Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/9dykVZyZBkqRGy7nZOGp4sc4fX4.roa
File: 9dykVZyZBkqRGy7nZOGp4sc4fX4.roa (raw, json)
Hash identifier: LraQPypcfnhzYyiBoH/7VOHVj953SwMrFMylhJBSr/Q=
Subject key identifier: F5:DC:A4:55:9C:99:06:4A:91:1B:2E:E7:64:E1:A9:E2:C7:38:7D:7E
Certificate issuer: /CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Certificate serial: 0190075254A42C9C2112B40A9C4256EC196E
Authority key identifier: 48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/9dykVZyZBkqRGy7nZOGp4sc4fX4.roa
Signing time: Tue 11 Jun 2024 12:42:34 +0000
ROA not before: Tue 11 Jun 2024 12:42:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 47436
IP address blocks: 45.147.45.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:07:52:54:a4:2c:9c:21:12:b4:0a:9c:42:56:ec:19:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Validity
Not Before: Jun 11 12:42:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f5dca4559c99064a911b2ee764e1a9e2c7387d7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:d8:bb:10:6d:17:63:65:0a:fd:b4:ff:97:7f:
4a:15:d8:bc:74:10:d7:82:78:9c:d4:af:cc:ed:ee:
61:6d:30:4f:39:3c:01:7e:49:ab:73:12:99:5f:09:
7b:46:de:84:61:b3:89:51:dc:65:a9:d6:a8:fe:b3:
c4:a4:30:dc:91:77:41:f7:cb:7a:db:dd:07:3f:f3:
01:f0:8c:51:ea:88:47:ff:bb:7b:76:4d:80:76:97:
f0:b1:74:aa:15:1d:25:61:a7:8e:b3:9f:d5:61:43:
0e:f9:e8:dc:99:59:08:1f:7f:4f:24:08:d1:c2:94:
56:26:06:02:c1:db:b4:03:d0:1c:8e:33:98:55:77:
dc:ff:75:78:fe:5b:d4:77:1b:b5:c8:6a:00:ba:ea:
29:8b:7a:c0:e2:ab:f2:84:db:51:66:62:ed:ce:b4:
07:18:8d:78:40:c3:c2:08:7e:2f:0f:a5:36:47:39:
01:3c:5b:66:13:94:e4:fc:e3:fa:cf:78:dd:d2:63:
5e:47:63:5b:2a:98:fb:81:2f:69:25:f2:ac:9e:1c:
3b:c5:51:e7:d4:b0:93:99:c9:b4:3c:d5:99:00:63:
99:ab:ee:72:97:c3:49:b1:9f:06:57:e9:88:0e:f5:
28:2b:c6:5f:ab:30:a7:20:7f:2f:7b:a0:3c:fe:50:
c5:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:DC:A4:55:9C:99:06:4A:91:1B:2E:E7:64:E1:A9:E2:C7:38:7D:7E
X509v3 Authority Key Identifier:
keyid:48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/9dykVZyZBkqRGy7nZOGp4sc4fX4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.147.45.0/24
Signature Algorithm: sha256WithRSAEncryption
39:c7:5b:28:e1:62:dd:90:50:0e:0c:b2:fd:93:6d:a1:7e:16:
a3:98:56:22:34:58:18:7f:8b:ca:ba:22:df:5f:54:19:88:3f:
93:0c:0d:18:96:d6:cb:68:5d:ef:2b:6c:28:8a:4e:92:98:61:
20:bb:75:2f:92:9c:38:a4:7f:4f:f0:83:a3:1d:df:29:f4:06:
cb:e9:0b:81:c6:1f:b7:6e:83:ef:df:0c:77:39:ac:5f:97:46:
d9:67:6a:b5:4e:fc:dc:ac:70:48:23:17:ce:76:f2:34:7e:12:
27:0f:e0:09:4d:53:1c:e9:0e:f0:a6:bb:62:8e:de:92:5a:60:
b1:55:1d:5d:e7:63:6e:38:ad:32:ff:7b:f2:8a:1c:be:f2:18:
4d:4a:1e:c3:f0:e5:54:84:c6:66:7b:64:63:97:5f:97:35:8b:
62:e7:e5:f0:93:03:25:96:6c:b2:fc:ec:1a:8d:31:cb:c1:8b:
aa:b9:c5:7e:d0:2c:8e:f0:83:11:58:23:64:04:9f:1f:68:3f:
d9:08:14:ff:59:b0:43:db:63:60:15:c0:9b:c3:04:38:37:ad:
d9:06:26:ff:02:ca:fe:63:04:ee:8a:3f:55:7b:d8:9c:e1:56:
ed:ec:22:10:bb:68:9e:d3:69:fa:61:fa:8c:a8:2f:13:e9:71:
79:59:90:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:33:05 2025 by rpki-client