Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/73beeb-6a05-4cca-86be-acfc3d2c2522/1/CaGm-a6CxApZqirxxCCZ9rx1aiM.roa
File: CaGm-a6CxApZqirxxCCZ9rx1aiM.roa (raw, json)
Hash identifier: in3Qvj8lVIdQByC2i0yNl5XLhAZsdDWoJ0Q3xc4mK5w=
Subject key identifier: 09:A1:A6:F9:AE:82:C4:0A:59:AA:2A:F1:C4:20:99:F6:BC:75:6A:23
Certificate issuer: /CN=b6c167dfa9882b2aa8f84595f58a97c305ca43c5
Certificate serial: 0194258FB852A34FEB9FE5EC6DFC481520FE
Authority key identifier: B6:C1:67:DF:A9:88:2B:2A:A8:F8:45:95:F5:8A:97:C3:05:CA:43:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tsFn36mIKyqo-EWV9YqXwwXKQ8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/73beeb-6a05-4cca-86be-acfc3d2c2522/1/CaGm-a6CxApZqirxxCCZ9rx1aiM.roa
Signing time: Thu 02 Jan 2025 05:49:23 +0000
ROA not before: Thu 02 Jan 2025 05:49:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214993
IP address blocks: 45.135.242.0/24 maxlen: 24
2a01:4ac0:6::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:b8:52:a3:4f:eb:9f:e5:ec:6d:fc:48:15:20:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b6c167dfa9882b2aa8f84595f58a97c305ca43c5
Validity
Not Before: Jan 2 05:49:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=09a1a6f9ae82c40a59aa2af1c42099f6bc756a23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:ea:4e:a9:6c:32:15:47:e0:64:dc:23:9f:48:
7b:fd:70:bd:04:a7:08:8f:a9:1a:7e:06:a3:77:29:
ad:39:6e:ca:61:ea:0f:99:a2:7e:9f:ef:73:da:31:
7f:17:cc:00:46:f2:69:31:fa:b4:6c:60:cc:63:89:
7f:a6:3f:68:0a:97:26:38:b4:c1:25:8a:23:8b:53:
a3:cb:cf:fa:d3:fa:a0:3a:c7:38:7c:6b:a9:15:04:
3b:4c:98:59:cf:46:1c:7c:a7:3d:cd:02:99:82:bc:
74:38:99:d4:67:57:cb:95:e3:4a:00:d2:84:1a:ef:
82:d7:57:c1:86:5f:22:be:d5:7b:74:6e:17:47:7b:
ad:7f:00:cb:ae:32:1a:4e:fa:0c:30:8e:87:8f:7f:
02:36:aa:ad:a6:83:f3:a9:60:8e:de:b1:68:41:e0:
d5:00:ea:47:d5:22:ed:fc:8c:b4:5b:55:3c:2b:9f:
ff:99:b9:25:9c:b2:39:a2:6f:34:f9:58:1b:3b:2b:
b0:f8:17:ec:ea:12:0b:e7:bb:6b:c9:3d:19:cb:0d:
d5:2a:f7:68:d9:46:9a:43:28:59:73:4d:26:66:1d:
87:1b:5c:20:d2:41:15:0c:2e:92:33:d0:83:78:ad:
fd:6c:8d:32:e6:f3:6d:34:2e:b9:b7:b2:59:0b:fe:
97:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:A1:A6:F9:AE:82:C4:0A:59:AA:2A:F1:C4:20:99:F6:BC:75:6A:23
X509v3 Authority Key Identifier:
keyid:B6:C1:67:DF:A9:88:2B:2A:A8:F8:45:95:F5:8A:97:C3:05:CA:43:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tsFn36mIKyqo-EWV9YqXwwXKQ8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/73beeb-6a05-4cca-86be-acfc3d2c2522/1/CaGm-a6CxApZqirxxCCZ9rx1aiM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/73beeb-6a05-4cca-86be-acfc3d2c2522/1/tsFn36mIKyqo-EWV9YqXwwXKQ8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.135.242.0/24
IPv6:
2a01:4ac0:6::/48
Signature Algorithm: sha256WithRSAEncryption
93:ef:41:f6:0e:55:08:4a:95:95:ea:8d:99:d4:c5:6a:40:fc:
6a:7e:4c:9e:1a:7f:f8:bd:29:00:25:f0:8d:35:0a:e5:0d:3f:
bb:4e:74:9f:20:15:6f:c3:59:00:0c:66:02:01:99:3d:c2:20:
fd:0c:b3:78:26:61:ef:0b:e1:ce:36:41:66:71:1d:f2:a6:58:
60:61:d0:f6:0d:69:ac:5d:80:fb:7f:18:05:41:62:ed:87:fb:
7a:3e:9e:06:17:4d:87:26:69:4e:17:e5:27:6f:aa:ad:4c:7c:
92:f6:f5:1c:58:30:cc:a9:9c:e3:65:d3:4d:2c:b4:e7:b3:01:
73:00:2a:c6:7d:32:46:69:4a:b8:da:da:6f:04:94:d9:db:a2:
2e:99:8d:39:56:48:4b:f0:20:2e:27:44:20:be:f2:f7:ee:f1:
cb:f8:4a:df:cd:0d:34:f2:a8:2e:9d:84:5d:4b:85:46:ee:fc:
93:f7:8d:0a:30:44:9d:1d:25:3d:04:be:50:0a:e0:37:f6:a0:
75:af:fc:24:6c:cc:c4:be:98:66:31:43:a9:bd:06:49:c0:14:
22:c7:99:64:87:d1:a7:1a:b9:34:e5:27:2f:41:4d:24:0f:88:
ff:4c:b3:6d:00:0b:3c:d0:b4:74:46:a7:77:41:94:af:4e:b2:
28:87:8b:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:36:05 2025 by rpki-client