Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/7kHjp39519CJilndMLD3ylrBDA0.roa
File: 7kHjp39519CJilndMLD3ylrBDA0.roa (raw, json)
Hash identifier: 15H6kwk2Wl5CZN5/HrQxbPbO67BKXzcCR1HYPAYvc0Q=
Subject key identifier: EE:41:E3:A7:7F:79:D7:D0:89:8A:59:DD:30:B0:F7:CA:5A:C1:0C:0D
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 019422201F19395A4B26D4A1C415753E7FE9
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/7kHjp39519CJilndMLD3ylrBDA0.roa
Signing time: Wed 01 Jan 2025 13:48:38 +0000
ROA not before: Wed 01 Jan 2025 13:48:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 34927
IP address blocks: 45.90.18.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:20:1f:19:39:5a:4b:26:d4:a1:c4:15:75:3e:7f:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Jan 1 13:48:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ee41e3a77f79d7d0898a59dd30b0f7ca5ac10c0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:de:f6:de:87:cd:69:f1:f4:b0:60:47:09:fb:
e2:7f:f5:75:e1:98:0e:bd:0e:55:c9:b4:d3:be:ef:
36:85:4d:a4:c1:10:d0:1e:d4:73:d6:95:a5:9d:4e:
58:13:23:10:c2:97:58:2f:3d:31:cf:03:01:f5:9d:
5e:3d:9d:38:b0:69:1e:5d:7c:0e:b4:15:f4:2f:5b:
05:2b:d2:94:b9:b8:48:c2:58:a7:26:2a:07:af:65:
c8:37:ec:fe:e2:37:fd:82:0e:34:17:9c:f3:bd:6e:
a0:53:4c:8e:aa:0c:54:a7:c9:e2:54:f1:33:d1:11:
96:a4:a3:ff:fe:34:0f:96:bc:f4:ac:42:a5:18:75:
6e:ee:f4:34:0f:73:29:2e:0c:9a:c3:9c:1e:43:0e:
6b:62:74:f1:d2:75:2b:b8:1d:4f:27:bd:dd:c8:bf:
9f:7b:29:7c:cc:f1:ac:48:50:d8:8f:34:c4:e3:d1:
e2:a0:be:43:2e:16:8c:26:42:e6:f8:36:f4:52:56:
04:44:5e:02:35:ee:3f:97:ea:62:f6:60:de:3e:09:
d5:e2:d3:65:fb:ef:45:bb:84:95:56:32:66:b1:66:
fd:4d:6b:56:ab:f7:2e:fd:40:2b:cf:6b:76:23:9b:
16:db:94:be:a4:2e:2f:58:66:8d:dd:fa:b8:e0:ad:
da:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:41:E3:A7:7F:79:D7:D0:89:8A:59:DD:30:B0:F7:CA:5A:C1:0C:0D
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/7kHjp39519CJilndMLD3ylrBDA0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.90.18.0/24
Signature Algorithm: sha256WithRSAEncryption
47:14:8a:c1:03:d0:f0:e3:87:ee:d9:a4:c7:49:22:55:4f:29:
6f:55:47:57:28:bb:5f:5d:cb:16:a8:5b:b1:80:7b:b8:69:46:
51:75:7c:f4:f2:c1:df:fb:a1:ed:6f:9d:cb:7c:da:1e:39:a7:
2e:30:96:ae:a6:64:4a:27:f5:09:2e:f1:5e:eb:40:6d:8a:66:
d2:10:53:b5:2f:d8:eb:e6:ff:ca:cd:ff:d2:03:0a:4c:93:80:
fd:6e:87:78:4e:2c:48:cd:a7:7d:ea:c4:ab:73:4c:3c:f9:35:
de:18:b6:af:cc:49:f7:a8:6e:3e:c1:08:9c:e0:c1:b0:39:65:
a1:8a:5c:a4:83:e1:df:43:01:3f:3d:01:12:4b:b1:92:a3:18:
8d:58:9d:ee:77:96:3f:b2:4e:54:0e:eb:41:70:c0:00:86:64:
9f:49:bc:dd:3b:27:d0:de:84:6b:dc:31:51:85:32:5e:d9:b6:
09:5f:be:1b:88:1a:b4:a5:d6:b6:ea:ab:19:56:3a:66:3f:3f:
4f:01:c0:7f:d4:9f:71:38:a3:00:6d:a2:12:92:8a:c8:9f:48:
1a:6b:22:d0:9e:32:4d:b4:a9:97:52:79:f0:4c:d9:14:1d:ee:
ce:e9:80:5d:79:35:73:1a:c9:67:e4:aa:65:49:2f:de:4f:d0:
3d:5f:c5:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 22:40:10 2025 by rpki-client