Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/f04658-fad7-423c-bb42-82fa3d260869/1/SD-oEQME7mVw4JmF2puJE_ZVAb8.roa
File: SD-oEQME7mVw4JmF2puJE_ZVAb8.roa (raw, json)
Hash identifier: 0hI74loe2zn8/AIh84b34/Zy0gteVUfsUWYiuJp+UXc=
Subject key identifier: 48:3F:A8:11:03:04:EE:65:70:E0:99:85:DA:9B:89:13:F6:55:01:BF
Certificate issuer: /CN=220ab0d7ae01c7ba7da69d71a91472b390cd7091
Certificate serial: 0192D7DF6F55ABE0FE9EF39E1FE394369C1E
Authority key identifier: 22:0A:B0:D7:AE:01:C7:BA:7D:A6:9D:71:A9:14:72:B3:90:CD:70:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Igqw164Bx7p9pp1xqRRys5DNcJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/f04658-fad7-423c-bb42-82fa3d260869/1/SD-oEQME7mVw4JmF2puJE_ZVAb8.roa
Signing time: Tue 29 Oct 2024 10:43:17 +0000
ROA not before: Tue 29 Oct 2024 10:43:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 209427
IP address blocks: 45.66.90.0/24 maxlen: 24
45.66.91.0/24 maxlen: 24
2a09:6644::/48 maxlen: 48
2a09:6644:1::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:d7:df:6f:55:ab:e0:fe:9e:f3:9e:1f:e3:94:36:9c:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=220ab0d7ae01c7ba7da69d71a91472b390cd7091
Validity
Not Before: Oct 29 10:43:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=483fa8110304ee6570e09985da9b8913f65501bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:40:e2:57:43:30:ba:5a:c0:d5:23:b0:c0:fa:
36:fa:b2:d3:90:27:e2:27:40:66:b1:b2:a7:ce:4a:
bf:23:66:5e:a1:e4:da:51:4f:4c:54:ba:1a:f2:74:
bd:c5:3a:65:72:63:95:de:37:a9:9b:77:ed:5d:61:
c7:be:2f:db:b9:50:2c:82:4f:24:59:fe:54:dc:2a:
f5:28:c5:2b:3f:cc:af:51:45:bd:88:9b:3c:ff:91:
9c:89:f9:6c:f6:7f:fd:6f:d7:fe:b7:c9:0b:2c:82:
14:cb:a4:6c:39:3a:6c:25:9e:5f:43:ae:ee:09:83:
a3:6b:11:53:aa:a0:fb:dc:70:3c:47:a3:44:2e:9e:
6d:7a:11:31:79:e9:dc:1a:de:85:56:84:9c:24:9d:
e8:4b:b4:22:0b:14:d3:f1:ba:11:80:ca:bd:c9:ba:
bd:bf:c0:83:81:66:f5:4e:e8:e0:e4:48:d0:61:c4:
42:8d:eb:4f:8b:1a:f2:a1:07:0f:33:2a:65:23:87:
01:00:2a:07:2a:eb:6c:e6:db:8c:28:34:9c:33:4f:
0a:f3:ff:db:e2:93:3e:23:a5:0b:d8:6a:b7:04:5e:
e3:dd:f6:57:ab:25:95:ec:bd:02:03:52:df:a5:3d:
c4:52:c0:16:74:2b:88:72:2d:79:6d:dc:dd:18:ca:
26:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:3F:A8:11:03:04:EE:65:70:E0:99:85:DA:9B:89:13:F6:55:01:BF
X509v3 Authority Key Identifier:
keyid:22:0A:B0:D7:AE:01:C7:BA:7D:A6:9D:71:A9:14:72:B3:90:CD:70:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Igqw164Bx7p9pp1xqRRys5DNcJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/f04658-fad7-423c-bb42-82fa3d260869/1/SD-oEQME7mVw4JmF2puJE_ZVAb8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/f04658-fad7-423c-bb42-82fa3d260869/1/Igqw164Bx7p9pp1xqRRys5DNcJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.66.90.0/23
IPv6:
2a09:6644::/47
Signature Algorithm: sha256WithRSAEncryption
1e:d8:0b:58:17:3a:e1:ff:e5:cf:b0:9c:7e:ca:47:60:48:4d:
2d:e9:35:0a:d2:a1:7a:e1:de:62:f7:0f:c9:5e:d4:cb:e3:84:
4f:61:4f:c3:12:25:20:fe:85:e8:22:22:14:e4:37:64:9b:a8:
00:37:a1:25:89:77:96:25:73:a3:71:02:5b:17:0a:e0:40:ca:
8c:2c:40:13:ee:ff:65:cb:2f:26:24:b4:ab:b3:a8:49:15:78:
af:ae:77:2e:d4:e6:75:26:7b:66:71:82:99:b4:b1:9d:b7:a1:
c5:33:70:ed:70:78:f1:de:0c:68:9a:00:10:38:2a:02:ee:44:
c5:c3:72:84:60:5a:d4:e4:80:ef:34:5b:16:05:11:3a:87:82:
ce:81:69:6d:74:d3:58:00:e5:f1:05:f2:ca:ba:b7:bc:f4:24:
b0:b7:77:28:e4:a0:10:32:19:26:ff:27:be:8d:ad:d1:99:6c:
4e:1e:a9:83:b7:36:79:fb:88:69:2a:c9:7c:3f:bf:b0:65:63:
81:e3:02:89:fe:c1:72:19:02:09:fa:cd:16:66:00:61:eb:61:
c9:64:e4:37:b0:66:4b:b8:fa:32:cb:52:78:17:79:cb:a6:30:
e6:17:61:05:90:6d:c3:85:50:d2:73:07:0b:0c:4c:11:c6:05:
04:df:e9:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:57:27 2025 by rpki-client