Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/2bus3tcDPlUmYjpGRBqiI7C5DB0.roa
File: 2bus3tcDPlUmYjpGRBqiI7C5DB0.roa (raw, json)
Hash identifier: qPbFWRII5fzO0fxmYptdQ9ucjxteNJzD81erIiQf2OU=
Subject key identifier: D9:BB:AC:DE:D7:03:3E:55:26:62:3A:46:44:1A:A2:23:B0:B9:0C:1D
Certificate issuer: /CN=618478f198fe569010c3df6219142f530c4f5e56
Certificate serial: 0194258F9D2BB76C8642682E4E0D94070EBE
Authority key identifier: 61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/2bus3tcDPlUmYjpGRBqiI7C5DB0.roa
Signing time: Thu 02 Jan 2025 05:49:16 +0000
ROA not before: Thu 02 Jan 2025 05:49:16 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60655
IP address blocks: 45.91.163.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:9d:2b:b7:6c:86:42:68:2e:4e:0d:94:07:0e:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=618478f198fe569010c3df6219142f530c4f5e56
Validity
Not Before: Jan 2 05:49:16 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d9bbacded7033e5526623a46441aa223b0b90c1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:b7:ae:65:c4:a6:99:8e:6c:f3:0d:3d:19:f1:
b0:ab:3b:25:f9:35:6b:51:68:39:66:66:86:fe:ef:
a7:a7:93:43:9e:ce:d5:ae:64:93:80:39:b1:03:5c:
9d:d8:e2:d2:09:c1:c2:b9:14:9d:e9:e9:f8:e2:00:
a4:6b:41:6c:c6:ff:04:c8:6c:c5:ef:2a:9d:df:a4:
28:bb:b8:11:58:a9:65:2a:84:e6:b8:9d:2e:3b:70:
68:5f:23:8c:25:1a:56:5f:f1:d1:88:8a:25:a4:54:
86:1e:0e:19:0e:c2:e1:50:cd:b5:27:d5:f6:05:a8:
f7:01:4f:27:b7:7e:eb:5e:bb:f8:46:45:02:72:ae:
40:82:46:28:c1:bc:cb:18:06:9b:0c:d5:14:15:51:
67:c2:a6:6e:4b:de:2c:9c:79:94:7a:f4:55:6e:41:
88:c3:8b:0c:29:5b:47:3a:02:55:c0:bf:8b:9c:84:
9b:d5:3c:03:5e:a8:45:81:21:65:60:5f:6c:e4:c5:
5e:0d:70:59:9c:8d:d5:1d:00:dd:e9:14:32:92:ce:
72:75:8c:f3:6f:eb:11:23:b0:63:7f:d9:db:28:25:
ab:66:b2:96:48:f7:0d:79:36:73:99:00:a8:62:51:
60:b6:0c:a7:a6:14:d1:96:8d:c1:57:7d:2b:37:bb:
76:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:BB:AC:DE:D7:03:3E:55:26:62:3A:46:44:1A:A2:23:B0:B9:0C:1D
X509v3 Authority Key Identifier:
keyid:61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/2bus3tcDPlUmYjpGRBqiI7C5DB0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.91.163.0/24
Signature Algorithm: sha256WithRSAEncryption
a1:c8:94:18:07:d4:e4:70:0e:55:d8:d1:d4:50:cd:02:eb:3a:
cf:d9:b4:1a:a3:5c:53:39:0d:31:b8:57:b2:03:7b:1c:dd:e9:
03:c5:ce:ee:35:14:c2:0a:88:df:c1:ca:cb:a5:a4:46:2e:49:
76:e1:fe:c4:0b:d1:2a:cd:7b:4b:2d:fb:7b:f2:c1:7f:c4:e6:
1d:05:f5:07:6a:05:00:0c:1e:6a:ac:16:47:31:af:cb:4b:6c:
73:39:6d:af:c8:0e:07:79:71:e6:53:44:24:41:d0:3a:52:a5:
db:9c:16:8e:9d:fe:6d:df:b6:19:d0:01:33:b4:9f:e2:1f:4e:
6a:29:65:c6:dd:05:f4:61:10:30:62:e2:d7:ac:4e:96:50:6c:
0d:14:bb:c4:a9:da:ce:77:93:b7:d3:35:e9:b4:5d:38:d4:96:
01:71:b7:0f:b4:27:c9:e7:14:c7:00:64:99:2e:a9:bf:22:68:
ff:0d:96:32:f9:cf:f1:04:c3:9f:bf:5d:06:76:7b:d3:5d:9e:
0e:12:be:d1:02:20:1f:d5:8e:26:47:c6:3b:2d:d1:f4:7e:5f:
2a:35:3e:32:8e:3e:5b:ed:b1:ad:af:82:4e:0f:92:7b:1c:88:
f4:71:e2:f6:ab:40:b3:6b:52:d9:0d:d6:54:5f:b9:0e:e9:63:
3e:3b:03:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:35:21 2025 by rpki-client