Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/4a395c-5185-42ee-948b-8fc2b71d030f/1/Szpv7SbbTq_ZPkpVt0ZS-yigLYQ.roa
File: Szpv7SbbTq_ZPkpVt0ZS-yigLYQ.roa (raw, json)
Hash identifier: tot/yU4vNOc3RqisHsJwZZdti1Jdkg5nZCtY1DuBRp8=
Subject key identifier: 4B:3A:6F:ED:26:DB:4E:AF:D9:3E:4A:55:B7:46:52:FB:28:A0:2D:84
Certificate issuer: /CN=32ed014577ac73ff87ef20ca6f75795e4c937fce
Certificate serial: 01942823FB12C269C04694A45BC034CA023C
Authority key identifier: 32:ED:01:45:77:AC:73:FF:87:EF:20:CA:6F:75:79:5E:4C:93:7F:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mu0BRXesc_-H7yDKb3V5XkyTf84.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/4a395c-5185-42ee-948b-8fc2b71d030f/1/Szpv7SbbTq_ZPkpVt0ZS-yigLYQ.roa
Signing time: Thu 02 Jan 2025 17:50:34 +0000
ROA not before: Thu 02 Jan 2025 17:50:34 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206551
IP address blocks: 45.90.64.0/22 maxlen: 22
2a0c:ab80::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:23:fb:12:c2:69:c0:46:94:a4:5b:c0:34:ca:02:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32ed014577ac73ff87ef20ca6f75795e4c937fce
Validity
Not Before: Jan 2 17:50:34 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4b3a6fed26db4eafd93e4a55b74652fb28a02d84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:c9:35:4f:10:c6:60:2c:86:de:00:cd:b6:a2:
91:e0:cf:39:13:ac:49:a3:5b:9b:d0:fc:a2:13:5c:
41:ec:d8:34:02:97:4c:62:43:35:81:36:f5:4a:13:
6d:c0:22:2e:34:f6:f0:2f:81:59:d7:8c:23:b6:c6:
86:1c:a7:32:88:45:10:31:a1:af:49:91:81:63:af:
77:2e:4b:4b:4b:98:88:ba:70:e4:44:a0:57:17:f7:
88:1d:33:e3:22:d8:ca:f5:9d:31:3c:5a:6a:f7:50:
e3:3b:b8:3f:b1:50:8d:9a:ef:39:7b:48:12:13:4f:
53:e0:0c:f1:f2:ad:1b:7a:de:8a:58:38:40:f2:ef:
72:60:22:74:08:d5:68:6f:7b:77:c7:91:eb:2f:52:
35:e8:b3:ea:d5:54:d4:14:49:4a:de:7c:53:42:71:
f7:24:4a:01:d9:07:86:0d:63:29:14:a2:b0:e9:73:
2b:79:63:bb:a2:e1:45:2d:87:b5:40:55:f2:05:53:
7c:bd:8d:70:dc:0c:95:de:5f:5c:98:69:57:cb:35:
01:ea:74:c4:8b:44:30:02:61:5c:15:d0:61:36:3a:
46:4a:0a:f0:06:37:e8:c8:2c:69:fc:e1:13:45:b2:
c5:87:2a:b1:31:92:c3:3e:07:75:00:fb:b2:0e:8f:
c3:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:3A:6F:ED:26:DB:4E:AF:D9:3E:4A:55:B7:46:52:FB:28:A0:2D:84
X509v3 Authority Key Identifier:
keyid:32:ED:01:45:77:AC:73:FF:87:EF:20:CA:6F:75:79:5E:4C:93:7F:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mu0BRXesc_-H7yDKb3V5XkyTf84.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/4a395c-5185-42ee-948b-8fc2b71d030f/1/Szpv7SbbTq_ZPkpVt0ZS-yigLYQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/4a395c-5185-42ee-948b-8fc2b71d030f/1/Mu0BRXesc_-H7yDKb3V5XkyTf84.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.90.64.0/22
IPv6:
2a0c:ab80::/32
Signature Algorithm: sha256WithRSAEncryption
89:42:77:af:4a:78:82:13:78:85:39:4e:ae:1f:2b:b1:37:42:
dd:9d:85:29:12:f6:42:ca:91:e7:e9:1c:82:fb:cd:12:f7:eb:
67:fe:92:4c:af:41:fd:8a:f0:1a:0a:af:b1:09:6c:6e:7f:7e:
ee:a0:66:0f:8f:c1:2b:61:df:1d:8d:8b:f7:6b:04:84:27:f6:
69:df:96:72:1b:66:fb:71:21:f1:20:93:41:ac:87:29:37:54:
bd:9b:0d:a5:fb:c0:46:f4:3e:6f:b9:4a:80:31:4e:39:b4:a7:
68:21:41:d8:b5:6b:8a:f1:95:c5:4f:84:5e:0c:53:fb:11:0e:
5a:00:6f:4a:8c:1f:2e:41:23:ed:13:8b:12:0c:ff:da:36:9a:
0c:96:60:24:fd:a5:43:33:41:41:40:c3:f2:34:f8:6b:a5:cd:
66:b0:59:9c:89:b6:03:33:43:0e:71:74:5e:ed:63:af:4e:ed:
88:d0:9a:91:12:e1:c8:8f:76:fc:42:53:ec:ba:68:6c:7f:54:
33:01:db:09:23:1c:a6:7c:84:61:7b:d4:5b:d7:57:65:1c:11:
6f:ac:d5:b9:bd:a2:d7:3e:03:6d:3f:d0:f6:31:8a:04:3a:10:
b2:b4:27:20:71:d4:21:d9:56:f4:02:71:1f:a1:11:07:8d:92:
22:ff:24:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:45:22 2025 by rpki-client