Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/f04658-fad7-423c-bb42-82fa3d260869/1/avLYAmYO9wvbuIB-t2UHkT4WNBk.roa
File: avLYAmYO9wvbuIB-t2UHkT4WNBk.roa (raw, json)
Hash identifier: eNorqBfzjIBrKphnA3Hxbm94Qe9pNP73PjpzIgRcQ3E=
Subject key identifier: 6A:F2:D8:02:66:0E:F7:0B:DB:B8:80:7E:B7:65:07:91:3E:16:34:19
Certificate issuer: /CN=220ab0d7ae01c7ba7da69d71a91472b390cd7091
Certificate serial: 0194258F99BC7D29EFD415772F93ABF98EAD
Authority key identifier: 22:0A:B0:D7:AE:01:C7:BA:7D:A6:9D:71:A9:14:72:B3:90:CD:70:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Igqw164Bx7p9pp1xqRRys5DNcJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/f04658-fad7-423c-bb42-82fa3d260869/1/avLYAmYO9wvbuIB-t2UHkT4WNBk.roa
Signing time: Thu 02 Jan 2025 05:49:15 +0000
ROA not before: Thu 02 Jan 2025 05:49:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209427
IP address blocks: 45.66.90.0/24 maxlen: 24
45.66.91.0/24 maxlen: 24
2a09:6644::/48 maxlen: 48
2a09:6644:1::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:99:bc:7d:29:ef:d4:15:77:2f:93:ab:f9:8e:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=220ab0d7ae01c7ba7da69d71a91472b390cd7091
Validity
Not Before: Jan 2 05:49:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6af2d802660ef70bdbb8807eb76507913e163419
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:de:21:ea:6a:ff:8f:35:a1:0e:20:87:69:de:
b0:41:50:42:81:51:df:e0:39:12:b3:cd:81:56:35:
6a:68:d1:db:7a:96:23:4a:ac:5f:ae:03:a1:3c:78:
48:a6:80:51:35:b6:9d:0f:5c:88:84:9b:3e:53:ae:
3d:85:c8:71:7d:3c:f7:ca:cf:2f:3e:36:b7:83:5b:
a3:55:07:9e:01:3c:c2:78:5c:f2:71:02:3e:8e:86:
c5:02:34:58:6f:80:35:f5:c8:3d:10:19:bb:e0:33:
41:c1:93:2b:67:2e:4e:d8:7f:c9:f6:dc:ce:77:77:
53:47:fa:35:4f:3a:25:91:aa:c9:0f:6d:35:c9:bc:
60:8e:b2:be:ca:7e:fc:c1:28:5e:d8:96:74:82:da:
52:d0:b0:d6:cb:75:b0:9c:c8:69:a3:2a:64:88:7b:
db:7c:cb:bb:9e:17:d5:86:ed:85:34:79:5f:e0:52:
04:4a:84:94:8d:12:f9:4d:7e:85:65:ea:f5:b1:46:
14:77:c7:33:43:55:00:ac:45:27:fc:c9:5a:63:92:
5b:18:f5:f4:e6:54:c8:dd:7c:0c:be:45:91:d9:be:
e9:d9:e2:a4:45:af:35:26:5f:34:80:ff:c5:1b:cc:
67:3d:5d:82:d7:b6:f1:22:65:39:54:ba:42:b8:a3:
bf:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:F2:D8:02:66:0E:F7:0B:DB:B8:80:7E:B7:65:07:91:3E:16:34:19
X509v3 Authority Key Identifier:
keyid:22:0A:B0:D7:AE:01:C7:BA:7D:A6:9D:71:A9:14:72:B3:90:CD:70:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Igqw164Bx7p9pp1xqRRys5DNcJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/f04658-fad7-423c-bb42-82fa3d260869/1/avLYAmYO9wvbuIB-t2UHkT4WNBk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/f04658-fad7-423c-bb42-82fa3d260869/1/Igqw164Bx7p9pp1xqRRys5DNcJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.66.90.0/23
IPv6:
2a09:6644::/47
Signature Algorithm: sha256WithRSAEncryption
95:24:95:a4:9c:d9:64:e9:81:57:be:6f:ca:98:01:f1:f6:6d:
be:73:5b:5b:3e:b7:e5:85:0a:6b:6c:27:34:20:bb:14:53:2d:
77:af:b9:94:2f:30:08:46:56:0d:10:a3:1e:14:f7:ea:ad:f8:
71:95:8a:61:81:1d:9f:00:f0:b3:54:f6:a0:04:70:45:6e:82:
b1:a3:27:bf:64:9e:b3:25:34:0b:06:2c:ef:6c:83:83:ca:aa:
37:3a:10:46:c3:28:2c:af:38:87:f2:3c:08:79:91:1a:fa:f7:
a3:31:ed:42:94:43:fd:58:56:aa:c2:27:60:18:f1:04:cb:5d:
2a:08:45:ab:76:d8:34:77:6e:0b:8b:bc:cd:b0:50:6a:9b:57:
30:81:0a:5d:da:ef:5b:76:e2:8d:e2:ac:a2:f2:a8:43:f8:ac:
7f:53:1c:f2:7f:17:3a:c5:84:4f:ef:b6:29:fc:a4:b0:55:89:
54:cd:ae:f9:a4:d3:78:b7:ff:13:ea:77:c5:45:ac:04:a2:d9:
f4:cb:2d:00:6d:2b:b9:e7:58:af:fe:58:bd:98:2b:7e:10:96:
f1:8b:50:00:92:65:60:6f:cf:27:ae:89:33:27:2c:70:27:52:
2a:5b:a1:90:06:53:cf:bd:36:f0:5c:30:62:52:f8:b2:2d:c1:
a3:1f:cb:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 03:14:12 2025 by rpki-client