Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/aT0yCGCl5Yj6SU0rQxkXH1X52Uo.roa
File: aT0yCGCl5Yj6SU0rQxkXH1X52Uo.roa (raw, json)
Hash identifier: Ts/TH2hKOJd2oJPdet7b00jVU/9BZc2TJ6MzaXO1Tv4=
Subject key identifier: 69:3D:32:08:60:A5:E5:88:FA:49:4D:2B:43:19:17:1F:55:F9:D9:4A
Certificate issuer: /CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Certificate serial: 0194236A55665FB0B15EE3BADF3373996271
Authority key identifier: 6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/aT0yCGCl5Yj6SU0rQxkXH1X52Uo.roa
Signing time: Wed 01 Jan 2025 19:49:18 +0000
ROA not before: Wed 01 Jan 2025 19:49:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212238
IP address blocks: 45.138.210.0/24 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:6a:55:66:5f:b0:b1:5e:e3:ba:df:33:73:99:62:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Validity
Not Before: Jan 1 19:49:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=693d320860a5e588fa494d2b4319171f55f9d94a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:dc:57:08:ad:b8:2e:6d:8e:62:24:d7:e0:9a:
c0:18:02:e5:1a:66:7a:c0:28:ea:ae:7f:09:5f:1f:
91:ae:80:0c:e2:b1:9c:cd:dc:05:40:a6:be:bf:db:
34:23:8e:14:fa:bd:6f:88:d6:52:ee:90:27:44:90:
7e:68:80:3d:9f:af:d5:b5:06:e1:8a:7b:13:76:b7:
21:42:c6:48:b8:d1:15:2e:cd:d0:20:06:96:bb:84:
bd:e9:b7:66:05:c2:27:3b:40:3a:7f:51:d8:95:71:
f7:90:7c:f5:2e:c3:a7:99:f2:ec:44:30:7d:19:12:
1a:83:7a:1b:e5:e3:d7:67:15:83:3c:3e:9d:26:d8:
41:4e:64:5b:6e:53:6a:b5:19:04:e6:eb:22:18:e3:
2b:24:01:3d:8d:5f:ba:81:de:e6:bf:01:2c:9e:30:
4f:89:77:43:09:01:b5:10:d7:a7:ef:0a:4b:2b:c9:
d2:d7:09:ae:0b:24:51:fc:fe:ba:2c:70:7a:de:6a:
4b:6f:16:d8:27:0a:ad:fb:df:23:2a:90:39:36:4b:
05:07:19:e7:6c:6a:b6:53:ea:fa:f0:0a:5e:e7:00:
10:e8:11:28:12:00:00:63:f3:f5:12:73:4d:92:0b:
e8:62:06:d4:ca:48:14:5e:11:97:c6:b7:da:1a:c6:
75:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:3D:32:08:60:A5:E5:88:FA:49:4D:2B:43:19:17:1F:55:F9:D9:4A
X509v3 Authority Key Identifier:
keyid:6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/aT0yCGCl5Yj6SU0rQxkXH1X52Uo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.138.210.0/24
Signature Algorithm: sha256WithRSAEncryption
47:94:70:ac:19:b5:d0:76:1e:42:8f:7c:92:af:73:e3:47:58:
1f:2e:99:be:9c:75:3d:91:e3:d5:af:4e:72:15:40:a9:1a:49:
6f:f3:53:ab:40:61:96:1a:21:bf:81:73:85:a7:da:46:0c:3a:
a2:f7:c2:d8:05:7f:79:c8:33:ff:d1:34:1d:d0:f1:e6:5b:50:
dd:69:77:04:bc:cb:9d:b1:16:d9:8c:44:e9:54:08:fb:2b:92:
8d:5a:00:36:37:ed:c7:5e:fa:66:49:bd:76:1d:1a:ae:b4:ed:
fa:6d:56:a0:46:73:54:e0:04:92:65:b1:c1:98:a0:79:66:be:
a7:ee:40:8c:2f:12:9a:04:4e:78:d9:0f:b7:6d:ae:de:19:37:
cc:bf:3b:fb:04:7b:87:6a:0e:a3:8a:6b:2b:69:59:da:b0:52:
48:4d:ad:8c:c5:69:ca:70:5b:65:d9:e3:0a:51:05:53:88:5b:
27:5f:03:ee:c4:cd:03:26:c9:83:5f:26:5a:ef:26:e3:6a:de:
90:8c:8f:00:93:76:36:15:06:77:26:10:65:95:11:7e:1b:5d:
d1:91:fa:71:24:2e:b0:3b:bf:2c:7a:b9:ea:20:6f:bb:84:c9:
9a:4e:46:71:06:0c:fb:ae:82:bb:4b:f9:47:8f:0f:5d:2f:2f:
82:dc:07:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 12:02:14 2025 by rpki-client