Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/x9VrBlndyXsQ0I_BE5oGiZSvP0o.roa
File: x9VrBlndyXsQ0I_BE5oGiZSvP0o.roa (raw, json)
Hash identifier: PCZ8GjyH0VLsA/V8OKdwCEPWwNkshoCKnIJSZAnCOXU=
Subject key identifier: C7:D5:6B:06:59:DD:C9:7B:10:D0:8F:C1:13:9A:06:89:94:AF:3F:4A
Certificate issuer: /CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Certificate serial: 019423D71883A50E98C4C6927FF0505F516D
Authority key identifier: B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/x9VrBlndyXsQ0I_BE5oGiZSvP0o.roa
Signing time: Wed 01 Jan 2025 21:48:06 +0000
ROA not before: Wed 01 Jan 2025 21:48:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 199599
IP address blocks: 45.8.210.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:18:83:a5:0e:98:c4:c6:92:7f:f0:50:5f:51:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Validity
Not Before: Jan 1 21:48:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c7d56b0659ddc97b10d08fc1139a068994af3f4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:ba:54:c7:c7:32:fe:fe:fd:65:1b:bd:e0:38:
3b:e7:88:a6:cc:35:a2:b3:29:44:59:b2:27:0d:63:
2b:18:34:39:c7:32:64:4a:ce:0f:f6:b5:78:a8:c6:
a9:58:0c:bc:53:94:c8:9c:94:e8:c7:75:56:bc:e8:
41:2e:81:96:4a:e5:69:32:88:4f:dd:50:c4:ad:72:
28:0a:2a:29:81:21:f5:49:d4:66:86:6f:71:31:20:
c4:68:c7:b0:96:32:e6:ed:70:ed:e2:5b:b3:7c:69:
24:c3:c8:98:ad:d1:c6:06:f8:bc:75:ed:36:7b:07:
e4:83:16:e5:87:a8:0b:a6:f2:9c:fe:86:0d:01:93:
25:90:fc:61:f3:89:d1:ef:a8:18:d6:b6:e7:ba:17:
93:2c:17:2f:82:7c:4d:25:61:77:2d:3b:ce:35:7e:
f3:81:13:19:04:38:8a:57:9d:2b:79:eb:9c:d4:07:
87:c0:0b:50:03:0f:3c:23:65:a5:61:cb:26:52:d5:
64:cd:f9:48:79:c7:5b:ed:76:3d:39:bd:d4:5c:3c:
b0:dc:cc:fa:9d:74:83:18:58:95:db:e7:24:f5:c2:
7e:25:97:ea:34:4c:dd:0a:4c:8a:c3:19:9e:fc:c3:
e7:6e:54:fc:68:45:bb:5f:22:a0:ab:f7:a4:9a:8a:
cc:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:D5:6B:06:59:DD:C9:7B:10:D0:8F:C1:13:9A:06:89:94:AF:3F:4A
X509v3 Authority Key Identifier:
keyid:B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/x9VrBlndyXsQ0I_BE5oGiZSvP0o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.8.210.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:fa:67:02:56:b2:50:06:85:56:7c:c7:67:85:2f:29:e4:dd:
7f:c2:38:43:70:4a:6a:23:8b:0e:30:78:17:7a:5a:c1:7a:bb:
35:e7:d8:83:96:9a:a4:57:26:01:6d:7a:ae:ea:57:d1:f9:3a:
97:eb:66:b9:d5:19:ce:fd:39:6a:b7:59:d8:21:f1:91:e7:a2:
10:6b:99:42:72:9b:42:f1:27:f1:72:d7:f3:78:8f:d5:66:26:
32:ab:75:14:84:11:3e:5f:f5:ea:dc:9e:5d:f3:c5:96:74:67:
53:7f:6a:57:a7:00:ca:b5:90:69:e9:ec:8d:ef:76:73:aa:0b:
e9:dc:b9:ef:47:97:f4:74:24:8e:2d:e5:28:50:69:a6:ea:93:
4b:8f:47:3e:98:e1:e9:27:7e:ad:85:46:72:cb:e6:4c:7d:8b:
5f:b0:d4:a8:e2:4b:18:42:94:b2:cd:ff:96:c1:b5:02:f7:cf:
4c:72:f1:f4:dd:e6:16:70:bb:7a:81:25:67:c1:c4:ad:64:ce:
6f:30:0c:00:5a:cf:98:eb:d4:d3:28:9b:26:bb:15:64:25:93:
53:6b:dd:f9:fb:df:0c:9e:d7:9f:41:ae:99:a4:f8:5f:15:6b:
f3:13:07:fa:97:fe:11:e2:60:04:7e:e8:9a:14:66:b9:8f:43:
4f:d2:de:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 17:52:58 2025 by rpki-client