Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/784321-99dd-4754-b208-ddc2665646cc/1/CMANvwW6awxvf8wp9Sq0ITMne_E.roa
File: CMANvwW6awxvf8wp9Sq0ITMne_E.roa (raw, json)
Hash identifier: fJrqBQwlGwgIvHSvlDMtvgOp412o+5TxO155UBqZfzI=
Subject key identifier: 08:C0:0D:BF:05:BA:6B:0C:6F:7F:CC:29:F5:2A:B4:21:33:27:7B:F1
Certificate issuer: /CN=5eee0d7e73084a42e4c7f7118f2383fcff369ba4
Certificate serial: 019422FB449E2995E2E9B58433E4202523CD
Authority key identifier: 5E:EE:0D:7E:73:08:4A:42:E4:C7:F7:11:8F:23:83:FC:FF:36:9B:A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xu4NfnMISkLkx_cRjyOD_P82m6Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/784321-99dd-4754-b208-ddc2665646cc/1/CMANvwW6awxvf8wp9Sq0ITMne_E.roa
Signing time: Wed 01 Jan 2025 17:47:59 +0000
ROA not before: Wed 01 Jan 2025 17:47:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 47436
IP address blocks: 45.89.28.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:44:9e:29:95:e2:e9:b5:84:33:e4:20:25:23:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5eee0d7e73084a42e4c7f7118f2383fcff369ba4
Validity
Not Before: Jan 1 17:47:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=08c00dbf05ba6b0c6f7fcc29f52ab42133277bf1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:98:b5:71:bf:81:99:e7:c7:6d:63:84:46:de:
9c:e8:14:45:dd:17:2e:60:ec:9b:23:ff:2b:f8:81:
f1:32:6a:ae:74:37:66:a0:75:97:c8:e6:92:80:85:
53:2e:df:fe:5f:aa:57:40:67:4a:84:ed:17:c2:26:
96:e0:e9:34:3f:e5:8a:67:be:d1:fb:ac:60:6a:0d:
ea:22:18:43:83:67:12:59:59:67:9d:2e:30:e9:7e:
97:d8:f6:31:3d:b9:83:1c:9a:53:fc:e9:bb:08:60:
c0:b8:e6:3b:bc:f2:8d:83:08:f7:c5:3d:ad:d8:5f:
1e:db:ab:db:6e:1d:f1:13:b5:01:61:7c:48:ca:d5:
d1:6b:c7:07:93:18:e4:3e:7d:ea:6e:90:ee:83:2c:
cb:00:e2:c8:1b:72:df:52:e1:0d:d0:9e:f3:2d:da:
27:a4:7a:a2:2e:cb:47:9f:6d:41:79:7e:e7:4d:39:
be:f0:23:0a:5a:40:f4:19:a2:ef:0a:3a:58:a5:0e:
27:68:09:9c:4d:a4:ae:ff:b5:5b:a0:e2:7b:66:a7:
e0:c9:7c:66:cc:c2:29:45:b4:bf:b2:cb:0d:34:ae:
83:ea:4d:48:c7:d1:f8:25:cd:52:8f:cd:8e:8a:5d:
f9:4d:37:e1:08:65:74:c3:e5:02:12:46:20:5b:47:
2f:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:C0:0D:BF:05:BA:6B:0C:6F:7F:CC:29:F5:2A:B4:21:33:27:7B:F1
X509v3 Authority Key Identifier:
keyid:5E:EE:0D:7E:73:08:4A:42:E4:C7:F7:11:8F:23:83:FC:FF:36:9B:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xu4NfnMISkLkx_cRjyOD_P82m6Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/784321-99dd-4754-b208-ddc2665646cc/1/CMANvwW6awxvf8wp9Sq0ITMne_E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/784321-99dd-4754-b208-ddc2665646cc/1/Xu4NfnMISkLkx_cRjyOD_P82m6Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.89.28.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:78:a8:d9:9c:4c:77:6c:bd:10:2b:7c:d7:6a:dd:60:b5:2b:
46:8a:28:ca:5f:4d:41:eb:b0:57:88:e5:5b:12:f8:6a:fc:b4:
0f:9d:19:9a:7b:d9:8f:98:d9:5f:f0:ac:30:b3:68:cf:9b:b0:
33:16:1a:ba:9a:da:ab:86:7e:85:76:56:76:d4:a4:d2:8c:41:
e9:85:b8:79:84:61:9e:2b:72:21:79:55:a9:b7:89:4e:43:3f:
a6:d5:2f:23:a9:a9:b1:05:c0:fe:97:3e:e1:a7:19:26:7a:26:
60:27:75:4b:3c:d9:c9:eb:4d:af:41:ad:1a:f1:6a:b5:8b:f6:
a8:1a:ab:7f:5f:fa:df:31:14:89:d7:fa:a4:9e:a3:7b:2b:e4:
1e:cb:cd:77:41:38:b2:65:e2:16:39:86:52:1b:79:6c:9b:e8:
ec:fd:86:19:a2:74:ae:7b:18:0e:fc:77:39:82:4f:4e:87:1b:
af:ba:95:e4:d0:ca:2a:23:c4:f9:03:0a:e5:24:08:d5:76:98:
22:89:ac:71:c6:e2:10:cb:6f:88:a7:25:c6:46:3b:6f:7c:26:
91:09:a4:2d:5e:cb:17:ad:c0:f4:b7:a4:76:87:fe:aa:b2:c8:
8d:a8:7f:54:88:6d:ac:f1:06:b7:cd:a1:4f:37:bb:7f:13:e1:
9b:3a:14:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 18:14:39 2025 by rpki-client