Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/3T8Kxm_wgg3QSFwTqowk6C_LszA.roa
File: 3T8Kxm_wgg3QSFwTqowk6C_LszA.roa (raw, json)
Hash identifier: z0vHyl4VVr6fvzwiP+7VbJjACqzCv9xZyrKBSJeLoY4=
Subject key identifier: DD:3F:0A:C6:6F:F0:82:0D:D0:48:5C:13:AA:8C:24:E8:2F:CB:B3:30
Certificate issuer: /CN=d93da2019909d9fc37829fd9ec29d948ecff7c92
Certificate serial: 0194282393131795EED5D666D3D7BEF20B59
Authority key identifier: D9:3D:A2:01:99:09:D9:FC:37:82:9F:D9:EC:29:D9:48:EC:FF:7C:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2T2iAZkJ2fw3gp_Z7CnZSOz_fJI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/3T8Kxm_wgg3QSFwTqowk6C_LszA.roa
Signing time: Thu 02 Jan 2025 17:50:07 +0000
ROA not before: Thu 02 Jan 2025 17:50:07 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60781
IP address blocks: 45.11.190.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:23:93:13:17:95:ee:d5:d6:66:d3:d7:be:f2:0b:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d93da2019909d9fc37829fd9ec29d948ecff7c92
Validity
Not Before: Jan 2 17:50:07 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=dd3f0ac66ff0820dd0485c13aa8c24e82fcbb330
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:42:c3:b9:e8:b6:02:de:64:cb:40:c1:12:54:
56:b5:29:57:a4:24:af:54:aa:c9:a0:69:39:a0:fa:
d1:5b:c4:07:f9:27:f9:ca:53:64:e8:48:3f:0c:6c:
ef:da:9d:8a:08:f0:4c:92:3d:ca:69:7f:ec:3e:80:
1f:3d:39:97:38:bb:95:fe:73:01:66:5f:1a:33:99:
ca:aa:e3:e8:dd:db:4a:7b:45:33:62:7c:1f:3a:a7:
e0:fb:b2:e2:c6:e3:06:91:ed:fb:57:dc:0b:9b:c8:
59:d9:a8:3e:06:71:ed:4e:1f:75:4d:69:18:43:f6:
87:d9:49:44:10:bd:6e:b0:45:90:08:7d:dd:7b:11:
94:a9:a3:56:9f:43:52:f2:58:73:ff:30:36:34:c0:
35:48:cd:e3:8d:4f:d6:bc:54:26:40:15:0e:26:36:
4a:85:8a:75:79:59:94:95:b7:34:63:6b:63:e9:40:
2c:43:a6:11:8f:3a:0e:83:5d:44:4e:31:0f:6a:5b:
d5:0e:a5:43:5f:4e:b6:da:45:77:c2:e9:23:45:db:
f3:37:5b:10:d7:17:6d:48:29:ff:ac:59:2f:97:c1:
fc:cf:03:c3:62:75:b8:fc:ae:aa:8f:a7:16:c8:0f:
cc:35:0c:ae:25:ed:b2:44:a3:c3:c5:ed:3b:b0:a5:
00:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:3F:0A:C6:6F:F0:82:0D:D0:48:5C:13:AA:8C:24:E8:2F:CB:B3:30
X509v3 Authority Key Identifier:
keyid:D9:3D:A2:01:99:09:D9:FC:37:82:9F:D9:EC:29:D9:48:EC:FF:7C:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2T2iAZkJ2fw3gp_Z7CnZSOz_fJI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/3T8Kxm_wgg3QSFwTqowk6C_LszA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/2T2iAZkJ2fw3gp_Z7CnZSOz_fJI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.11.190.0/24
Signature Algorithm: sha256WithRSAEncryption
24:1d:d8:90:1a:99:f4:b0:36:43:9c:ac:24:d6:78:52:d4:30:
09:3c:70:57:c4:53:95:46:ef:67:47:29:d6:fb:9d:e8:d7:3e:
2b:08:c5:b1:b1:fb:ae:3e:7c:88:13:85:e9:14:6d:ad:5a:af:
f3:f2:fb:53:66:0a:19:4c:fc:52:f6:0d:3f:3b:1f:b2:19:dd:
d5:fd:1e:30:2a:5e:e7:53:69:3c:bb:65:61:07:07:e6:21:d9:
8b:d4:6c:fa:df:3a:52:6f:99:e9:b5:53:2d:2b:6f:97:95:df:
41:ec:d0:de:86:db:c2:25:6a:f7:e3:5d:ea:56:13:2f:ad:f0:
fa:3b:98:64:82:79:d9:90:e4:df:92:35:68:82:7d:e9:ff:43:
2e:8f:36:62:94:4d:36:e7:a7:e6:4c:7b:05:8f:78:d0:10:6b:
1b:a0:42:71:eb:fc:eb:a5:8d:04:bf:fe:38:3b:ae:d5:68:af:
d6:fa:04:e3:a2:2c:31:4d:6a:bb:b4:2c:b9:95:62:6c:5c:c5:
dd:08:b8:8f:f9:56:91:75:9d:db:f4:e1:d2:27:0b:06:13:9a:
9d:81:60:76:60:55:d2:6e:6b:4e:91:29:ec:35:ca:ee:d9:f3:
39:0d:52:ae:bc:90:4f:89:ac:bf:00:fe:c3:42:d3:56:b2:1f:
05:71:a5:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 04:13:00 2025 by rpki-client