Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/M6S7vtg6ZHZseDCqDUQ_qt2XxqY.roa
File: M6S7vtg6ZHZseDCqDUQ_qt2XxqY.roa (raw, json)
Hash identifier: uvadDTjGH/0j4s8lPWerkIkkocvOk3QvmG48sIxaV28=
Subject key identifier: 33:A4:BB:BE:D8:3A:64:76:6C:78:30:AA:0D:44:3F:AA:DD:97:C6:A6
Certificate issuer: /CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc
Certificate serial: 019424B39FE6B34AAE2CEE8A280FE030D77C
Authority key identifier: 17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/M6S7vtg6ZHZseDCqDUQ_qt2XxqY.roa
Signing time: Thu 02 Jan 2025 01:48:59 +0000
ROA not before: Thu 02 Jan 2025 01:48:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 135097
IP address blocks: 45.135.237.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:9f:e6:b3:4a:ae:2c:ee:8a:28:0f:e0:30:d7:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc
Validity
Not Before: Jan 2 01:48:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=33a4bbbed83a64766c7830aa0d443faadd97c6a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:2d:25:c8:5a:84:e6:a1:0d:8b:06:d4:a3:dc:
8a:6b:29:55:f3:b2:1b:19:72:7f:a2:a5:64:8f:ea:
d4:f0:ac:2a:48:3c:fa:7c:31:3b:46:4b:89:65:b7:
3c:ad:ff:7f:fd:b8:7c:8b:29:36:b9:3f:82:65:57:
73:d3:b8:fb:a8:d2:38:f0:7d:21:a4:b7:4c:2d:d0:
14:f6:62:c0:16:9f:fa:d3:fe:e2:d7:44:8b:f3:3c:
c3:7a:fe:dd:d3:be:9b:4f:44:f9:8f:6b:e0:7b:f5:
c1:2f:63:ea:5a:3e:a5:8b:4f:27:a0:ad:8a:0e:02:
46:1a:1f:18:d8:62:b4:29:8a:12:b7:fb:e2:51:5d:
96:f4:61:da:ca:cd:cb:5e:3d:39:af:66:f7:ef:d6:
30:b0:53:3c:67:ed:ab:32:a7:99:ff:a0:c3:14:db:
15:43:7d:62:68:fd:c7:ca:8b:8f:e3:fa:ff:77:43:
29:0a:b1:6e:e4:d6:f5:b6:5f:ec:8c:ae:c1:e5:c4:
2a:71:b9:6e:3a:35:18:4b:1f:13:76:1f:a0:17:81:
14:09:0e:d8:3a:e8:d6:8f:61:79:c1:7f:73:0f:b8:
c8:3c:7e:34:f9:82:70:1e:6d:37:21:94:ea:63:a5:
72:62:a8:36:e2:1f:96:1c:97:5f:d5:01:7d:84:09:
d2:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:A4:BB:BE:D8:3A:64:76:6C:78:30:AA:0D:44:3F:AA:DD:97:C6:A6
X509v3 Authority Key Identifier:
keyid:17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/M6S7vtg6ZHZseDCqDUQ_qt2XxqY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.135.237.0/24
Signature Algorithm: sha256WithRSAEncryption
52:bb:6f:a5:7c:72:25:70:b6:de:05:05:45:48:79:7c:7b:ea:
9a:83:eb:8e:bc:1c:72:2f:b3:aa:31:1c:7e:6d:8d:2a:61:eb:
0e:57:14:93:ad:75:ea:ee:cf:48:d2:7b:d9:6b:e4:e8:1a:8b:
0f:30:16:8a:ac:4a:00:a4:8f:84:de:e5:08:33:61:f0:4c:90:
fc:e4:39:47:1f:1e:f4:df:42:2d:5e:eb:06:52:a0:73:ea:aa:
48:f3:b2:4e:1c:c1:b0:69:59:19:90:3b:59:51:f6:d9:3f:5c:
6c:d0:08:f3:10:86:86:13:19:39:04:6a:fb:45:ae:ad:40:c7:
f2:7b:20:95:70:40:63:2f:b4:e9:88:ea:e8:23:35:53:0a:88:
f5:d9:81:50:7e:08:e3:68:51:eb:8d:1a:98:a9:a8:34:7a:aa:
ac:fb:ca:2d:86:87:fd:1a:10:f1:a2:da:90:c4:64:7b:9e:55:
2d:ed:75:46:28:2e:b6:1a:1f:20:ed:3e:2c:e8:26:8d:08:d1:
62:59:0c:90:99:3c:a0:07:af:ac:9e:ac:51:0e:fe:75:f3:73:
5a:b0:86:4e:5c:a7:06:c3:ac:b8:7f:0a:cc:9a:3b:7d:72:06:
50:46:4f:7c:3d:bd:9f:86:cb:b8:fe:d5:57:c3:7c:bb:fb:30:
68:81:f7:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 16:00:40 2025 by rpki-client