Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/26jMjsoIfvw0QfNw67KYhkLxDSQ.roa
File: 26jMjsoIfvw0QfNw67KYhkLxDSQ.roa (raw, json)
Hash identifier: 5xqXm7TU5ZL4KH+Wd8oDwGaeRvlAqhjqzacUrS9mpio=
Subject key identifier: DB:A8:CC:8E:CA:08:7E:FC:34:41:F3:70:EB:B2:98:86:42:F1:0D:24
Certificate issuer: /CN=618478f198fe569010c3df6219142f530c4f5e56
Certificate serial: 0194258F93B1A2D17DEF8AA3A0955BA220C8
Authority key identifier: 61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/26jMjsoIfvw0QfNw67KYhkLxDSQ.roa
Signing time: Thu 02 Jan 2025 05:49:13 +0000
ROA not before: Thu 02 Jan 2025 05:49:13 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49569
IP address blocks: 45.138.146.0/24 maxlen: 24
194.32.96.0/23 maxlen: 23
194.32.96.0/24 maxlen: 24
194.32.97.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:93:b1:a2:d1:7d:ef:8a:a3:a0:95:5b:a2:20:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=618478f198fe569010c3df6219142f530c4f5e56
Validity
Not Before: Jan 2 05:49:13 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=dba8cc8eca087efc3441f370ebb2988642f10d24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:9b:de:e4:ea:99:44:2f:8d:41:37:2b:c5:f3:
78:0f:35:f3:2c:e5:03:cf:77:32:4a:b0:ab:5a:7d:
96:d9:61:59:8b:eb:06:8d:7b:ef:3e:47:23:c5:2d:
0d:b6:60:c4:77:e8:ce:73:bb:48:95:62:33:98:82:
ae:01:eb:5e:c0:89:bb:02:3a:03:c4:83:a2:4c:18:
a9:9e:65:09:13:33:a8:fd:7d:77:4b:6f:9e:08:bc:
e6:05:b0:66:91:df:20:0b:02:d7:75:e0:52:85:21:
1a:9a:0f:e0:fb:c3:92:91:6a:a6:e7:ce:da:b9:95:
a0:88:13:6f:ff:06:4b:15:b7:b2:63:da:ba:1a:7e:
cf:f2:d2:de:79:f5:11:0a:95:18:78:e7:9d:b8:a7:
6e:f4:d0:18:8c:dc:6c:ec:91:ce:b9:2e:f2:99:20:
52:a2:bb:9b:77:4c:f1:19:29:0f:1f:d3:d6:48:29:
fa:dd:14:a7:56:15:73:0f:fe:b0:53:da:32:a4:de:
dd:c3:a8:fa:31:3c:67:97:2c:22:c2:a9:86:65:07:
f5:9e:45:98:75:18:6d:9f:5c:85:d7:c3:03:c1:74:
57:c0:1e:d6:13:95:27:5c:f0:f4:5f:8e:e6:e8:62:
8c:85:a2:8e:21:a6:97:8e:65:48:ea:8e:f9:9d:c5:
07:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:A8:CC:8E:CA:08:7E:FC:34:41:F3:70:EB:B2:98:86:42:F1:0D:24
X509v3 Authority Key Identifier:
keyid:61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/26jMjsoIfvw0QfNw67KYhkLxDSQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.138.146.0/24
194.32.96.0/23
Signature Algorithm: sha256WithRSAEncryption
06:13:53:4a:ac:f4:df:00:58:06:f8:ba:18:66:0e:02:cd:53:
f6:e9:96:11:2a:18:46:56:23:eb:b9:31:f0:3d:e2:f4:1d:f2:
fe:a6:68:ec:46:9b:9d:7a:dc:30:39:e7:5d:0a:37:58:0b:73:
11:c1:fa:4e:e3:05:8f:52:c7:e7:6f:d3:bd:3d:1e:05:32:9a:
b3:02:26:b4:6d:75:5f:d9:ac:ed:20:f8:f3:9a:cd:fb:ed:83:
29:c2:a3:e6:8e:9c:1c:7f:ed:4c:9c:e5:6a:93:00:91:45:81:
f1:64:fd:36:f5:56:2b:8d:89:3e:ed:03:09:9f:0c:41:66:8e:
38:90:95:48:56:cf:5b:b2:14:50:0a:87:32:78:f3:ff:1b:e6:
a0:ff:d0:9e:60:03:ad:ae:68:c1:08:a7:e9:21:37:bf:2b:07:
0d:87:cd:ed:d9:36:20:74:ab:97:1e:85:b0:18:b1:cc:2b:11:
1d:ea:38:c9:e2:6f:fd:aa:61:ac:c9:c1:da:d9:af:f4:b0:96:
03:4b:98:81:71:15:97:48:b0:f7:41:fe:ca:57:17:e9:a2:14:
9f:bd:b0:c6:24:29:26:70:29:83:51:ca:3e:c2:ad:fe:ad:0f:
8e:40:71:4a:05:6e:5a:2a:e7:f8:87:d4:66:97:2f:40:bc:e1:
66:c5:08:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:34:43 2025 by rpki-client