Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/3606f5-17e1-4319-9703-ae401a37c044/1/eZlHkjP7bcQ5mqdW_8q_Z3CHJtQ.roa
File: eZlHkjP7bcQ5mqdW_8q_Z3CHJtQ.roa (raw, json)
Hash identifier: 34+cbh9+LJiKxMOepvEoyovCBwIb8f2BDirppGV1VYI=
Subject key identifier: 79:99:47:92:33:FB:6D:C4:39:9A:A7:56:FF:CA:BF:67:70:87:26:D4
Certificate issuer: /CN=cf9833261697652c35547e98fc05a7e2294edbc7
Certificate serial: 0194228E457B06A1602452C6AEE14CF39DCF
Authority key identifier: CF:98:33:26:16:97:65:2C:35:54:7E:98:FC:05:A7:E2:29:4E:DB:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z5gzJhaXZSw1VH6Y_AWn4ilO28c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/3606f5-17e1-4319-9703-ae401a37c044/1/eZlHkjP7bcQ5mqdW_8q_Z3CHJtQ.roa
Signing time: Wed 01 Jan 2025 15:48:56 +0000
ROA not before: Wed 01 Jan 2025 15:48:56 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 6762
IP address blocks: 45.149.168.0/23 maxlen: 24
45.149.170.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8e:45:7b:06:a1:60:24:52:c6:ae:e1:4c:f3:9d:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf9833261697652c35547e98fc05a7e2294edbc7
Validity
Not Before: Jan 1 15:48:56 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7999479233fb6dc4399aa756ffcabf67708726d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:7a:4a:cf:65:de:1b:f3:6b:d9:7f:4d:52:23:
c2:3d:48:f1:c6:09:e8:20:0e:78:69:f4:87:d8:b1:
ab:c5:b6:c2:e9:fa:a2:0c:2b:76:b7:7a:2e:79:7e:
a2:9c:44:62:2b:b2:b4:76:8c:28:c3:61:14:b4:05:
b8:56:2f:5b:92:33:e6:35:60:e0:a5:ed:c9:5b:07:
24:5f:75:ba:b0:9f:62:93:b6:d2:d9:69:e6:90:7b:
59:0c:03:8a:ed:5b:a7:5a:e6:9d:4d:35:1d:72:53:
c2:a7:80:7c:ea:3f:47:52:1e:c5:8a:10:35:4e:04:
ec:26:fd:27:0e:66:86:45:99:65:8c:7d:5f:95:ca:
7e:71:04:c8:fc:22:70:f7:da:0a:3b:5e:b7:dd:85:
c5:e2:40:85:d8:98:31:de:60:46:4f:f2:56:4d:4a:
09:70:c9:77:eb:05:e0:10:63:3f:c8:f5:7d:f6:a8:
c0:20:d1:62:8b:e4:5c:a2:bd:96:ec:59:25:c9:d3:
b9:d9:82:79:34:03:c0:41:8e:56:60:32:e2:58:56:
3b:6f:b0:f0:5e:02:7b:f9:e7:18:cf:42:01:80:7b:
6e:2b:09:38:01:d6:66:60:12:88:05:09:61:11:df:
75:25:b0:40:b1:57:06:61:f4:ca:7e:d4:4f:84:57:
70:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:99:47:92:33:FB:6D:C4:39:9A:A7:56:FF:CA:BF:67:70:87:26:D4
X509v3 Authority Key Identifier:
keyid:CF:98:33:26:16:97:65:2C:35:54:7E:98:FC:05:A7:E2:29:4E:DB:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z5gzJhaXZSw1VH6Y_AWn4ilO28c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/3606f5-17e1-4319-9703-ae401a37c044/1/eZlHkjP7bcQ5mqdW_8q_Z3CHJtQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/3606f5-17e1-4319-9703-ae401a37c044/1/z5gzJhaXZSw1VH6Y_AWn4ilO28c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.149.168.0/22
Signature Algorithm: sha256WithRSAEncryption
4a:cc:e0:6f:af:60:e8:50:93:d4:de:c3:de:e7:4e:31:94:79:
42:67:05:68:74:6c:5c:8c:dc:4b:b8:6d:63:51:35:83:68:79:
a4:cc:f0:6e:d4:2c:e6:9a:8c:b3:b3:9f:32:5b:94:2f:6c:13:
59:55:1f:9e:d2:49:a1:83:dd:3f:51:df:9d:e3:3c:dd:ab:d8:
39:d1:9d:3e:c3:dc:34:b2:1b:0b:4b:e6:ee:8b:21:e7:25:e4:
9b:43:4e:bc:1b:0d:f5:99:ef:84:f0:45:9f:f4:25:38:73:e7:
64:e7:10:1f:2a:a3:40:50:00:2d:67:e5:f3:99:80:cb:fa:46:
97:34:dc:b6:53:bf:1f:30:b0:ed:f7:27:f4:30:06:24:1a:cd:
12:08:1a:8f:b5:7e:52:8a:b8:6a:04:7c:6c:dc:63:06:4e:49:
d8:01:b2:eb:2c:39:ea:0c:0e:61:05:40:f1:22:aa:7d:37:08:
bd:70:d5:0e:53:4a:7c:b6:49:12:56:2f:a9:cd:ff:89:ea:34:
f5:ab:d0:67:94:8a:00:84:aa:53:5d:6c:64:62:ce:84:1f:d1:
fa:a0:bf:0d:67:51:8c:6b:2e:06:74:2f:03:24:29:f4:1e:32:
e6:ba:9c:bf:46:6e:1b:17:81:67:c3:8f:e9:75:79:33:a8:0a:
9d:8b:3a:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 11:07:02 2025 by rpki-client