Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/Q8U0fiao1O4Zm27jW8LvF7Ipc08.roa
File: Q8U0fiao1O4Zm27jW8LvF7Ipc08.roa (raw, json)
Hash identifier: dK0j1AaEZHByuqB3SGLoLYlj+iyYDvI/upRfRku6iqc=
Subject key identifier: 43:C5:34:7E:26:A8:D4:EE:19:9B:6E:E3:5B:C2:EF:17:B2:29:73:4F
Certificate issuer: /CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Certificate serial: 019423D7198A4863751857A3887EA288CAC2
Authority key identifier: B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/Q8U0fiao1O4Zm27jW8LvF7Ipc08.roa
Signing time: Wed 01 Jan 2025 21:48:06 +0000
ROA not before: Wed 01 Jan 2025 21:48:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 199961
IP address blocks: 45.132.254.0/24 maxlen: 24
194.67.194.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:19:8a:48:63:75:18:57:a3:88:7e:a2:88:ca:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Validity
Not Before: Jan 1 21:48:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=43c5347e26a8d4ee199b6ee35bc2ef17b229734f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:29:1c:f4:52:cd:13:aa:c8:0d:e8:67:df:70:
86:5c:cf:52:f6:8b:f1:a9:72:1b:95:07:b8:48:02:
a6:e2:7d:bb:ce:2a:0f:98:87:ec:a1:9f:83:3b:89:
09:b9:7b:be:82:ca:f2:70:6d:81:46:28:f0:23:bc:
44:22:4e:5f:a5:31:fc:08:5e:a1:3d:1a:03:b7:bd:
e5:51:bc:c9:76:df:d0:9e:aa:6f:5e:e6:12:22:3d:
03:90:23:0c:e3:c3:31:98:29:2b:5b:59:39:32:9d:
e1:0b:d1:c8:66:16:98:05:b5:ab:8b:02:6f:93:62:
dd:f2:a7:a6:4b:8b:c2:ae:ef:e7:6c:23:2b:22:34:
3e:eb:bd:da:f6:69:d4:1a:a1:30:01:ae:ca:65:3a:
f1:ea:1b:10:89:f6:39:2f:ac:d2:77:31:1f:3f:06:
79:c6:fc:82:3c:96:7e:82:97:84:c2:4f:c1:9f:19:
c8:c9:ef:34:be:fa:37:72:58:9d:df:d8:d5:ea:48:
6b:d4:39:5d:47:e1:b8:d8:d2:c6:34:88:23:5a:f0:
f3:46:3e:05:49:50:5a:85:45:3e:dd:a2:d5:b4:d6:
41:a5:ac:39:6e:8e:07:8d:9d:df:c3:c8:7c:39:d6:
c7:20:1a:ce:45:94:a1:df:08:f2:92:f9:4e:20:f6:
a4:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:C5:34:7E:26:A8:D4:EE:19:9B:6E:E3:5B:C2:EF:17:B2:29:73:4F
X509v3 Authority Key Identifier:
keyid:B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/Q8U0fiao1O4Zm27jW8LvF7Ipc08.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.132.254.0/24
194.67.194.0/24
Signature Algorithm: sha256WithRSAEncryption
9c:78:d7:b2:88:7d:40:5b:2f:66:53:d2:24:06:b0:33:df:f5:
f5:25:0a:1a:f9:80:39:12:fc:6f:8e:6a:25:5e:f0:aa:4f:88:
cd:a9:5a:fa:01:37:61:01:d3:e6:78:6a:ee:87:ce:12:35:1d:
93:ce:1a:4d:24:29:14:02:47:c6:ec:9a:36:1a:3a:cb:79:02:
28:99:b8:f9:56:cd:d1:f9:52:52:a1:1e:a5:b0:07:c5:48:e2:
f2:5c:d9:04:2d:79:7b:7b:3f:e8:02:99:59:89:61:28:dc:b2:
20:e3:7d:7c:d1:79:a2:2d:31:f4:c7:8f:83:de:f5:99:a0:41:
e3:a3:ea:15:ce:8e:54:c6:7a:f4:8e:d9:15:c3:f5:74:31:46:
88:a8:5d:84:83:2a:7c:ae:d4:d3:06:92:78:dc:a7:9a:21:c8:
fe:74:48:9a:d3:27:6d:67:eb:76:7a:11:e6:ff:90:a4:5e:0b:
4b:e7:e1:df:bc:db:de:12:03:3e:1e:e3:cd:c2:cb:e4:48:88:
6a:3f:97:14:b1:ca:77:bb:77:2b:fd:b6:8a:5d:af:e4:d0:89:
c8:99:50:ed:6b:4b:e7:d8:6e:04:47:b9:19:53:12:e0:cd:8f:
8b:24:a0:19:36:d6:39:d4:0b:cc:fd:65:85:c1:70:21:ec:7a:
cf:4e:16:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 17:53:05 2025 by rpki-client