Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/9ff645-e0f1-4b18-980f-eda59bc9ca2c/1/vBqjjykLxbb5ArOJAcReEVk9Iy4.roa
File: vBqjjykLxbb5ArOJAcReEVk9Iy4.roa (raw, json)
Hash identifier: UaGJSpiGauxeRCFX1kCM9kejHM+2hB7T3uCkYvGKSkw=
Subject key identifier: BC:1A:A3:8F:29:0B:C5:B6:F9:02:B3:89:01:C4:5E:11:59:3D:23:2E
Certificate issuer: /CN=b62fccda29be666deef8ec62d6bc1e6cd067c35f
Certificate serial: 019426D9ED3F321E30E761C942CC89761656
Authority key identifier: B6:2F:CC:DA:29:BE:66:6D:EE:F8:EC:62:D6:BC:1E:6C:D0:67:C3:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ti_M2im-Zm3u-Oxi1rwebNBnw18.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/9ff645-e0f1-4b18-980f-eda59bc9ca2c/1/vBqjjykLxbb5ArOJAcReEVk9Iy4.roa
Signing time: Thu 02 Jan 2025 11:50:03 +0000
ROA not before: Thu 02 Jan 2025 11:50:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208343
IP address blocks: 45.144.32.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:ed:3f:32:1e:30:e7:61:c9:42:cc:89:76:16:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b62fccda29be666deef8ec62d6bc1e6cd067c35f
Validity
Not Before: Jan 2 11:50:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bc1aa38f290bc5b6f902b38901c45e11593d232e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:4d:73:ed:b9:55:3e:6b:3a:ca:a2:23:83:65:
3c:0e:b7:09:69:7d:16:0a:81:fe:5d:85:b9:f0:25:
ba:c0:53:93:da:8c:51:80:35:d9:b7:e5:c8:13:00:
77:06:3d:bf:be:ce:ed:f5:b4:e7:74:85:c2:32:bd:
dd:f4:21:85:3f:92:e3:e3:50:30:88:5e:66:dd:a8:
4d:2f:97:9d:e0:da:69:f3:8a:8f:02:59:3d:61:51:
86:65:04:bf:16:30:43:44:d1:b4:e6:58:a3:f4:c7:
e0:3c:25:97:2e:24:7c:47:97:32:79:af:1c:34:59:
f5:a9:85:35:5d:dc:f0:94:b2:74:b8:44:8d:a2:7c:
b5:1f:18:57:d2:aa:e9:39:02:0b:3b:02:c8:82:58:
e7:1d:4d:82:80:0b:80:9d:4d:b3:1d:0f:25:8f:aa:
87:00:68:97:45:e0:91:f7:d0:15:51:bd:a6:7c:ee:
40:56:38:ad:1a:9f:bb:6b:ac:fb:3f:1b:38:89:5f:
ad:cc:c5:40:f8:27:ec:e0:54:3d:e1:92:34:04:be:
1a:c1:c4:77:b8:c8:d3:3e:fd:cc:6c:5f:02:0d:5f:
da:61:ed:75:68:e2:af:60:ea:56:48:a4:8f:b8:fb:
dd:5b:5f:9e:1f:82:aa:80:aa:db:9c:97:d0:91:f9:
07:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:1A:A3:8F:29:0B:C5:B6:F9:02:B3:89:01:C4:5E:11:59:3D:23:2E
X509v3 Authority Key Identifier:
keyid:B6:2F:CC:DA:29:BE:66:6D:EE:F8:EC:62:D6:BC:1E:6C:D0:67:C3:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ti_M2im-Zm3u-Oxi1rwebNBnw18.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/9ff645-e0f1-4b18-980f-eda59bc9ca2c/1/vBqjjykLxbb5ArOJAcReEVk9Iy4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/9ff645-e0f1-4b18-980f-eda59bc9ca2c/1/ti_M2im-Zm3u-Oxi1rwebNBnw18.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.144.32.0/22
Signature Algorithm: sha256WithRSAEncryption
70:f4:5d:f3:28:53:7b:d9:59:96:ed:5a:b4:94:f1:26:59:e0:
bd:a9:2b:75:d5:c0:af:80:57:a8:aa:c0:57:22:99:f2:93:58:
79:36:57:23:20:22:fc:47:bc:32:d9:77:f0:26:33:47:db:2b:
25:7e:1d:64:6c:40:e3:42:0f:c0:3e:be:3c:f1:29:d5:ee:bf:
8e:06:d3:33:1c:fb:f7:28:bd:6c:1b:5d:52:68:09:9a:7e:5b:
38:68:e6:8c:a7:65:b2:af:af:e8:db:f9:c2:ba:ca:16:44:7d:
79:3f:3b:b6:7e:b4:a5:6e:dc:b0:f7:3c:e4:98:4c:8c:de:4a:
a1:17:99:ef:83:49:dc:2a:19:04:6c:25:41:e0:6a:a5:c8:4e:
39:9f:5c:17:e1:dc:c7:c8:fc:54:25:28:b8:89:86:40:b0:92:
c6:1d:70:82:95:1a:de:ff:37:70:82:11:d4:b1:d6:33:ad:a0:
33:6e:32:2f:7d:53:73:7b:60:66:06:26:3c:23:5f:3d:48:15:
26:06:20:a9:c2:67:91:fc:37:5c:8a:9d:f3:d9:41:d7:ba:02:
d5:a4:88:a2:a3:85:c5:a2:76:80:ee:ad:97:1f:c6:9e:d8:ad:
ed:c5:ee:98:73:e5:47:12:00:ac:02:9d:34:4a:e3:6b:ea:21:
15:7f:5c:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:13:58 2025 by rpki-client