Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/R3xayF97XK3f6WN53ZX5sxR54jo.roa
File: R3xayF97XK3f6WN53ZX5sxR54jo.roa (raw, json)
Hash identifier: 3PZ+HViUokDQMZxJmaE1uzBy+pQRq/4nLFWrCe3sMjU=
Subject key identifier: 47:7C:5A:C8:5F:7B:5C:AD:DF:E9:63:79:DD:95:F9:B3:14:79:E2:3A
Certificate issuer: /CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Certificate serial: 0194258F278B4B2F71065D6AB706103D69CF
Authority key identifier: 48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/R3xayF97XK3f6WN53ZX5sxR54jo.roa
Signing time: Thu 02 Jan 2025 05:48:46 +0000
ROA not before: Thu 02 Jan 2025 05:48:46 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211804
IP address blocks: 45.131.2.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:27:8b:4b:2f:71:06:5d:6a:b7:06:10:3d:69:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Validity
Not Before: Jan 2 05:48:46 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=477c5ac85f7b5caddfe96379dd95f9b31479e23a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:12:60:6f:58:45:d7:ce:f2:15:67:ba:db:41:
38:71:f9:3e:87:d6:c4:55:41:c3:cd:c7:4f:04:18:
f0:bf:b0:28:14:c8:cb:a2:6a:f1:0f:1b:16:cf:17:
14:3b:c7:cb:cc:f0:ee:90:27:25:de:e9:97:e9:05:
a4:f0:db:fa:8a:90:68:fa:4b:e7:28:84:14:23:0a:
78:cf:85:c8:dc:a4:b3:2f:60:a9:f5:b8:d2:2a:f9:
e2:d0:fe:d5:75:3d:3b:d5:62:93:86:69:ff:4d:99:
aa:32:c1:d8:7c:35:54:f9:03:a8:43:a5:c6:e0:4b:
f3:ca:f5:3d:53:aa:d6:06:b2:ac:48:6b:25:18:d4:
fe:43:28:90:4d:56:cb:31:88:12:e2:99:4c:19:b0:
cf:24:e3:ab:ba:20:f1:36:ff:d5:4f:e2:de:cc:46:
70:9d:54:4e:2a:d7:4b:96:36:8c:ab:c5:8e:f2:4a:
7c:0d:66:64:d6:2e:76:f9:71:84:f2:6b:ea:ae:d7:
bd:16:3e:ca:83:5d:f1:a3:11:8f:ed:6c:cb:1f:af:
41:40:5f:0b:f9:22:a5:6d:fc:32:21:d0:45:2e:5a:
b5:50:70:47:ef:fc:02:b6:30:69:3e:98:b6:15:61:
8c:af:0a:23:66:f1:9f:c0:81:53:13:aa:6a:0e:a3:
b3:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:7C:5A:C8:5F:7B:5C:AD:DF:E9:63:79:DD:95:F9:B3:14:79:E2:3A
X509v3 Authority Key Identifier:
keyid:48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/R3xayF97XK3f6WN53ZX5sxR54jo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.131.2.0/24
Signature Algorithm: sha256WithRSAEncryption
94:ea:1f:ea:4c:4c:23:40:11:32:32:2f:f4:ee:f5:4b:45:36:
29:22:d9:00:1a:c5:e2:7b:bf:b8:ca:1f:24:69:b6:d9:98:49:
06:dc:0b:77:ba:6b:58:f0:94:c9:19:8b:f5:a7:1b:8a:59:2e:
88:8f:1a:21:2e:11:01:c6:19:17:b8:60:55:46:17:4d:2d:47:
d4:53:5e:23:d5:47:5f:6e:51:d5:b8:63:4d:11:0a:db:d7:14:
8c:4a:04:8e:33:2e:cf:e1:f4:be:94:f3:a2:88:5f:78:12:1f:
66:87:d2:23:01:35:4e:34:53:c6:40:ca:43:99:91:ad:12:12:
2e:b5:16:82:56:72:7f:b2:de:e9:5b:7d:17:0c:48:af:c0:95:
07:6c:44:75:30:1b:7b:ef:e4:d0:aa:92:1c:93:08:21:5c:08:
d7:45:40:98:5a:74:d5:1e:0f:49:e5:0a:8d:a4:23:5f:8d:bd:
ec:a4:64:81:43:73:ab:c2:db:ae:09:4e:33:d1:7d:3c:3e:7b:
ef:65:45:31:50:93:df:0c:ba:e1:78:62:52:69:3f:a5:66:04:
b2:32:5b:da:a4:55:04:e9:dd:96:dc:d3:8f:d2:97:33:08:0f:
28:37:cf:2b:0c:99:22:2f:75:f4:63:f7:6b:7d:49:ab:07:4b:
34:c7:5e:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:35:33 2025 by rpki-client