Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/SR1nwkoBjIj75mTNwRidZlbJOTw.roa
File: SR1nwkoBjIj75mTNwRidZlbJOTw.roa (raw, json)
Hash identifier: msAjEbfoGPIe6XH3g7gGAv3xzQgadDq7FwQK45Qm2Go=
Subject key identifier: 49:1D:67:C2:4A:01:8C:88:FB:E6:64:CD:C1:18:9D:66:56:C9:39:3C
Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Certificate serial: 0192101F21FCAF5EF1FA4036E0162C14B966
Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/SR1nwkoBjIj75mTNwRidZlbJOTw.roa
Signing time: Fri 20 Sep 2024 15:48:48 +0000
ROA not before: Fri 20 Sep 2024 15:48:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 51082
IP address blocks: 45.151.140.0/24 maxlen: 24
45.151.141.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:10:1f:21:fc:af:5e:f1:fa:40:36:e0:16:2c:14:b9:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Validity
Not Before: Sep 20 15:48:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=491d67c24a018c88fbe664cdc1189d6656c9393c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:e9:7f:ec:e2:4d:1b:8c:a7:3b:7a:e6:a7:5b:
5c:57:dd:1c:61:eb:c9:40:9e:2c:d9:53:2d:bd:d5:
88:87:ef:2e:25:c4:c9:49:cd:c0:67:67:de:be:17:
b4:0c:9f:7c:12:72:22:6b:6d:d6:1c:1c:e6:f5:2b:
f8:53:1e:59:8e:86:64:c0:78:f4:1a:94:28:79:eb:
86:74:50:f5:81:4a:47:d4:13:6b:e2:8e:48:65:ba:
44:4b:27:44:66:7c:72:06:8d:af:ea:21:e1:ad:2e:
e2:47:ce:81:65:4c:c3:48:16:cd:0a:db:52:0d:2c:
24:df:61:ce:40:c8:9c:17:63:4c:e6:18:88:6c:e0:
88:26:3c:2e:77:9b:4c:7a:e1:de:98:8e:9b:90:a8:
fb:1c:c4:35:2a:34:78:a7:a7:17:26:a0:9e:64:78:
a3:ea:ef:41:fa:61:e5:b0:78:ab:e4:11:bb:34:6f:
71:bf:28:a8:7d:23:5f:6b:d5:33:b8:18:31:da:86:
02:a4:90:c3:96:cb:b8:f6:4e:b4:d0:d9:86:07:6b:
26:29:e1:38:fc:03:2d:37:9f:c6:41:46:ce:79:e8:
53:1d:2e:5f:f6:97:6a:c4:a1:41:41:58:4b:62:d8:
3d:19:7b:63:26:50:77:e2:e6:50:4d:d5:c6:5f:11:
0f:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:1D:67:C2:4A:01:8C:88:FB:E6:64:CD:C1:18:9D:66:56:C9:39:3C
X509v3 Authority Key Identifier:
keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/SR1nwkoBjIj75mTNwRidZlbJOTw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.151.140.0/23
Signature Algorithm: sha256WithRSAEncryption
70:a7:6a:8d:ff:1e:25:71:72:56:0a:a0:a0:0c:e6:cd:12:0e:
a5:54:b9:54:bb:9d:1d:57:c1:35:8a:2f:30:c1:1a:b8:e1:5f:
ac:48:fc:81:94:bd:93:d0:dc:82:6f:1d:1a:fa:2a:aa:34:0d:
ea:d2:ba:18:d8:01:96:8f:0e:bd:21:86:0e:81:3f:a4:5d:0d:
c5:53:c1:d0:1e:ad:e7:a1:1a:7b:6b:b9:3d:52:2b:0f:d5:37:
b2:23:3e:a6:b7:eb:76:42:0b:77:41:3c:f4:e4:1a:b2:16:47:
d4:25:88:cc:41:e5:5d:ea:09:8d:f8:e8:24:e9:d7:dc:b3:28:
8c:4a:75:f9:ce:67:8a:11:b3:1d:05:49:c4:e5:4a:69:6c:94:
b7:07:2c:92:99:5f:b3:3a:bf:a2:cd:7d:ff:63:33:2f:8c:89:
bb:63:48:2b:57:79:35:31:d0:20:0d:86:70:50:87:76:8d:c1:
a9:66:86:6a:55:c5:57:d7:56:7e:06:1c:5a:33:ac:59:e5:31:
27:a3:5e:2d:1e:ca:3e:28:40:e6:f4:f6:db:71:06:b2:3f:74:
dc:b5:29:b0:c1:72:b0:b0:b5:06:2e:70:8c:1f:e4:d5:31:9f:
3c:fc:86:d0:66:a5:31:33:6c:84:e6:91:7c:08:83:03:b6:22:
7e:c9:90:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:09:31 2025 by rpki-client