Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/6div_0DYyB0bH5P_FwG2uxJ4YUM.roa
File: 6div_0DYyB0bH5P_FwG2uxJ4YUM.roa (raw, json)
Hash identifier: EBrQRhRMS8fl4gE/6neY3DbJQhwBBnFR7R620dr2ZBs=
Subject key identifier: E9:D8:AF:FF:40:D8:C8:1D:1B:1F:93:FF:17:01:B6:BB:12:78:61:43
Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Certificate serial: 019422200AD5C79EE90C48061983ED380C04
Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/6div_0DYyB0bH5P_FwG2uxJ4YUM.roa
Signing time: Wed 01 Jan 2025 13:48:32 +0000
ROA not before: Wed 01 Jan 2025 13:48:32 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 13332
IP address blocks: 45.115.192.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:20:0a:d5:c7:9e:e9:0c:48:06:19:83:ed:38:0c:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Validity
Not Before: Jan 1 13:48:32 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e9d8afff40d8c81d1b1f93ff1701b6bb12786143
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:01:27:4d:fe:aa:d3:f7:bc:46:96:ee:dc:ee:
55:53:b1:1b:ee:50:1e:8e:7a:45:92:b5:ad:0e:7c:
be:17:1a:d9:0b:62:b4:8a:3a:6e:70:ee:04:7e:5a:
92:66:d5:3f:24:a8:cb:77:ae:64:8d:33:af:f2:60:
0b:3c:7d:97:43:70:f4:c6:fd:ee:9f:73:3c:26:b6:
48:54:db:e1:63:43:b7:d2:6b:fd:bd:16:2b:e0:2b:
d1:16:da:df:56:3c:b9:26:35:b4:c5:82:68:59:f0:
c8:51:65:a7:5b:46:b6:0f:1a:19:d3:02:1c:4a:3f:
ce:82:20:79:34:32:64:77:d2:18:e2:b9:94:74:52:
ee:35:2b:f4:61:47:85:dd:53:06:fa:cd:5c:f9:1c:
56:5d:39:d1:47:8a:86:d4:4c:ef:df:1d:40:8a:92:
21:32:bc:d5:3b:49:2f:40:b5:30:09:6d:b7:2b:fb:
71:25:8b:e0:9d:33:5a:72:a4:bd:76:69:2d:8b:ed:
68:24:34:02:9d:38:ee:a0:f1:17:2e:b7:d7:64:23:
48:ef:20:44:01:02:96:85:18:49:8b:f9:23:f3:4c:
9c:88:1a:2f:8a:c7:47:0b:54:32:8d:62:4b:53:eb:
b5:99:ec:f6:87:8b:36:5e:b3:3c:7f:e9:c4:7e:53:
47:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:D8:AF:FF:40:D8:C8:1D:1B:1F:93:FF:17:01:B6:BB:12:78:61:43
X509v3 Authority Key Identifier:
keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/6div_0DYyB0bH5P_FwG2uxJ4YUM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.115.192.0/22
Signature Algorithm: sha256WithRSAEncryption
3b:15:ae:2a:ea:69:9e:4c:ed:8b:28:79:61:73:f2:51:60:c3:
08:a4:fc:62:07:5e:a2:6a:67:e8:76:14:c7:02:95:cf:45:aa:
57:56:11:28:e8:aa:f3:d7:78:2b:94:84:fe:c7:32:fb:eb:9d:
25:61:1b:9f:20:41:16:e0:1c:72:b5:75:d4:7f:5b:82:7a:c8:
b8:a7:8f:b0:02:6a:81:15:0b:2f:7c:7a:2f:20:7f:38:bb:70:
ed:04:46:cd:e2:5a:21:f8:66:07:32:36:de:62:d6:29:bb:51:
50:69:a4:89:7a:81:88:7b:59:47:be:b9:eb:a4:84:84:64:d2:
83:5f:18:fd:c7:0a:d7:d1:7d:3e:70:ad:75:2a:f6:87:e2:a6:
c3:60:a0:4e:3d:f1:3e:ca:84:41:17:d6:31:0e:d6:e8:fe:b8:
80:f1:13:7a:3a:d8:49:cc:c1:76:35:63:ad:6b:93:41:22:01:
16:05:ae:a9:41:00:33:bb:19:6e:a8:b3:be:20:97:45:28:a8:
ab:93:4b:b3:bc:e7:55:d2:ad:70:21:f8:09:1a:34:ff:f7:09:
da:02:fa:31:20:d7:77:9f:88:db:d1:6c:40:68:0e:47:41:da:
05:77:64:83:c3:e5:95:14:ca:82:e0:aa:b9:b8:e8:5b:b0:45:
fd:65:d1:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:03:45 2025 by rpki-client