Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/4GjnFa61b7D1CUPOXXc6vprK6OA.roa
File: 4GjnFa61b7D1CUPOXXc6vprK6OA.roa (raw, json)
Hash identifier: 5auMZdAsrgcsNr8oZfK/ccbL5c+lY4lq4/u+E4pzMHY=
Subject key identifier: E0:68:E7:15:AE:B5:6F:B0:F5:09:43:CE:5D:77:3A:BE:9A:CA:E8:E0
Certificate issuer: /CN=618478f198fe569010c3df6219142f530c4f5e56
Certificate serial: 0194258F86BE1E91530F4B83BBDFAEE38884
Authority key identifier: 61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/4GjnFa61b7D1CUPOXXc6vprK6OA.roa
Signing time: Thu 02 Jan 2025 05:49:10 +0000
ROA not before: Thu 02 Jan 2025 05:49:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 34582
IP address blocks: 45.158.47.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:86:be:1e:91:53:0f:4b:83:bb:df:ae:e3:88:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=618478f198fe569010c3df6219142f530c4f5e56
Validity
Not Before: Jan 2 05:49:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e068e715aeb56fb0f50943ce5d773abe9acae8e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:d4:7a:89:c1:52:54:7c:38:83:54:df:dd:1a:
ad:75:fa:f8:f6:b4:18:ac:02:55:81:e6:e4:d4:0d:
b5:83:84:92:f6:ef:9d:bb:60:c3:ce:7f:d7:67:e3:
00:44:55:3b:78:c6:74:8e:63:a7:bb:b5:56:13:27:
7d:27:24:9f:85:68:88:7e:38:46:db:63:ad:cb:61:
84:9e:85:81:b3:8a:c6:f4:dc:d3:54:26:48:f8:87:
2e:85:98:9c:b0:b4:e7:38:93:1f:cd:e2:6c:29:03:
ec:b0:a7:db:b3:30:e2:12:d0:37:54:c5:37:59:4e:
33:93:66:b9:86:fa:b7:50:00:9e:75:d9:78:97:f0:
1e:e0:ed:d5:ea:04:c1:7f:73:f6:65:9a:99:e6:b8:
c2:ba:ec:0f:b5:16:a2:02:16:f7:2d:e7:ac:d7:fc:
94:1a:f5:78:33:c0:2e:bc:2f:2b:02:93:40:b0:8b:
36:e7:72:c8:94:94:c2:d8:21:46:08:67:58:1d:7d:
e6:b7:8a:dc:fb:0a:63:e8:90:c9:72:28:41:14:1b:
2b:3b:da:b4:ae:f5:e0:e3:76:27:92:1b:dd:47:d9:
11:cd:70:ab:09:ea:0a:c6:f3:c5:d5:04:79:81:6c:
ad:f3:6d:9e:3f:d3:20:f7:64:11:aa:de:0a:15:67:
4b:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:68:E7:15:AE:B5:6F:B0:F5:09:43:CE:5D:77:3A:BE:9A:CA:E8:E0
X509v3 Authority Key Identifier:
keyid:61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/4GjnFa61b7D1CUPOXXc6vprK6OA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.158.47.0/24
Signature Algorithm: sha256WithRSAEncryption
b3:97:f6:5d:29:bd:fa:14:d8:39:a2:0e:9d:db:42:00:99:dc:
79:ef:37:ce:e9:d3:21:a5:60:ef:f6:97:98:91:07:3a:b2:e9:
e8:db:67:5f:33:c1:1c:e4:8c:9d:74:38:00:44:8a:8d:3f:0f:
1d:8c:f3:bd:cd:82:a0:c9:36:f2:d8:fb:75:0b:f2:11:22:d1:
f6:9a:5b:e1:c7:68:8c:ec:81:72:0e:95:8c:0c:35:0f:79:ce:
1e:18:ae:fb:0a:fd:61:49:03:58:a2:cb:35:93:69:09:3a:3c:
85:21:0d:58:72:40:a7:06:25:77:a9:19:76:97:f5:c8:18:14:
f9:d9:c4:1a:f9:7d:7d:26:7b:95:66:1e:1a:fe:0a:57:35:76:
dc:f5:43:21:fe:07:a7:65:c0:3c:7c:65:b0:f6:37:1a:b2:c5:
c5:b5:f2:ff:63:9e:7a:e1:59:48:bc:91:94:fe:88:64:46:98:
4a:ca:28:bf:5b:a9:e0:db:66:a6:67:24:8e:23:fd:61:af:e7:
95:c8:67:ea:f1:2b:74:c5:c4:bd:4b:19:10:93:d3:b2:89:c7:
4e:40:8a:fa:6f:d9:19:9e:6a:22:12:a7:25:79:25:79:5b:ab:
c2:99:10:86:a7:dc:42:ee:3c:2e:04:04:0f:23:af:9f:a0:c1:
72:48:1a:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 03:17:32 2025 by rpki-client