Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/CcnYeTq2dJaGTshQDTo4LE4TtiY.roa
File: CcnYeTq2dJaGTshQDTo4LE4TtiY.roa (raw, json)
Hash identifier: K2/Cw46NWYeizRDviEgc23TZa1/dcTHzYSYiPLGUPdQ=
Subject key identifier: 09:C9:D8:79:3A:B6:74:96:86:4E:C8:50:0D:3A:38:2C:4E:13:B6:26
Certificate issuer: /CN=1a7f036e2592391fb45a3dd33caf0b07956973cf
Certificate serial: 01939709ED5CC9DF86D200FB0CBA6476BF6B
Authority key identifier: 1A:7F:03:6E:25:92:39:1F:B4:5A:3D:D3:3C:AF:0B:07:95:69:73:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/CcnYeTq2dJaGTshQDTo4LE4TtiY.roa
Signing time: Thu 05 Dec 2024 13:37:10 +0000
ROA not before: Thu 05 Dec 2024 13:37:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 135391
IP address blocks: 45.156.144.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:97:09:ed:5c:c9:df:86:d2:00:fb:0c:ba:64:76:bf:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a7f036e2592391fb45a3dd33caf0b07956973cf
Validity
Not Before: Dec 5 13:37:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=09c9d8793ab67496864ec8500d3a382c4e13b626
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:5f:d1:86:44:40:5e:d2:3c:52:66:32:59:7c:
53:f4:eb:1c:ef:11:81:7c:0e:bd:3e:52:ff:9e:0d:
c5:db:d7:06:fc:71:ed:11:d1:97:71:26:ba:73:a9:
b3:89:67:78:4f:b4:74:b1:59:2f:12:84:50:08:91:
fa:89:f0:22:4a:95:3d:18:18:3f:37:87:fe:fe:44:
f0:56:ba:b8:14:05:77:21:01:21:8a:da:74:2e:68:
cf:02:83:df:48:86:03:94:7e:71:9d:0f:9b:e0:69:
a3:17:5e:6e:c7:ce:c4:99:1f:44:9f:7a:f8:6d:e7:
90:21:31:ae:cc:08:3e:c5:3a:b2:94:b2:82:b5:f0:
9d:bf:7a:34:5c:c9:60:c4:a7:02:56:c5:34:58:01:
7c:7e:0c:f6:7b:ff:f4:dd:d2:ef:3d:80:4d:d0:92:
bc:0d:94:b5:58:08:51:af:36:e5:88:6d:ef:cc:a5:
e7:32:e3:8f:4c:b2:4e:b7:6f:fe:9d:ee:0e:bc:37:
0c:7e:bd:1c:63:9d:7c:dc:00:4f:83:97:0e:2f:23:
69:79:f4:f1:0a:8c:7b:ac:d2:c5:0e:31:f2:d5:b2:
2b:6b:20:89:bf:2e:7d:d5:c1:f7:57:ee:f0:b6:99:
fc:08:f6:98:76:3b:b4:16:d1:aa:27:6f:fa:32:7c:
e0:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:C9:D8:79:3A:B6:74:96:86:4E:C8:50:0D:3A:38:2C:4E:13:B6:26
X509v3 Authority Key Identifier:
keyid:1A:7F:03:6E:25:92:39:1F:B4:5A:3D:D3:3C:AF:0B:07:95:69:73:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/CcnYeTq2dJaGTshQDTo4LE4TtiY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.156.144.0/24
Signature Algorithm: sha256WithRSAEncryption
59:50:f4:56:f5:81:2d:52:d4:59:fa:2c:6f:7f:69:76:37:84:
32:36:1d:a4:04:ed:68:66:f5:9b:9b:1c:d3:7d:7e:33:a0:d6:
9a:db:15:52:02:88:33:f7:57:05:a8:d5:75:cd:d4:0e:28:ad:
52:23:15:10:85:38:98:b0:67:75:ce:1a:0e:be:57:36:6f:85:
03:79:1d:38:57:f5:04:b0:14:5d:72:d6:61:f4:6a:24:90:60:
db:d1:dc:24:74:44:c6:2a:13:eb:69:ae:2c:39:00:5a:87:17:
99:02:ca:5f:bf:a8:5a:cb:0d:1e:58:96:0f:32:60:7d:3f:a3:
54:3f:62:f0:bd:45:bb:8c:21:0b:9b:8f:f5:cf:13:cf:bf:64:
36:3e:9c:74:6b:f6:26:6b:33:d7:99:f8:a9:3a:30:b1:1a:ca:
ae:8a:82:00:11:fe:c0:37:23:fa:a0:7f:d7:15:ad:75:6b:04:
4b:9d:5d:74:c6:e7:c2:e4:44:81:76:66:a2:fd:ca:35:d0:e9:
c2:1c:af:06:b8:1a:e3:eb:1a:f6:63:cc:89:8e:96:03:48:b5:
df:86:d6:14:36:fb:7f:be:a6:29:a0:03:bd:a9:5a:06:32:82:
50:19:96:7d:c7:42:a6:38:c5:c6:48:e3:71:30:31:d3:3b:bd:
2a:3d:8f:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 18:04:32 2025 by rpki-client