Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/ki0AJhHc-dlwiqON2SuTRGI1y40.roa
File: ki0AJhHc-dlwiqON2SuTRGI1y40.roa (raw, json)
Hash identifier: 3tTJ2ftMLqtI7VpOIWlA3oeRj974PJY7+BG7YjqbxNA=
Subject key identifier: 92:2D:00:26:11:DC:F9:D9:70:8A:A3:8D:D9:2B:93:44:62:35:CB:8D
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 0194274818D11444424109C60BDB0BC2C225
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/ki0AJhHc-dlwiqON2SuTRGI1y40.roa
Signing time: Thu 02 Jan 2025 13:50:23 +0000
ROA not before: Thu 02 Jan 2025 13:50:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16276
IP address blocks: 45.9.120.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:18:d1:14:44:42:41:09:c6:0b:db:0b:c2:c2:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Jan 2 13:50:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=922d002611dcf9d9708aa38dd92b93446235cb8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:40:fa:43:52:ac:2b:46:31:63:1e:ed:ee:13:
71:37:1e:a4:58:2a:6a:b3:fd:af:8c:72:c6:7a:6e:
85:fe:69:75:56:83:7f:e6:63:c4:ad:6c:16:29:6d:
ba:4c:a6:ce:17:dc:73:9a:d4:70:45:b8:e5:d2:19:
98:74:2f:af:b8:ef:ac:70:6e:63:ec:2f:ed:b8:fa:
5e:af:e4:66:1c:87:05:fe:dc:29:ad:ea:83:47:b6:
bc:03:ad:cc:8d:68:6b:ed:60:e1:9d:ce:1a:89:d1:
74:17:07:82:4d:17:ac:09:3e:78:12:ec:ba:9d:2b:
d6:6a:8c:84:80:be:b8:31:a9:61:a7:53:cb:cf:83:
0e:1a:16:d1:2b:11:f0:72:99:a7:cc:7d:ed:46:45:
0a:88:cc:77:e7:75:8c:45:33:18:6e:69:90:4b:16:
a3:a9:da:bc:05:87:d2:3b:67:7e:45:ac:f4:d7:bc:
0a:06:87:3a:b7:c0:56:30:ee:26:b3:13:e0:5a:23:
10:03:78:ee:22:59:c2:0e:82:76:de:db:48:7a:fe:
cc:24:d6:df:73:68:cb:d4:99:c4:a9:37:e2:f2:34:
03:29:62:a1:a8:51:c0:05:ec:54:22:2c:68:33:85:
62:6b:56:10:bf:9b:26:92:37:fe:8f:40:4e:6a:72:
00:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:2D:00:26:11:DC:F9:D9:70:8A:A3:8D:D9:2B:93:44:62:35:CB:8D
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/ki0AJhHc-dlwiqON2SuTRGI1y40.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.9.120.0/24
Signature Algorithm: sha256WithRSAEncryption
c4:86:a2:34:7a:99:d0:37:f1:03:43:36:4f:60:6c:c1:92:20:
1b:fb:b1:76:a7:ee:17:dc:ce:c1:f9:d0:88:51:05:3a:60:52:
ec:aa:e1:1f:15:63:d4:25:87:1c:e5:47:48:98:51:9f:79:62:
77:c4:fd:f7:71:80:74:f8:e2:a4:76:db:be:04:de:46:72:cb:
1d:22:3e:20:68:08:00:cf:49:37:38:f9:85:0c:13:87:e3:12:
98:88:4c:62:78:36:f5:79:f2:4a:a9:84:cd:b9:2d:55:51:d5:
71:2a:bc:a3:c6:e7:3d:06:92:dc:1a:99:2d:82:fb:b4:94:50:
14:9e:27:58:3f:c7:ab:77:68:1a:ef:f6:8d:6d:e1:18:eb:c1:
fe:6c:37:16:69:40:bc:67:17:81:f9:d0:fc:53:a3:1f:24:73:
08:d0:d3:aa:5a:79:4e:91:70:16:85:2f:55:05:8e:9b:13:53:
11:64:74:19:d2:96:be:8c:56:60:aa:82:e1:5e:c4:12:75:97:
5c:0c:ca:51:0a:9e:f2:09:90:89:27:f7:0e:a4:eb:ac:dc:46:
f9:da:fa:14:ee:f6:13:24:8e:1f:bd:17:ed:d0:c1:e8:33:2d:
8c:cb:cc:75:41:cf:0a:bc:97:19:73:43:44:23:b3:f7:ed:f3:
5e:52:25:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:22:24 2025 by rpki-client