Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/8GAUp0koq7cLyKDBljD12_gS9fU.roa
File: 8GAUp0koq7cLyKDBljD12_gS9fU.roa (raw, json)
Hash identifier: TLK0INhWOPZtOAAlZEJ0okbttAxXwilC0/Fin663h4o=
Subject key identifier: F0:60:14:A7:49:28:AB:B7:0B:C8:A0:C1:96:30:F5:DB:F8:12:F5:F5
Certificate issuer: /CN=bd3668628f0df79d047eca0d9adcfc0b6693e309
Certificate serial: 019422FBEA123DF122D7D0B03417B606594D
Authority key identifier: BD:36:68:62:8F:0D:F7:9D:04:7E:CA:0D:9A:DC:FC:0B:66:93:E3:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vTZoYo8N950EfsoNmtz8C2aT4wk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/8GAUp0koq7cLyKDBljD12_gS9fU.roa
Signing time: Wed 01 Jan 2025 17:48:42 +0000
ROA not before: Wed 01 Jan 2025 17:48:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 152700
IP address blocks: 45.149.6.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:ea:12:3d:f1:22:d7:d0:b0:34:17:b6:06:59:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd3668628f0df79d047eca0d9adcfc0b6693e309
Validity
Not Before: Jan 1 17:48:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f06014a74928abb70bc8a0c19630f5dbf812f5f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:a9:8c:8f:19:f8:bb:2d:3d:41:f7:a4:04:fd:
87:f5:7f:7c:a9:17:7d:47:82:9e:1a:cd:69:88:a6:
bb:d0:5f:90:94:81:5e:c9:dc:8f:83:c6:ca:6e:b2:
ef:3b:7b:d4:06:8b:71:af:f6:3f:de:f0:ea:94:b3:
98:78:83:74:a8:dc:e2:cc:48:ab:19:43:b5:e0:6e:
93:d5:8d:63:ec:be:fa:e2:f0:70:4f:f8:65:bb:e3:
54:85:e8:05:e4:05:2e:6b:17:be:1e:03:2e:d9:ff:
f4:01:7d:a3:67:df:30:81:0e:26:47:58:dc:94:98:
0e:de:4c:c5:8c:60:29:27:17:59:7f:b1:1e:6b:90:
af:ee:52:1e:85:b7:2e:d2:05:7a:69:67:64:ac:d7:
56:0c:b5:41:f1:49:b4:62:39:d7:32:2d:25:f8:bc:
c2:ae:5c:29:e4:1d:e3:4a:fe:47:b8:61:62:95:b3:
f7:52:4f:2c:35:30:73:41:20:4e:73:83:01:ed:e8:
1e:be:87:f0:de:8d:0b:ad:7b:16:7d:c0:44:90:b4:
a2:15:08:f0:dd:32:ee:21:64:64:28:80:46:73:f2:
ca:96:c8:6a:74:8b:a0:0c:5b:12:3f:f0:d7:ef:fe:
22:de:1c:11:c3:15:89:55:05:26:5f:a7:10:ce:c8:
04:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:60:14:A7:49:28:AB:B7:0B:C8:A0:C1:96:30:F5:DB:F8:12:F5:F5
X509v3 Authority Key Identifier:
keyid:BD:36:68:62:8F:0D:F7:9D:04:7E:CA:0D:9A:DC:FC:0B:66:93:E3:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vTZoYo8N950EfsoNmtz8C2aT4wk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/8GAUp0koq7cLyKDBljD12_gS9fU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/vTZoYo8N950EfsoNmtz8C2aT4wk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.149.6.0/24
Signature Algorithm: sha256WithRSAEncryption
00:01:2c:5c:db:ae:85:df:b4:fe:f6:d2:37:63:e9:e9:f7:10:
18:2b:ca:de:aa:80:28:fa:c2:de:6d:e8:78:1b:3c:dc:b1:76:
f9:97:b8:06:38:bf:68:95:55:ce:a6:69:64:e4:b0:7c:29:5e:
5f:67:dc:d1:be:fe:dc:00:9f:1a:09:d9:44:05:71:27:48:62:
63:22:fa:0c:a3:0a:d2:d5:86:da:55:b9:c7:ef:03:7b:31:24:
cc:cf:a7:50:16:4c:47:ac:6d:25:07:83:47:f7:1f:5a:9b:4f:
76:34:4d:9d:a4:b8:67:d4:21:1f:ac:10:88:ed:15:21:74:91:
47:8e:c0:a4:c5:55:04:e9:5b:d7:62:eb:a5:07:f9:dd:4c:6d:
d0:c6:60:7f:1e:5c:94:32:ed:aa:33:31:5e:09:e5:1c:19:1e:
cc:3a:e5:27:2c:a1:2c:68:89:4a:f6:43:57:54:ca:7a:72:26:
62:a9:fc:3d:10:c0:a2:9e:72:47:06:a6:a0:ae:1b:0f:18:2d:
77:c9:ce:34:20:77:ed:c7:3c:f0:c1:0f:c9:d1:c9:67:2d:3d:
66:91:b8:15:2e:cc:84:92:a7:fa:c7:38:55:ad:14:66:04:bf:
23:18:25:8a:66:07:54:bd:9a:69:19:56:27:91:b9:68:eb:9b:
f1:42:eb:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 20:49:49 2025 by rpki-client