Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/dTSqi9kapEpXcdwmuCulInhrQ1I.roa
File: dTSqi9kapEpXcdwmuCulInhrQ1I.roa (raw, json)
Hash identifier: 6HJKp561eb7kTpQ5v9PeJQ06hf6H7+6ygVjE6kCXid4=
Subject key identifier: 75:34:AA:8B:D9:1A:A4:4A:57:71:DC:26:B8:2B:A5:22:78:6B:43:52
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 019422205CBFDE2E0C05318D8410F532AEA9
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/dTSqi9kapEpXcdwmuCulInhrQ1I.roa
Signing time: Wed 01 Jan 2025 13:48:53 +0000
ROA not before: Wed 01 Jan 2025 13:48:53 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 267121
IP address blocks: 45.147.226.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:20:5c:bf:de:2e:0c:05:31:8d:84:10:f5:32:ae:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Jan 1 13:48:53 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7534aa8bd91aa44a5771dc26b82ba522786b4352
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:54:f5:d9:ff:ca:c4:d3:04:5a:43:22:11:33:
01:bc:84:d8:7f:fa:55:aa:e3:95:25:15:f9:5c:33:
a2:53:8e:73:61:e2:12:26:e1:e0:ff:71:d7:e2:61:
08:9b:1c:ab:1a:ad:a3:af:7f:3b:06:91:5f:f2:69:
2c:e0:2c:03:9d:1a:8a:7f:5a:fc:5f:2b:58:c3:8e:
75:49:32:ed:f5:68:72:ca:eb:e2:43:39:06:b7:ad:
80:30:d1:0a:aa:cc:5d:4d:9c:d7:65:1b:2e:68:0a:
2c:e0:16:80:80:e4:39:80:0f:2b:05:45:cf:b6:7a:
82:7a:76:ed:da:8a:d3:63:a3:8c:c9:c0:7b:7f:b8:
32:2d:b7:89:31:6e:62:2c:93:dd:63:72:31:b5:f6:
5a:1e:30:db:ab:b8:62:17:46:ee:61:3f:62:39:9e:
98:18:f0:60:4f:03:53:f7:03:e8:b5:8d:db:d2:43:
3c:2e:76:64:6f:fd:1b:3f:59:e0:07:0f:94:92:9e:
b4:38:ec:80:68:e7:f8:e4:63:10:33:f2:cf:e3:93:
64:8f:2a:3e:10:54:94:e9:62:ee:a1:8c:43:78:e6:
ca:8e:24:ca:10:04:a5:7c:42:f4:24:f3:75:48:ef:
06:e3:30:f8:56:cc:5a:0b:6b:a2:d8:c5:70:45:7c:
32:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:34:AA:8B:D9:1A:A4:4A:57:71:DC:26:B8:2B:A5:22:78:6B:43:52
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/dTSqi9kapEpXcdwmuCulInhrQ1I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.147.226.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:86:74:33:dc:10:61:76:ca:97:61:2f:b9:1d:67:bc:0e:c3:
9b:15:c4:d2:b1:83:af:6e:a4:fa:2b:7f:36:5d:e4:1f:e2:12:
cb:2c:ba:8b:13:da:aa:08:2f:5e:25:e0:dd:53:6e:dc:99:45:
1e:8e:5a:76:85:c8:ca:b4:9d:bc:b7:00:f4:bf:cb:12:07:8e:
f5:fb:a2:a0:34:3d:6d:da:a0:00:a5:45:c5:bb:80:2f:b1:a7:
15:fe:4f:7f:26:d8:2c:e6:26:ce:bf:a2:65:5b:96:b0:87:0c:
65:d5:f9:79:ea:20:dd:bf:c2:62:b0:30:0a:8d:b0:df:6b:a8:
34:7e:20:4e:6a:6a:26:82:f8:b2:18:b9:e5:f1:2d:e8:25:01:
21:fd:66:01:2a:31:33:a9:fd:97:b8:89:37:5a:5e:3f:b0:db:
de:b3:11:14:c4:1b:2b:d9:eb:16:a1:11:94:78:05:54:11:f9:
39:04:fe:ac:67:89:07:b7:89:9b:8a:c8:34:36:2a:7f:ac:6c:
d6:91:04:00:60:14:d9:82:f8:65:bc:33:1e:3d:03:be:89:ce:
28:6c:4d:97:54:9e:55:a3:17:06:ba:0a:8d:bc:9b:97:67:08:
fd:6b:2b:42:56:39:64:66:6f:ab:5d:9a:1d:c3:a9:fc:57:9c:
34:17:91:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 14:45:18 2025 by rpki-client