Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/_-xXmvoYy4lZ3kxFUS5L-gcW6GU.roa
File: _-xXmvoYy4lZ3kxFUS5L-gcW6GU.roa (raw, json)
Hash identifier: r0E/PyhKBU4HG0u7ti5FS9H6Nd4Wo2vY0WMjMJrRxZw=
Subject key identifier: FF:EC:57:9A:FA:18:CB:89:59:DE:4C:45:51:2E:4B:FA:07:16:E8:65
Certificate issuer: /CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Certificate serial: 0191DB4CCBDF678FE9E37E4FDDA3AF4CF851
Authority key identifier: 48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/_-xXmvoYy4lZ3kxFUS5L-gcW6GU.roa
Signing time: Tue 10 Sep 2024 09:38:48 +0000
ROA not before: Tue 10 Sep 2024 09:38:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 47436
IP address blocks: 45.147.45.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:db:4c:cb:df:67:8f:e9:e3:7e:4f:dd:a3:af:4c:f8:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Validity
Not Before: Sep 10 09:38:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ffec579afa18cb8959de4c45512e4bfa0716e865
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:ab:56:03:0f:ea:bb:da:c1:d9:3b:a3:93:72:
e7:33:2a:dd:78:c0:36:58:f4:a7:e6:82:d6:c3:32:
8d:4c:f0:1c:98:4c:71:2a:bb:db:35:5d:6e:01:48:
ad:f3:df:d4:2c:d4:34:b7:1d:a1:74:53:df:39:e9:
d8:a4:5b:2a:b4:9f:45:b6:77:d3:46:42:97:3c:38:
a6:5b:db:fe:ac:49:de:00:11:4f:c2:27:09:e7:81:
2f:d9:50:17:56:0d:d1:ec:10:4d:12:0e:75:7a:2c:
92:f8:3d:09:90:75:d6:76:82:fb:96:fb:4a:e5:9a:
c2:bd:e8:44:28:1d:4b:c8:47:5f:82:7f:52:b8:da:
73:25:ca:d3:6b:0b:54:54:69:ad:17:75:73:a4:b7:
0c:99:36:7d:b3:5a:e7:86:b1:ab:12:4e:f5:35:db:
84:96:e6:13:db:22:0c:59:aa:ef:0a:b8:fe:56:b5:
0c:86:c0:a9:68:90:f4:49:06:1a:87:71:00:b4:b6:
2e:93:40:9d:31:70:42:bc:d0:0f:44:33:d2:58:86:
34:e2:f4:c1:9a:12:52:16:c8:5b:6a:d3:7d:dd:de:
a6:b0:0c:ad:24:f2:70:b5:f1:3a:07:9e:1f:6d:49:
7b:9b:30:b6:f9:cb:be:ac:a5:fb:36:ba:7e:31:76:
77:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:EC:57:9A:FA:18:CB:89:59:DE:4C:45:51:2E:4B:FA:07:16:E8:65
X509v3 Authority Key Identifier:
keyid:48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/_-xXmvoYy4lZ3kxFUS5L-gcW6GU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.147.45.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:1d:6c:b3:08:cf:6c:2e:73:cc:e2:b8:d1:94:93:7c:bf:f6:
16:d5:ee:54:07:f0:68:9c:ce:65:b0:95:0b:b4:b2:ad:f7:5e:
e3:d8:21:8b:aa:a5:13:bd:97:42:be:9e:25:06:f7:f8:1d:45:
bf:e6:b4:06:1f:d7:65:fc:9f:61:e0:d5:ec:e3:01:26:23:bc:
1f:ae:b6:ca:fd:04:8f:ed:32:19:aa:a0:55:73:e5:4a:c2:2b:
16:f2:4b:fd:e9:c7:22:f7:2e:80:cc:51:76:16:0c:9c:af:6a:
dd:3a:49:8d:1e:81:c4:f5:a7:17:32:f7:f4:fb:c6:fc:dc:e1:
73:72:a3:7d:14:49:41:ab:84:23:57:a0:44:0b:35:53:44:d6:
4c:86:68:79:20:de:23:70:c4:35:9c:b2:93:29:9e:a3:4f:9b:
b2:7c:14:ab:1e:8b:f9:bb:8c:e2:b6:df:4b:99:bc:f7:9a:61:
96:ae:6c:41:6b:3d:4d:c7:23:79:94:f4:88:77:83:85:d7:0d:
c0:4b:8c:5c:a5:b7:f5:79:ee:85:22:02:24:24:56:25:cf:98:
cf:17:29:8b:6f:97:3a:0e:3d:b7:3f:6c:44:f4:ab:45:79:d1:
9b:93:ab:b3:2e:d4:00:2d:18:56:21:49:d0:eb:57:d1:77:fa:
8f:3c:0e:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:40:42 2025 by rpki-client