Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/DBAiY06tjWmdyY3qfKCs6ciGNYY.roa
File: DBAiY06tjWmdyY3qfKCs6ciGNYY.roa (raw, json)
Hash identifier: jt2o9dIA9qoZcp3AGYdfKIQlqphWiRt8f/tsqxwriYk=
Subject key identifier: 0C:10:22:63:4E:AD:8D:69:9D:C9:8D:EA:7C:A0:AC:E9:C8:86:35:86
Certificate issuer: /CN=bd3668628f0df79d047eca0d9adcfc0b6693e309
Certificate serial: 019422FBE7B33A16523F05078F2D9D7BECC5
Authority key identifier: BD:36:68:62:8F:0D:F7:9D:04:7E:CA:0D:9A:DC:FC:0B:66:93:E3:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vTZoYo8N950EfsoNmtz8C2aT4wk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/DBAiY06tjWmdyY3qfKCs6ciGNYY.roa
Signing time: Wed 01 Jan 2025 17:48:41 +0000
ROA not before: Wed 01 Jan 2025 17:48:41 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 23470
IP address blocks: 45.140.57.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:e7:b3:3a:16:52:3f:05:07:8f:2d:9d:7b:ec:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd3668628f0df79d047eca0d9adcfc0b6693e309
Validity
Not Before: Jan 1 17:48:41 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0c1022634ead8d699dc98dea7ca0ace9c8863586
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:b7:ed:b2:f3:00:97:a4:23:32:ec:c2:57:1b:
fb:29:e2:78:53:ca:54:05:51:8b:94:d2:f4:23:71:
e1:60:db:3e:a7:dd:c9:fc:f7:45:db:b7:dc:7a:72:
ba:a2:d2:8e:91:80:60:2b:79:3a:47:f4:5e:1c:7b:
72:63:51:02:04:be:6d:9e:c5:70:44:c6:f5:10:3e:
4f:5d:2d:b7:ff:e4:1e:07:a7:cd:a7:56:03:46:f1:
94:69:96:2a:8e:37:91:50:ba:d1:2d:84:b5:00:7f:
b1:c6:04:36:e1:dd:09:0c:da:68:ea:51:78:2c:0c:
44:7f:73:2c:8d:41:98:b3:8e:16:3b:91:10:1d:6b:
1d:b5:0a:e0:d5:1b:db:45:c3:f9:57:5e:e7:b4:e2:
c6:ba:72:6b:de:4e:d8:4d:99:8c:2d:c0:0a:95:7f:
bf:eb:c6:1a:e7:8e:af:7e:32:ea:ba:05:ef:d0:3b:
5a:bb:39:10:7e:2f:ca:62:fd:5c:96:e6:a7:6f:f5:
c1:bb:20:6c:ae:c2:8b:a7:83:ce:c3:c6:58:45:d4:
02:73:64:bb:2f:32:c1:81:82:89:fd:8a:2d:83:9f:
39:e2:97:8b:be:98:df:cd:96:8f:e2:0e:a8:9d:9a:
fd:3c:a7:92:47:c3:d0:28:2f:90:e2:79:58:40:75:
8b:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:10:22:63:4E:AD:8D:69:9D:C9:8D:EA:7C:A0:AC:E9:C8:86:35:86
X509v3 Authority Key Identifier:
keyid:BD:36:68:62:8F:0D:F7:9D:04:7E:CA:0D:9A:DC:FC:0B:66:93:E3:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vTZoYo8N950EfsoNmtz8C2aT4wk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/DBAiY06tjWmdyY3qfKCs6ciGNYY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/vTZoYo8N950EfsoNmtz8C2aT4wk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.140.57.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:04:66:aa:34:42:e9:5d:76:5a:79:3f:eb:be:4f:8d:b4:e8:
f6:b9:d6:21:6f:d0:45:dd:2b:d4:cf:54:c3:2f:e6:5e:3d:e7:
10:1c:57:68:89:f7:ee:99:fe:15:f5:d0:ce:54:0c:7a:c7:be:
cc:f0:09:33:9b:f2:85:47:a2:e7:d2:19:d2:d3:b6:ce:fc:81:
d9:cf:7d:11:eb:3a:fa:5e:e5:89:34:20:32:68:3d:8e:71:f9:
8b:11:19:56:18:57:5f:6c:94:97:99:a4:a2:54:81:07:64:8f:
d3:8a:56:8a:81:84:60:1d:44:ec:54:c4:60:2a:3b:5c:0d:32:
48:5a:51:39:da:f2:91:24:2e:3d:0d:0e:19:53:0d:44:6d:82:
c4:2b:79:2a:16:d1:c2:4f:ce:5b:08:65:df:4c:54:87:2f:55:
a7:bf:6f:36:4a:e9:3d:5a:d9:05:e9:95:6e:f0:db:a2:d7:88:
4c:35:9e:d8:2a:5f:0b:c5:ad:08:f6:27:00:0b:93:30:15:69:
02:a9:c6:fc:3f:74:c5:17:9d:0f:21:5d:a3:43:9c:fa:22:73:
54:e1:dd:24:c9:a8:29:3b:56:76:28:1b:65:10:61:96:cc:94:
01:0f:67:8b:8b:36:37:61:fc:38:6c:ca:cd:cf:fe:57:ff:52:
c7:1b:08:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 21:21:59 2025 by rpki-client