Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/EJtjZuIwqvgb23n-V9AJDN-IW-g.roa
File: EJtjZuIwqvgb23n-V9AJDN-IW-g.roa (raw, json)
Hash identifier: ywEQ3NV5u16crbwIBWVajXDgZxYhNiUysW9T+BrsruU=
Subject key identifier: 10:9B:63:66:E2:30:AA:F8:1B:DB:79:FE:57:D0:09:0C:DF:88:5B:E8
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 01942220490E5B9FCF054EE03542FE94BAE3
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/EJtjZuIwqvgb23n-V9AJDN-IW-g.roa
Signing time: Wed 01 Jan 2025 13:48:48 +0000
ROA not before: Wed 01 Jan 2025 13:48:48 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211266
IP address blocks: 45.8.22.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:20:49:0e:5b:9f:cf:05:4e:e0:35:42:fe:94:ba:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Jan 1 13:48:48 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=109b6366e230aaf81bdb79fe57d0090cdf885be8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:c4:a4:26:f0:70:54:d9:99:d2:f0:cc:2d:95:
7f:a7:ed:90:38:7d:4c:d0:88:0f:4d:8c:6c:a0:b9:
78:74:cb:a5:a6:25:3b:35:85:ab:6f:e1:8f:8a:f9:
4f:d7:15:83:96:57:cf:9d:d8:4d:dd:bf:ef:69:ef:
d8:06:3a:7e:b4:5d:1e:f0:16:6d:0e:76:83:d8:dd:
cb:d8:cc:18:40:d1:2f:bf:f1:d7:30:0b:e2:1b:cb:
0f:27:2f:a8:8f:f5:98:04:c3:ba:4e:25:ea:a7:bc:
89:22:71:bb:7b:f9:51:26:35:59:a9:a9:22:a0:0b:
03:d0:57:5b:fd:dc:35:91:39:00:82:7a:99:32:bd:
0a:9c:c5:31:43:a0:c6:62:29:7f:92:6c:36:8a:b6:
b8:ff:20:63:0f:56:b7:3c:22:0e:b5:77:15:88:03:
6d:7e:9d:9a:5c:06:63:cc:0e:ff:d2:2a:fd:52:25:
cc:65:ed:77:23:d4:60:61:07:a4:eb:2b:ce:72:5b:
5d:ef:fe:dd:1d:a3:d3:58:ea:ba:15:27:7d:2b:98:
db:35:1c:f8:ea:16:65:79:5a:df:37:1e:18:b5:ab:
c1:89:ad:b2:ae:0b:92:8d:d1:ca:c7:dd:ce:8e:87:
a7:7e:4f:86:e3:ce:ed:f3:cc:a0:b3:cb:96:58:93:
45:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:9B:63:66:E2:30:AA:F8:1B:DB:79:FE:57:D0:09:0C:DF:88:5B:E8
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/EJtjZuIwqvgb23n-V9AJDN-IW-g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.8.22.0/24
Signature Algorithm: sha256WithRSAEncryption
59:0a:be:45:f8:b7:c7:f0:73:41:fc:af:f1:3a:32:0d:94:41:
da:f1:59:1d:c5:71:87:51:d3:bb:bc:a6:ae:8b:26:fd:7e:ae:
52:b8:e9:be:ec:3e:e0:92:18:0c:74:07:f1:bd:62:e1:b6:05:
17:bd:ac:02:ca:71:94:aa:2c:fc:05:c8:5c:76:7e:46:65:a0:
d6:9b:ec:90:4f:f6:44:11:f5:60:d9:c2:a0:43:2b:bc:85:e0:
3d:2c:30:99:d5:53:24:eb:ae:4b:9a:7c:6f:69:41:d8:ed:7f:
f6:4d:a0:37:d7:6c:1e:80:3d:59:4f:7d:fa:f9:6d:e0:95:6d:
2c:45:8a:f1:d1:4b:71:5c:f9:9b:3d:3a:84:61:1f:e6:d0:02:
c8:9b:e8:ca:4e:8c:17:a9:e0:5f:22:4e:50:0a:2f:77:f6:b8:
44:96:71:64:13:92:03:d3:11:e0:1e:95:88:ef:85:5d:30:6d:
a4:1f:34:0f:40:c9:dc:17:76:e2:a1:8a:7a:49:0a:f6:d7:0c:
6c:52:3e:70:89:8d:21:2c:a9:1e:38:cd:f7:de:16:92:ec:37:
82:44:c1:41:86:41:32:e4:4d:b2:ea:64:e3:75:95:c1:b9:2c:
b6:b1:98:04:e8:b8:d5:61:76:6f:c8:82:d1:fe:3f:4a:16:1f:
dd:5c:ee:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 13:09:22 2025 by rpki-client