Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/VmSXgQ1TSZGHvnLzCsaDqKMC790.roa
File: VmSXgQ1TSZGHvnLzCsaDqKMC790.roa (raw, json)
Hash identifier: KsZYF9ML9xm059AcqrGapo/IYYvQirrJ4JHc2yWA0eQ=
Subject key identifier: 56:64:97:81:0D:53:49:91:87:BE:72:F3:0A:C6:83:A8:A3:02:EF:DD
Certificate issuer: /CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Certificate serial: 019423D714F8EB1469B2DA0C79E8C537A6DE
Authority key identifier: B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/VmSXgQ1TSZGHvnLzCsaDqKMC790.roa
Signing time: Wed 01 Jan 2025 21:48:05 +0000
ROA not before: Wed 01 Jan 2025 21:48:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 61435
IP address blocks: 45.137.104.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:14:f8:eb:14:69:b2:da:0c:79:e8:c5:37:a6:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Validity
Not Before: Jan 1 21:48:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=566497810d53499187be72f30ac683a8a302efdd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:76:76:71:4a:d6:61:9c:ab:f0:51:f1:b7:df:
9f:8d:99:be:92:00:d9:3d:61:b7:90:ec:10:fe:50:
4e:6b:f0:41:b2:96:39:f6:01:97:25:57:d6:7d:0a:
4b:3b:12:93:33:48:29:b8:3f:67:53:19:2f:6c:ca:
98:ed:23:71:f3:06:53:a8:b0:0f:63:2e:74:d1:03:
99:ad:d8:33:03:9b:7d:1a:8a:9a:cb:82:10:c2:e1:
61:c5:2f:f1:a3:7b:7c:5c:e8:0f:47:e3:99:51:f7:
00:96:ff:53:1c:24:68:16:03:a0:4e:6f:da:c9:32:
40:16:85:55:44:44:94:40:cc:73:b2:b2:9b:6c:ec:
c0:82:96:83:fe:76:78:51:e1:8d:d3:b8:2c:37:82:
b3:d7:46:80:88:e5:35:35:91:e1:83:68:1f:e8:eb:
99:2a:40:b7:59:4c:18:fc:09:da:90:36:3e:69:5b:
56:a6:6d:70:44:ef:d3:0d:ac:bd:64:3f:e0:a2:89:
00:3d:a6:8c:3a:47:5b:f1:bb:2e:dc:35:91:82:d7:
5e:90:5f:e4:4a:85:1b:c8:78:0e:8d:96:e6:03:7d:
fd:98:7b:36:2f:3c:4d:b4:45:6a:f0:9d:56:60:92:
4f:be:88:a9:52:2c:de:04:94:5d:d4:cb:d4:91:fb:
7b:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:64:97:81:0D:53:49:91:87:BE:72:F3:0A:C6:83:A8:A3:02:EF:DD
X509v3 Authority Key Identifier:
keyid:B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/VmSXgQ1TSZGHvnLzCsaDqKMC790.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.137.104.0/24
Signature Algorithm: sha256WithRSAEncryption
45:f2:be:3c:4a:8e:e4:a7:82:77:72:77:49:cf:78:a8:ef:8c:
41:8a:51:f6:91:f3:05:f2:f9:0c:f6:ec:0b:33:b7:d9:54:90:
92:af:53:97:4e:11:8a:78:d4:ae:7d:35:fb:ca:79:dc:06:3f:
23:54:a0:53:ef:4f:09:ef:f3:f4:35:ec:fa:0a:a0:43:71:ad:
5a:5a:79:e2:f6:97:8e:e7:44:aa:af:6b:cd:79:7b:c5:3e:5f:
6e:bf:f0:4b:bc:88:5c:51:4a:78:0e:f3:8a:6d:2b:ca:9e:e6:
dd:cb:2f:4a:d4:88:85:7d:f3:d0:93:b0:cd:45:7d:da:2b:27:
f6:78:b0:7d:fc:27:90:9e:0e:70:e4:25:9b:d2:31:4d:af:b2:
9a:cb:31:41:f6:a3:cc:fe:01:95:7c:01:9d:da:64:de:f8:66:
3f:4a:67:96:a6:3c:6c:45:c8:dc:91:55:25:0f:1d:3f:63:43:
06:a4:01:a1:99:a9:35:16:43:4f:75:da:ce:77:a3:84:04:ac:
9b:38:16:a8:ec:16:30:6e:2a:6b:41:f6:5c:31:94:01:38:95:
eb:ae:cb:12:d4:21:41:2b:16:55:66:1a:9f:72:a7:55:e4:de:
c8:f6:77:1a:31:bb:69:25:77:d7:02:98:f8:7c:6f:eb:64:56:
76:dc:3a:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 17:51:33 2025 by rpki-client