Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/40427e-74fa-4a66-837d-a523bacdc2be/1/TgX6Ahejr8dFzzFT1WSFiJRu3Do.roa
File: TgX6Ahejr8dFzzFT1WSFiJRu3Do.roa (raw, json)
Hash identifier: htkxM3uRu+UJ0kbLuQsKy6qnAb8htaldVtC4MZ15XTI=
Subject key identifier: 4E:05:FA:02:17:A3:AF:C7:45:CF:31:53:D5:64:85:88:94:6E:DC:3A
Certificate issuer: /CN=4def5b8ffbaf7d56af5d39f2f94c946d72f770f3
Certificate serial: 0194266AB01AC7FA2DE198016CD5BF970586
Authority key identifier: 4D:EF:5B:8F:FB:AF:7D:56:AF:5D:39:F2:F9:4C:94:6D:72:F7:70:F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Te9bj_uvfVavXTny-UyUbXL3cPM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/40427e-74fa-4a66-837d-a523bacdc2be/1/TgX6Ahejr8dFzzFT1WSFiJRu3Do.roa
Signing time: Thu 02 Jan 2025 09:48:33 +0000
ROA not before: Thu 02 Jan 2025 09:48:33 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208607
IP address blocks: 45.93.144.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6a:b0:1a:c7:fa:2d:e1:98:01:6c:d5:bf:97:05:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4def5b8ffbaf7d56af5d39f2f94c946d72f770f3
Validity
Not Before: Jan 2 09:48:33 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4e05fa0217a3afc745cf3153d5648588946edc3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:db:6c:09:55:c1:dd:36:97:da:46:ee:28:be:
8f:30:46:56:66:8a:f3:eb:da:59:2e:b8:d8:c7:05:
1a:30:1f:6a:68:3a:2c:9c:1e:29:12:9f:9e:50:75:
fb:96:77:74:c8:d1:52:6d:fb:2a:d3:70:84:49:11:
36:b0:94:b3:55:16:0b:04:83:b7:eb:ab:8b:f2:92:
2c:06:43:1f:0f:fc:0d:aa:a0:96:81:1c:aa:b3:5e:
9e:e0:e0:d3:0e:e2:46:f1:44:e9:8f:42:1b:71:83:
db:48:f5:c7:b8:7e:34:d4:38:a9:86:ea:48:75:2a:
c3:c5:e8:ec:b8:b7:4c:13:1e:b5:fa:de:dc:d7:39:
ef:4a:62:a0:ea:3c:eb:77:b8:00:35:b8:7c:4a:99:
51:60:da:cc:96:8b:71:7c:1e:4f:d1:0f:a6:53:a1:
c3:d7:ee:5d:42:9b:46:26:7b:fb:9c:21:2e:70:9b:
31:00:ae:c7:7e:63:88:9d:7c:31:8c:21:9e:2f:d7:
4f:c8:48:e7:04:53:da:c0:ac:fd:d1:3d:f6:5a:25:
6a:0f:5a:de:d1:96:27:8e:0f:fb:fa:eb:fc:6f:e6:
6d:e5:7e:7d:4c:00:c2:4d:64:95:50:d1:6d:79:da:
1b:d2:c7:36:b5:eb:a1:9f:99:c0:a4:d9:ef:c4:72:
26:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:05:FA:02:17:A3:AF:C7:45:CF:31:53:D5:64:85:88:94:6E:DC:3A
X509v3 Authority Key Identifier:
keyid:4D:EF:5B:8F:FB:AF:7D:56:AF:5D:39:F2:F9:4C:94:6D:72:F7:70:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Te9bj_uvfVavXTny-UyUbXL3cPM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/40427e-74fa-4a66-837d-a523bacdc2be/1/TgX6Ahejr8dFzzFT1WSFiJRu3Do.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/40427e-74fa-4a66-837d-a523bacdc2be/1/Te9bj_uvfVavXTny-UyUbXL3cPM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.93.144.0/24
Signature Algorithm: sha256WithRSAEncryption
80:f4:1e:5d:46:be:d3:f7:53:12:dc:91:e5:b9:6c:98:a4:50:
a1:17:81:bb:85:20:84:2a:fd:b7:b9:e1:41:fe:02:91:cb:fb:
c6:07:ce:dd:ad:ea:b2:ed:5e:d4:ef:44:a6:1e:f9:68:56:c8:
30:8f:4a:f2:c5:c1:b9:82:0c:4f:f0:8a:60:1d:33:34:3e:cb:
90:ff:b5:e3:2e:84:34:15:78:62:3d:13:ff:5e:40:2a:53:fe:
71:a1:8c:df:5d:1e:cc:29:dc:09:25:28:74:ec:53:8e:fb:dc:
68:05:4c:42:37:80:75:09:35:d0:f6:18:17:b8:59:9e:79:b7:
56:26:e2:04:73:28:2a:ff:9a:ce:1e:ff:1c:19:21:a4:c5:cb:
75:3d:bd:1b:e7:18:bf:3d:a1:e9:ed:c0:18:18:be:79:6f:14:
f0:ac:e0:0c:99:2a:f0:8b:6f:84:a1:74:30:7f:28:3a:a5:86:
99:38:17:19:e3:8b:80:c4:47:fc:e9:e3:bd:96:65:dc:95:c1:
23:53:ee:e2:45:cf:be:ec:81:db:fb:42:3a:d5:0b:90:79:a5:
68:42:49:7d:11:46:47:38:30:fb:b8:d3:1f:8c:3d:16:9a:9e:
3e:ff:6a:fa:01:2d:a7:fa:ae:8a:1d:96:15:80:cb:de:bf:60:
40:cd:0f:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:01:08 2025 by rpki-client