Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/18s6iv28JzN23ACcxvidnV4O018.roa
File: 18s6iv28JzN23ACcxvidnV4O018.roa (raw, json)
Hash identifier: E520J/m/9e2VHqsrljvZsuWV/dovmSdu9Qn56B7khEk=
Subject key identifier: D7:CB:3A:8A:FD:BC:27:33:76:DC:00:9C:C6:F8:9D:9D:5E:0E:D3:5F
Certificate issuer: /CN=bd3668628f0df79d047eca0d9adcfc0b6693e309
Certificate serial: 019422FBE62072D249D4998CB60EE85DCD30
Authority key identifier: BD:36:68:62:8F:0D:F7:9D:04:7E:CA:0D:9A:DC:FC:0B:66:93:E3:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vTZoYo8N950EfsoNmtz8C2aT4wk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/18s6iv28JzN23ACcxvidnV4O018.roa
Signing time: Wed 01 Jan 2025 17:48:41 +0000
ROA not before: Wed 01 Jan 2025 17:48:41 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 5511
IP address blocks: 45.140.59.0/24 maxlen: 24
45.149.7.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:e6:20:72:d2:49:d4:99:8c:b6:0e:e8:5d:cd:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd3668628f0df79d047eca0d9adcfc0b6693e309
Validity
Not Before: Jan 1 17:48:41 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d7cb3a8afdbc273376dc009cc6f89d9d5e0ed35f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:71:bd:42:20:9d:eb:24:05:b2:4f:44:4a:c9:
aa:ee:bb:78:99:86:ce:3a:75:2e:52:cf:4a:8b:a8:
42:5c:1f:5c:64:cb:00:fa:12:66:1c:ec:f8:13:ed:
64:20:ec:51:f3:3f:a2:0c:f5:94:57:46:99:f0:0f:
e6:c0:43:6e:e5:be:38:44:7d:8f:5a:34:3f:7f:d4:
9c:51:ff:e6:f5:c4:cc:72:45:6c:86:1c:00:38:e5:
d7:a4:e5:47:13:8e:58:bb:f1:55:f2:e5:78:40:49:
de:39:11:b5:d1:6c:c3:1a:c6:65:5b:e1:ff:d3:ef:
a4:10:0f:3f:c8:2b:a2:0c:31:3d:ab:49:ec:0d:4e:
11:4a:68:be:e5:32:bf:5a:58:66:17:d8:57:f4:a3:
d9:1e:cc:f9:03:ba:d5:23:0e:4b:8d:fc:ba:d1:ff:
1b:0f:fb:ae:e8:29:59:55:ef:c2:f3:7c:99:16:0b:
00:ac:45:ba:6a:69:f0:8c:24:3d:1e:b1:b0:5b:21:
9a:ce:c1:14:58:c5:7d:29:86:02:b7:3d:62:e0:31:
cc:e2:fc:d1:ef:95:84:95:47:12:8f:ad:69:39:9d:
f1:c7:f9:67:4b:2c:80:bf:99:60:15:67:1a:e5:f3:
2c:2d:72:42:1b:97:72:78:6c:b8:ce:0a:13:85:95:
a4:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:CB:3A:8A:FD:BC:27:33:76:DC:00:9C:C6:F8:9D:9D:5E:0E:D3:5F
X509v3 Authority Key Identifier:
keyid:BD:36:68:62:8F:0D:F7:9D:04:7E:CA:0D:9A:DC:FC:0B:66:93:E3:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vTZoYo8N950EfsoNmtz8C2aT4wk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/18s6iv28JzN23ACcxvidnV4O018.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/vTZoYo8N950EfsoNmtz8C2aT4wk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.140.59.0/24
45.149.7.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:a0:c7:00:2d:72:b2:95:e7:64:d5:54:3d:6a:77:4f:a5:9a:
8c:9e:94:bd:d3:9c:cb:bc:4d:d0:6d:64:0a:99:f8:1d:6f:96:
8b:c4:cf:eb:9b:53:af:76:0c:6b:de:04:01:e1:48:6b:d7:9e:
5a:0e:c4:da:61:2e:8a:3b:46:e0:56:41:d4:3e:a5:0d:23:8e:
c5:56:4c:1b:6d:90:a9:d5:41:3a:a8:fd:99:02:15:6a:e9:4a:
f4:e0:89:ca:8c:c6:45:5d:48:f8:ab:39:7e:aa:00:28:70:dd:
89:73:ba:7c:d5:46:71:ee:39:06:c1:95:57:44:9d:f5:a2:c1:
0b:f1:3a:0c:55:63:77:c1:cc:77:a2:83:9d:52:3c:00:74:cb:
ec:2e:bd:3c:43:70:54:06:20:8e:73:11:e5:20:5f:96:ff:b8:
11:06:27:ae:a2:fb:84:4b:ea:6c:f3:88:a4:76:f3:44:a7:e7:
af:82:53:93:3d:85:02:af:f2:8d:0d:76:0a:bb:55:47:ff:2d:
10:a5:40:c1:3e:2f:04:45:fb:48:14:c5:d5:44:23:c4:bb:58:
cf:f9:5a:0b:fb:b6:c9:25:e7:16:89:30:c3:ab:e9:a8:9b:fc:
d0:8d:4d:86:4c:5f:a0:e5:c4:2c:ba:ff:bc:c3:17:9c:95:c4:
e4:9d:b9:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 03:45:24 2025 by rpki-client