Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/362a4d-9ae6-4012-b5b8-2cc753e53955/1/9pCer8puLnj5hC-8qZh7MHueqPs.roa
File: 9pCer8puLnj5hC-8qZh7MHueqPs.roa (raw, json)
Hash identifier: IUzgUbYlTvAtwHST9A9dU/nYKg0FWPtCZLzU6KzN7aI=
Subject key identifier: F6:90:9E:AF:CA:6E:2E:78:F9:84:2F:BC:A9:98:7B:30:7B:9E:A8:FB
Certificate issuer: /CN=73ef4bbafdc73e53c099d4d52e9c9effa8379b4f
Certificate serial: 01941F8C87D7560279BF23DB359C3EE36C7B
Authority key identifier: 73:EF:4B:BA:FD:C7:3E:53:C0:99:D4:D5:2E:9C:9E:FF:A8:37:9B:4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c-9Luv3HPlPAmdTVLpye_6g3m08.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/362a4d-9ae6-4012-b5b8-2cc753e53955/1/9pCer8puLnj5hC-8qZh7MHueqPs.roa
Signing time: Wed 01 Jan 2025 01:48:10 +0000
ROA not before: Wed 01 Jan 2025 01:48:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44486
IP address blocks: 45.67.68.0/24 maxlen: 24
45.67.69.0/24 maxlen: 24
45.67.70.0/24 maxlen: 24
45.67.71.0/24 maxlen: 24
2a09:71c0::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:87:d7:56:02:79:bf:23:db:35:9c:3e:e3:6c:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73ef4bbafdc73e53c099d4d52e9c9effa8379b4f
Validity
Not Before: Jan 1 01:48:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f6909eafca6e2e78f9842fbca9987b307b9ea8fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:c9:3b:63:7e:56:b9:26:4e:50:1f:43:21:ad:
7f:99:b4:d3:ad:76:f9:46:8d:a3:a0:ce:fe:f2:c4:
41:13:1e:cd:fa:00:5d:9e:fb:29:a1:9b:c5:a1:1b:
c0:b1:38:27:bc:18:7c:ca:21:82:5a:64:e1:ba:39:
bb:70:66:c9:c0:17:83:c2:3c:35:f0:79:59:23:8b:
90:8e:0d:e0:38:1c:a1:8c:0c:c2:2a:e9:5e:2e:0e:
96:d9:fe:7b:48:5f:d7:f8:04:20:03:37:3e:9a:53:
ca:18:7e:67:09:e9:07:df:c8:bf:d9:6b:92:3b:ba:
8a:eb:61:80:de:1f:85:e3:15:ad:af:d6:26:5c:a7:
9a:80:bd:1f:1e:ed:2b:f8:85:16:b8:c0:70:63:49:
ed:fe:35:3f:ea:5a:1d:17:bb:ef:40:ea:c2:63:6a:
97:0b:6d:bb:77:67:0f:e8:db:97:30:14:b5:77:18:
52:e5:b3:c4:12:99:86:b7:f7:f8:84:26:94:5a:32:
c9:c2:24:ff:b0:78:96:ac:4b:75:0c:70:92:d0:bd:
e0:29:5e:b4:ba:60:2c:04:d2:9d:54:b5:e2:33:e8:
c7:c9:37:de:3c:bf:eb:a0:74:36:32:fc:bc:90:17:
dd:86:8b:6f:eb:81:00:6b:b5:1a:ef:23:7f:c9:31:
a4:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:90:9E:AF:CA:6E:2E:78:F9:84:2F:BC:A9:98:7B:30:7B:9E:A8:FB
X509v3 Authority Key Identifier:
keyid:73:EF:4B:BA:FD:C7:3E:53:C0:99:D4:D5:2E:9C:9E:FF:A8:37:9B:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c-9Luv3HPlPAmdTVLpye_6g3m08.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/362a4d-9ae6-4012-b5b8-2cc753e53955/1/9pCer8puLnj5hC-8qZh7MHueqPs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/362a4d-9ae6-4012-b5b8-2cc753e53955/1/c-9Luv3HPlPAmdTVLpye_6g3m08.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.67.68.0/22
IPv6:
2a09:71c0::/29
Signature Algorithm: sha256WithRSAEncryption
6d:a5:da:4f:29:0e:f4:f4:d1:01:20:40:a6:e0:8c:f9:60:b5:
8b:26:e3:1f:92:54:3d:02:f7:0f:30:c8:fe:3f:6f:1e:9d:06:
99:bb:3c:21:de:84:a0:0b:b8:ae:5a:3c:99:17:c2:bd:4e:2f:
d4:02:32:dd:f5:cb:38:bd:97:64:41:f8:98:8c:b4:93:8e:06:
75:83:0f:a2:0e:42:41:78:6a:db:7f:88:91:a2:19:c9:a5:cd:
44:12:a5:af:5f:b5:fd:92:f5:1e:da:fc:7a:9a:8e:a1:3f:8a:
5e:81:bd:48:8c:da:78:0d:ce:91:44:33:c9:a7:cc:63:8f:2e:
e2:ce:5b:91:76:4c:33:7f:52:a8:d7:c4:fd:06:f1:8e:0f:f8:
45:a2:4c:4d:d9:99:68:03:72:a7:79:56:92:ac:3e:52:84:bc:
b5:6c:01:d0:3a:b5:fb:d8:35:fb:84:98:87:42:34:4c:de:0c:
9c:a6:35:bf:8c:14:81:f9:d3:6e:6b:fb:ce:8d:2f:31:cc:d3:
8d:22:ca:2b:aa:9c:96:db:9e:6b:1d:b5:e7:e8:a8:09:7c:ad:
f5:ae:bd:5c:88:b9:a3:f5:5a:01:c2:03:5e:1e:af:6e:44:92:
7b:0f:fc:70:0c:bd:a1:02:c8:69:87:79:cd:ab:15:c0:f3:cb:
54:89:4b:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:14:37 2025 by rpki-client