:b2:7d:f6:46:cc:95:37:85:a8:6a:82:
4f:7f:43:07:69:df:8a:c0:be:9c:bc:e4:ef:47:b2:
36:e4:7c:00:03:5a:97:29:7b:ff:ae:f7:8c:19:7b:
97:22:09:35:65:75:b9:80:51:d7:fc:a3:74:a7:86:
7f:d3:d8:6c:14:be:cc:a3:ae:78:91:29:37:05:ce:
70:75:2a:75:18:27:43:8e:04:56:af:5f:a9:9d:2e:
79:05:62:a8:1b:69:b4:b0:f5:2b:06:d4:83:07:ca:
b3:e9:ff:63:2d:ce:f3:1f:ea:54:fd:77:0e:eb:ff:
cc:87:45:60:81:5a:e0:98:8d:ad:bf:76:69:54:67:
e1:92:2f:84:d8:af:13:4c:fb:28:0f:62:df:45:a1:
12:3f:b4:ca:51:5e:5d:52:c3:44:47:85:5e:c4:1a:
73:43:18:c3:4c:1c:f7:88:0d:42:1e:5e:a5:ad:81:
62:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:21:07:A5:5D:28:EA:A8:14:94:85:02:26:8B:7E:98:B0:46:6C:4A
X509v3 Authority Key Identifier:
keyid:78:76:50:D0:95:15:29:B1:A8:17:23:2C:12:C4:2E:49:B8:89:E1:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eHZQ0JUVKbGoFyMsEsQuSbiJ4bg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/0735e3-00aa-405d-89bb-96a404c790b7/1/UiEHpV0o6qgUlIUCJot-mLBGbEo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/0735e3-00aa-405d-89bb-96a404c790b7/1/eHZQ0JUVKbGoFyMsEsQuSbiJ4bg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.150.149.0/24
Signature Algorithm: sha256WithRSAEncryption
76:28:dd:ca:a0:67:fb:67:8b:55:d7:b8:60:bb:8e:0d:e6:7e:
46:04:83:8a:9a:08:91:a9:56:67:4b:5f:28:08:33:ed:39:98:
2a:10:3e:d3:c7:aa:7f:cd:09:ae:1e:ae:12:83:be:d8:16:c3:
68:6b:34:e1:97:88:ad:f0:d8:c8:9a:cd:69:85:19:4d:11:80:
e1:56:6b:0a:eb:0d:dc:dd:49:32:25:db:74:e1:b4:9e:e1:3e:
db:b3:fd:76:90:52:fa:fd:50:40:2f:de:50:23:5e:b8:1f:8c:
c5:6a:b2:a1:6a:67:15:ed:42:e6:97:a8:a9:4f:66:ed:ce:d6:
41:70:fe:9c:d6:20:bf:7b:9c:c3:21:ca:db:59:13:01:b7:ab:
56:cd:e8:f6:b9:e8:ab:04:f2:a2:58:e2:63:10:1c:91:04:a5:
93:4b:dc:b5:31:57:75:bc:39:ca:81:2d:84:38:f1:10:e6:73:
37:7b:2a:12:f8:75:ea:24:ed:63:26:08:01:ec:15:68:a4:ff:
4c:15:f4:ea:9b:99:4d:8c:7a:ea:6e:51:bf:04:93:63:33:84:
2a:f5:b9:38:7d:03:2d:38:e6:d1:98:d9:7d:be:44:8d:19:2d:
6d:ac:18:79:4a:7a:20:0e:0f:ea:37:74:7a:0b:0b:44:89:f4:
2c:d1:8a:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:49:25 2025 by rpki-client