Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/1ccbfd-a651-4c8e-9d60-ebbbb444286e/1/CXuHSCaFxVaRaAru4-iFvdd0d-g.roa
File: CXuHSCaFxVaRaAru4-iFvdd0d-g.roa (raw, json)
Hash identifier: po3EKI/Ie4MxQDtGyWIOYbTAnH49FsuKgvn3GW+cz7k=
Subject key identifier: 09:7B:87:48:26:85:C5:56:91:68:0A:EE:E3:E8:85:BD:D7:74:77:E8
Certificate issuer: /CN=de5e36f159f576988fb4e51d4101bb85d0d0c983
Certificate serial: 019427B6002E9A05D98C7B45F79A8FAC1042
Authority key identifier: DE:5E:36:F1:59:F5:76:98:8F:B4:E5:1D:41:01:BB:85:D0:D0:C9:83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3l428Vn1dpiPtOUdQQG7hdDQyYM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/1ccbfd-a651-4c8e-9d60-ebbbb444286e/1/CXuHSCaFxVaRaAru4-iFvdd0d-g.roa
Signing time: Thu 02 Jan 2025 15:50:26 +0000
ROA not before: Thu 02 Jan 2025 15:50:26 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 39421
IP address blocks: 45.90.160.0/22 maxlen: 22
45.90.160.0/24 maxlen: 24
45.90.161.0/24 maxlen: 24
45.90.162.0/24 maxlen: 24
45.90.163.0/24 maxlen: 24
2a0c:8880::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b6:00:2e:9a:05:d9:8c:7b:45:f7:9a:8f:ac:10:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de5e36f159f576988fb4e51d4101bb85d0d0c983
Validity
Not Before: Jan 2 15:50:26 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=097b87482685c55691680aeee3e885bdd77477e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:9e:d1:e3:5e:0f:ce:a8:8b:00:c1:95:51:d1:
c4:99:ed:4a:61:83:42:8a:66:fe:bb:00:9a:6a:fe:
1c:19:36:7a:8e:77:72:bf:9c:17:09:ce:86:00:61:
6a:d7:f4:8b:bd:e1:cc:8b:64:3b:63:15:2f:1b:1e:
37:1a:d0:c2:34:29:91:51:0b:9f:2a:55:67:67:67:
0d:32:5e:75:13:63:a8:19:20:99:38:cd:35:51:9e:
07:01:2c:ba:69:d1:24:71:35:ac:47:6b:45:9d:dc:
ff:5c:d0:39:03:84:e6:df:64:86:01:da:f0:7d:26:
16:4c:6c:a6:93:3e:56:c8:54:e7:9d:71:6f:87:30:
8d:d8:9f:a5:b7:2e:8c:69:01:86:0c:56:30:84:23:
27:35:b2:4c:e3:b1:ae:22:d7:2c:0e:a2:68:91:8e:
ab:11:b5:50:4c:d7:09:0c:71:e2:2a:1d:aa:49:60:
a5:36:a0:e5:cb:40:c7:67:e4:e8:8f:fb:3b:30:11:
bb:69:0a:31:00:93:03:5d:26:18:6c:6b:fb:c0:76:
cc:75:da:be:1f:0d:34:b6:1a:6a:cd:55:b6:2f:71:
04:74:de:67:5c:b1:18:9c:c0:83:56:69:66:ae:b4:
60:7f:e5:50:66:9e:62:26:5a:4d:7c:53:a0:f8:34:
a9:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:7B:87:48:26:85:C5:56:91:68:0A:EE:E3:E8:85:BD:D7:74:77:E8
X509v3 Authority Key Identifier:
keyid:DE:5E:36:F1:59:F5:76:98:8F:B4:E5:1D:41:01:BB:85:D0:D0:C9:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3l428Vn1dpiPtOUdQQG7hdDQyYM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/1ccbfd-a651-4c8e-9d60-ebbbb444286e/1/CXuHSCaFxVaRaAru4-iFvdd0d-g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/1ccbfd-a651-4c8e-9d60-ebbbb444286e/1/3l428Vn1dpiPtOUdQQG7hdDQyYM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.90.160.0/22
IPv6:
2a0c:8880::/29
Signature Algorithm: sha256WithRSAEncryption
63:b9:5d:2a:cc:0c:3f:a0:ca:64:e3:3f:5a:70:33:68:f2:02:
c4:ef:6e:d9:57:0e:18:d1:9b:25:a0:ed:18:99:0e:7c:5c:63:
f1:49:50:dc:28:ea:ff:71:8e:b0:26:aa:c0:a2:d3:a1:1d:3e:
a5:04:43:46:c2:e8:5e:dd:3e:39:ce:6f:54:bc:9c:65:48:e6:
c8:09:4c:c0:32:29:78:85:63:4a:39:41:ce:38:4c:5c:94:2d:
6a:b1:b7:f2:ca:6c:7f:50:ea:38:c6:98:7c:26:23:c0:ef:f1:
c9:02:bc:de:9a:b8:47:a9:cb:7d:3e:2e:7c:bd:06:fc:5a:5f:
83:8e:9b:2e:95:fe:ea:63:7a:cb:50:10:eb:39:cf:db:cb:09:
5f:74:7a:c5:29:66:05:59:f2:da:e7:d9:81:f7:35:14:93:cb:
88:5f:13:3c:29:a8:2a:f3:33:6e:cb:b4:ec:d3:d3:a5:52:4f:
16:99:15:18:55:e9:9a:e6:bd:af:a0:18:80:59:9b:ce:83:9a:
5d:41:f0:05:d6:34:a7:98:3c:36:f5:6c:2e:1c:9e:cb:3e:51:
0e:eb:98:9c:d6:ca:90:bc:1c:ae:a4:52:39:f6:99:d8:5c:53:
44:41:37:b1:7f:61:52:79:c8:ac:fc:64:77:56:18:e4:7b:b0:
08:97:9d:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 18:20:47 2025 by rpki-client