Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/1fd0a6-4517-4a0b-b3c9-12ec22c9c5a2/1/mew8-eeZMjfWFrph1bkqTGd0o2o.roa
File: mew8-eeZMjfWFrph1bkqTGd0o2o.roa (raw, json)
Hash identifier: ZTROpY1xzLgXXfO1lrdKWiIbYEdEw9dXrylpkOT7OWA=
Subject key identifier: 99:EC:3C:F9:E7:99:32:37:D6:16:BA:61:D5:B9:2A:4C:67:74:A3:6A
Certificate issuer: /CN=32474ac7ca85e09c2d48b33e7bf66f8ed764de0f
Certificate serial: 019427486F614412BF139A291A963FB75E6A
Authority key identifier: 32:47:4A:C7:CA:85:E0:9C:2D:48:B3:3E:7B:F6:6F:8E:D7:64:DE:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MkdKx8qF4JwtSLM-e_Zvjtdk3g8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/1fd0a6-4517-4a0b-b3c9-12ec22c9c5a2/1/mew8-eeZMjfWFrph1bkqTGd0o2o.roa
Signing time: Thu 02 Jan 2025 13:50:46 +0000
ROA not before: Thu 02 Jan 2025 13:50:46 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44486
IP address blocks: 45.155.76.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:6f:61:44:12:bf:13:9a:29:1a:96:3f:b7:5e:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32474ac7ca85e09c2d48b33e7bf66f8ed764de0f
Validity
Not Before: Jan 2 13:50:46 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=99ec3cf9e7993237d616ba61d5b92a4c6774a36a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:b7:1a:87:87:57:ae:4a:85:cc:f3:e2:f3:bb:
1d:16:7c:88:eb:01:41:a1:a9:7d:3e:eb:02:e2:62:
43:99:9c:03:e4:3c:63:6b:94:d2:65:0b:c0:50:ea:
2d:44:cd:7f:3d:bd:5f:c1:07:40:6e:8d:5d:61:df:
5c:e7:d6:0c:85:96:30:7b:22:21:6b:34:87:8f:36:
73:3a:e2:8f:b0:a7:24:82:0a:76:f1:1a:ad:fd:d2:
d7:6f:9c:88:0e:ed:2e:9c:44:97:e2:4d:7e:a3:e5:
ad:0f:30:7a:14:01:f6:38:6b:bf:25:1e:76:e7:20:
dd:d0:cd:74:0a:10:98:20:18:25:60:65:a5:95:5a:
14:02:d2:28:31:13:39:03:f8:12:3a:92:8b:3e:a0:
a9:fc:a2:ea:c8:3e:86:11:58:48:68:6f:b7:b4:41:
ad:7b:bc:7e:44:b4:bf:cf:ff:8c:08:6d:79:4a:eb:
43:9a:56:f4:c5:e9:6d:5a:8f:d6:9b:ac:6d:de:27:
db:f4:48:bc:88:cf:3f:7f:3b:44:78:68:7a:45:9d:
c5:06:66:ce:8d:50:27:1a:d8:30:f9:76:8d:2c:e1:
a6:30:70:d3:5f:0c:90:10:96:32:e7:9b:cf:04:da:
2f:88:c6:0f:c9:c0:2f:df:d1:44:15:ae:e1:61:29:
e4:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:EC:3C:F9:E7:99:32:37:D6:16:BA:61:D5:B9:2A:4C:67:74:A3:6A
X509v3 Authority Key Identifier:
keyid:32:47:4A:C7:CA:85:E0:9C:2D:48:B3:3E:7B:F6:6F:8E:D7:64:DE:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MkdKx8qF4JwtSLM-e_Zvjtdk3g8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/1fd0a6-4517-4a0b-b3c9-12ec22c9c5a2/1/mew8-eeZMjfWFrph1bkqTGd0o2o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/1fd0a6-4517-4a0b-b3c9-12ec22c9c5a2/1/MkdKx8qF4JwtSLM-e_Zvjtdk3g8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.155.76.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:bb:d2:55:19:b5:df:2c:72:bd:b6:45:ef:57:6c:f0:e9:93:
f5:61:b3:d4:a2:ed:c0:36:5b:c6:2e:0e:da:5f:21:53:14:5f:
99:2b:12:64:25:80:50:65:e8:e4:fc:b8:ef:50:22:8b:2c:50:
62:38:35:47:a0:7f:28:c7:f2:a6:e6:52:3e:2d:5f:88:74:47:
97:21:c3:bb:33:17:84:8a:7d:0e:bb:52:82:f4:da:27:e9:05:
30:dd:3e:9d:c9:3f:67:02:a9:e6:fc:24:26:1d:1e:8c:f4:71:
34:cd:37:0b:17:fe:49:db:f4:f7:7f:77:02:7c:01:bf:b3:25:
52:c0:e8:83:5f:35:1f:d2:c9:f7:d1:d2:87:07:00:78:69:29:
10:bc:c9:23:6a:2b:cb:76:49:78:1f:cc:f2:3a:f0:b5:e1:40:
95:d8:f1:00:e6:bf:50:53:db:27:0a:2b:fc:a6:ce:14:8d:51:
00:58:89:40:f5:d6:85:0e:d9:5b:70:7a:62:d4:e9:36:1c:8b:
b2:b9:e8:63:d9:7f:ee:20:25:d2:ce:0a:bc:ee:5e:84:8c:00:
92:44:f5:dc:18:e0:42:d7:4d:0c:72:63:25:83:34:22:0c:1b:
bf:6d:d0:f9:f4:30:99:d5:97:29:85:ec:1e:f0:3d:95:1a:2c:
1f:02:78:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:50:57 2025 by rpki-client