Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/8db67a-c4fc-4c2c-9978-a7be5fa0ff65/1/ph4TcOIZbEQDwoxIlVRI4f-t_yg.roa
File: ph4TcOIZbEQDwoxIlVRI4f-t_yg.roa (raw, json)
Hash identifier: I5D0ovDZGZlRmOfOF4fYKNNsYs4EU8p2jyxoinIP2U4=
Subject key identifier: A6:1E:13:70:E2:19:6C:44:03:C2:8C:48:95:54:48:E1:FF:AD:FF:28
Certificate issuer: /CN=ed624c590027a5a8c9eeb369726e4a630cdf414c
Certificate serial: 019421B21CE70990AEFE9BD3A9E1F1CB6F90
Authority key identifier: ED:62:4C:59:00:27:A5:A8:C9:EE:B3:69:72:6E:4A:63:0C:DF:41:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7WJMWQAnpajJ7rNpcm5KYwzfQUw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/8db67a-c4fc-4c2c-9978-a7be5fa0ff65/1/ph4TcOIZbEQDwoxIlVRI4f-t_yg.roa
Signing time: Wed 01 Jan 2025 11:48:28 +0000
ROA not before: Wed 01 Jan 2025 11:48:28 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 14618
IP address blocks: 45.89.128.0/22 maxlen: 22
2a0b:a200::/48 maxlen: 48
2a0b:a200:1::/48 maxlen: 48
2a0b:a200:2::/48 maxlen: 48
2a0b:a200:3::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b2:1c:e7:09:90:ae:fe:9b:d3:a9:e1:f1:cb:6f:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed624c590027a5a8c9eeb369726e4a630cdf414c
Validity
Not Before: Jan 1 11:48:28 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a61e1370e2196c4403c28c48955448e1ffadff28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:44:e3:9b:95:8e:b1:60:07:09:3f:4c:61:2f:
bd:30:c5:03:0d:da:5b:58:89:45:67:29:82:bc:46:
d9:b8:a3:ea:97:96:57:80:aa:89:4b:3b:97:73:70:
c3:71:2b:2f:6b:cf:ff:e2:9d:5a:02:4a:71:a9:98:
a6:ae:a9:cf:87:de:bf:c0:b5:32:b4:25:28:4f:c4:
b0:a4:c1:df:76:c5:18:33:33:19:e1:a5:bd:87:24:
9b:44:9e:8e:b7:0e:87:b0:34:6f:4c:a5:0d:02:c0:
d7:6a:f3:8a:fc:59:27:ce:08:3e:d3:2b:c8:05:1a:
4f:95:d9:2a:fe:de:f4:2b:52:db:e3:3e:7f:88:f7:
85:9c:55:a1:cb:a7:5b:67:8e:90:93:20:1f:b3:72:
66:de:63:c6:df:3d:10:d4:e9:a4:31:e1:66:66:3a:
ce:34:ca:67:0c:92:da:db:4f:65:77:c5:8a:81:78:
68:d7:31:48:ac:a4:ab:51:99:23:b7:23:32:b6:04:
71:e5:91:be:b2:73:d1:d0:4a:f4:c2:27:9e:66:8a:
61:0f:e7:4d:fb:10:32:28:ca:bd:1c:f9:bd:09:41:
54:17:24:d7:55:83:07:ac:3b:23:c4:1a:46:95:7a:
b2:c9:0b:a3:e4:91:c0:b2:14:3e:56:ef:66:72:be:
2d:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:1E:13:70:E2:19:6C:44:03:C2:8C:48:95:54:48:E1:FF:AD:FF:28
X509v3 Authority Key Identifier:
keyid:ED:62:4C:59:00:27:A5:A8:C9:EE:B3:69:72:6E:4A:63:0C:DF:41:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7WJMWQAnpajJ7rNpcm5KYwzfQUw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/8db67a-c4fc-4c2c-9978-a7be5fa0ff65/1/ph4TcOIZbEQDwoxIlVRI4f-t_yg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/8db67a-c4fc-4c2c-9978-a7be5fa0ff65/1/7WJMWQAnpajJ7rNpcm5KYwzfQUw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.89.128.0/22
IPv6:
2a0b:a200::/46
Signature Algorithm: sha256WithRSAEncryption
b3:45:50:1a:d4:0b:a5:9b:e1:ca:64:41:a4:c8:4f:57:09:34:
dd:55:fa:9a:aa:9d:d0:f5:65:96:a6:54:fb:fc:85:0b:ed:e8:
79:9d:07:3f:c5:3b:73:90:32:4f:62:67:d1:5b:7e:f8:1f:27:
b4:2e:17:7a:96:ef:91:9c:10:89:50:11:86:85:d7:be:da:05:
c6:b3:e7:40:50:02:a3:36:d1:a3:69:a5:7b:ad:b5:d1:08:d5:
8b:b5:27:eb:f8:a8:af:f3:eb:61:b1:4e:c6:e4:15:17:71:66:
1c:e4:57:b4:e1:e3:61:30:4f:44:e7:ef:40:a0:68:25:c4:68:
df:ce:6b:c7:87:50:ce:63:78:b2:ac:a7:0b:62:3c:64:d0:bd:
7a:78:03:7b:90:31:2b:38:65:85:56:a6:2e:d5:65:a0:d9:9a:
d1:be:b3:da:25:5b:83:e5:de:56:09:7e:69:fe:ba:86:fd:7f:
db:a0:f0:65:c8:31:7e:4f:13:d0:58:2a:83:2e:3c:f6:57:bd:
83:59:83:db:c3:34:f3:ec:4d:9a:9a:db:2d:3b:69:67:56:ba:
86:64:68:c7:38:aa:4f:7c:a8:e1:18:fd:05:bc:af:3a:47:cc:
9f:f3:c3:57:2f:39:92:bf:c3:09:5b:31:9d:69:74:ed:a6:0c:
1f:49:6b:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 23:29:16 2025 by rpki-client