Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/f0358f-0d50-4704-85cf-262da883c8e2/1/O3osI0EMQ6lE3X_ye8aviCt4iTA.roa
File: O3osI0EMQ6lE3X_ye8aviCt4iTA.roa (raw, json)
Hash identifier: 9DOrDt/vfxy297yCahpwE4Xa/8MH6AlQc6vnFQ987B0=
Subject key identifier: 3B:7A:2C:23:41:0C:43:A9:44:DD:7F:F2:7B:C6:AF:88:2B:78:89:30
Certificate issuer: /CN=32316cd4881562da3bf3925b4918b6e11d76514c
Certificate serial: 01942521C0D4FC1BE069A5CAB2E9AE9F616A
Authority key identifier: 32:31:6C:D4:88:15:62:DA:3B:F3:92:5B:49:18:B6:E1:1D:76:51:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MjFs1IgVYto785JbSRi24R12UUw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/f0358f-0d50-4704-85cf-262da883c8e2/1/O3osI0EMQ6lE3X_ye8aviCt4iTA.roa
Signing time: Thu 02 Jan 2025 03:49:16 +0000
ROA not before: Thu 02 Jan 2025 03:49:16 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49397
IP address blocks: 45.81.180.0/22 maxlen: 22
45.81.180.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:c0:d4:fc:1b:e0:69:a5:ca:b2:e9:ae:9f:61:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32316cd4881562da3bf3925b4918b6e11d76514c
Validity
Not Before: Jan 2 03:49:16 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3b7a2c23410c43a944dd7ff27bc6af882b788930
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:7f:69:51:7b:31:48:e0:32:5a:ce:b5:ed:c4:
8a:2f:8d:83:6a:97:ea:d9:82:8a:08:49:12:c3:f5:
16:57:f4:b4:3e:42:62:6e:f8:45:4b:7a:fb:78:32:
5d:95:34:05:82:d6:ea:10:dd:02:d3:63:bd:f3:b5:
b8:08:3a:0a:83:8a:89:26:a0:e8:2b:5d:e9:ff:eb:
c9:d3:1f:4e:94:65:4e:9b:d7:35:a6:e3:b1:c8:98:
6c:dd:4c:90:63:a4:a2:ab:ed:db:5c:f4:56:77:4d:
da:a4:46:ff:f2:a2:84:4e:47:20:61:04:7d:32:c9:
55:0d:6c:5b:a3:7e:8e:eb:dc:8b:06:84:c0:66:b7:
6a:38:02:ce:e4:9b:1e:b0:39:38:4f:9a:e6:b2:39:
8e:a4:bd:28:f0:b6:f3:81:24:45:f7:24:6e:8c:4e:
6d:8f:68:c4:60:96:49:28:36:08:5d:86:bb:69:5f:
1a:bc:70:55:37:ee:40:fa:c8:e6:bc:44:42:ff:de:
fb:01:91:8b:6a:35:38:1c:9c:f1:82:47:55:67:dc:
7c:d3:51:3a:6a:ef:02:a6:b1:4f:fc:fb:77:d6:9e:
96:62:e2:26:b9:ad:be:54:d8:09:82:b5:86:7c:c7:
2e:54:49:28:fd:bb:93:7d:02:7b:8f:bc:c5:57:17:
c9:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:7A:2C:23:41:0C:43:A9:44:DD:7F:F2:7B:C6:AF:88:2B:78:89:30
X509v3 Authority Key Identifier:
keyid:32:31:6C:D4:88:15:62:DA:3B:F3:92:5B:49:18:B6:E1:1D:76:51:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MjFs1IgVYto785JbSRi24R12UUw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/f0358f-0d50-4704-85cf-262da883c8e2/1/O3osI0EMQ6lE3X_ye8aviCt4iTA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/f0358f-0d50-4704-85cf-262da883c8e2/1/MjFs1IgVYto785JbSRi24R12UUw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.81.180.0/22
Signature Algorithm: sha256WithRSAEncryption
94:76:44:3c:6b:5d:b8:6e:d5:e3:60:46:22:86:cc:f1:1d:52:
a1:34:b8:a5:f3:f7:24:12:1f:a4:98:03:fc:0a:ee:36:b7:57:
e0:f0:00:de:e1:8e:94:d3:e0:52:03:cb:ad:2b:7d:d6:94:2f:
c8:45:18:fc:c8:da:7f:cb:45:64:ec:1a:07:a3:d2:1d:e8:b1:
7d:82:8d:9b:e3:40:93:5c:2f:1a:98:8c:d1:23:bc:91:5f:d4:
36:bc:3c:b2:16:20:66:bf:e9:f4:19:08:ff:c8:b2:d7:92:b4:
67:c6:22:52:6d:e1:aa:1d:53:c3:28:11:5f:2c:9a:a3:f6:f1:
df:69:9e:85:14:3d:15:9f:9c:18:21:7d:d3:1c:f9:27:17:c4:
70:c3:4b:2d:83:74:70:92:77:85:e6:87:e8:f2:ed:e1:d2:c0:
16:1d:47:68:ec:ae:1d:3b:8f:2f:54:8d:df:33:17:b5:ba:2e:
97:b0:a6:90:d1:c2:86:a8:00:41:60:55:42:39:80:5b:d8:fe:
3b:b7:4f:d4:cc:a9:bf:a7:db:2e:20:29:7f:42:16:5d:e9:de:
06:cf:cb:3a:ea:04:ff:2c:8a:62:63:4d:26:c0:d5:42:86:a1:
e5:14:09:e3:02:b8:fe:02:e6:55:ad:8e:23:10:b3:92:8c:ce:
13:80:6c:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:54:55 2025 by rpki-client