Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/784321-99dd-4754-b208-ddc2665646cc/1/cId8V7j1DXooq_T1g9EFQ0FCvzw.roa
File: cId8V7j1DXooq_T1g9EFQ0FCvzw.roa (raw, json)
Hash identifier: QJXoETg4tOT8lLS3JnVPNBwPS3l57Eztn4NIz3Sxb1s=
Subject key identifier: 70:87:7C:57:B8:F5:0D:7A:28:AB:F4:F5:83:D1:05:43:41:42:BF:3C
Certificate issuer: /CN=5eee0d7e73084a42e4c7f7118f2383fcff369ba4
Certificate serial: 019422FB47459A55FC4328D595997ED6ACCC
Authority key identifier: 5E:EE:0D:7E:73:08:4A:42:E4:C7:F7:11:8F:23:83:FC:FF:36:9B:A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xu4NfnMISkLkx_cRjyOD_P82m6Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/784321-99dd-4754-b208-ddc2665646cc/1/cId8V7j1DXooq_T1g9EFQ0FCvzw.roa
Signing time: Wed 01 Jan 2025 17:48:00 +0000
ROA not before: Wed 01 Jan 2025 17:48:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215186
IP address blocks: 45.89.29.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:47:45:9a:55:fc:43:28:d5:95:99:7e:d6:ac:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5eee0d7e73084a42e4c7f7118f2383fcff369ba4
Validity
Not Before: Jan 1 17:48:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=70877c57b8f50d7a28abf4f583d105434142bf3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:d9:5c:0a:8d:cf:be:ff:0a:b0:53:84:3d:f4:
76:50:b9:75:c0:23:50:db:fb:23:3a:3e:a3:e6:6f:
63:3b:14:02:62:d4:11:95:fa:36:09:40:15:c8:82:
09:ca:55:fd:68:35:14:59:2c:d7:f6:5c:06:2b:f0:
47:ac:91:f9:d3:2c:81:bf:bc:57:5c:72:3b:f6:40:
28:7a:99:95:26:de:fb:b2:03:8d:1a:71:4f:54:3c:
29:28:b3:c7:5a:4d:af:47:80:7f:fb:9e:48:e1:9e:
f0:b2:2e:9a:1e:f9:43:3b:70:6c:e7:a7:88:42:56:
1d:a4:4e:d7:f9:d4:6b:2a:ed:f7:02:9b:01:2a:c1:
d9:d9:ff:9e:07:41:ab:45:32:1c:7a:05:2e:0e:ef:
f2:c8:62:cb:6f:0b:53:73:e4:f3:5a:b6:ab:4d:c3:
65:c4:0b:c3:b7:fe:2f:9e:b7:73:9a:f5:72:ed:5d:
63:53:20:41:f9:bd:e6:9e:b5:c1:d5:b3:8a:df:30:
ef:3b:39:6a:14:ee:f6:9f:5d:b0:9c:23:f3:17:b5:
41:04:c2:8c:73:15:bc:01:e3:0d:ee:98:73:2d:f8:
e5:3b:02:cf:cf:40:06:89:3b:0b:0a:77:66:d6:02:
d6:8a:ad:d3:4c:12:fa:4e:b1:4e:df:54:3d:58:21:
65:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:87:7C:57:B8:F5:0D:7A:28:AB:F4:F5:83:D1:05:43:41:42:BF:3C
X509v3 Authority Key Identifier:
keyid:5E:EE:0D:7E:73:08:4A:42:E4:C7:F7:11:8F:23:83:FC:FF:36:9B:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xu4NfnMISkLkx_cRjyOD_P82m6Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/784321-99dd-4754-b208-ddc2665646cc/1/cId8V7j1DXooq_T1g9EFQ0FCvzw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/784321-99dd-4754-b208-ddc2665646cc/1/Xu4NfnMISkLkx_cRjyOD_P82m6Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.89.29.0/24
Signature Algorithm: sha256WithRSAEncryption
54:df:b7:b3:b8:ad:ce:b2:0b:85:ad:17:56:8e:e7:74:1c:b5:
0b:75:8c:78:f5:2c:ec:9b:76:8e:f1:2a:68:e4:33:dd:6c:ff:
ad:ab:07:8b:47:e0:4c:48:f9:82:b0:bc:86:b7:87:e6:97:79:
bc:28:9b:9c:d7:45:6c:3b:27:2d:c6:d7:71:1f:12:db:a1:66:
38:f8:a2:66:c0:22:a9:ae:b7:c8:8f:a3:50:5f:22:5c:56:34:
56:cd:36:27:dc:4c:8e:51:f1:fd:3c:d4:0a:a0:9e:80:3c:dc:
30:0c:60:54:dd:67:09:47:22:7f:c5:b4:9a:0e:ba:69:0c:b1:
b2:b8:ad:33:b1:64:82:16:9a:07:48:01:64:ec:bd:bf:a9:46:
a4:ba:51:40:11:d4:a6:0b:89:4e:8f:e0:c9:dd:b0:11:63:f8:
06:b9:65:72:3c:b0:b5:b0:dc:5c:5e:1d:20:d6:6e:0c:21:68:
ac:6b:f1:4d:d1:e4:f0:80:3e:0e:23:38:25:b4:74:8d:07:a3:
19:d0:e7:40:d3:b0:f8:6c:21:4d:5f:e2:f8:4f:30:17:ea:e0:
56:82:b7:06:17:b5:98:5a:a0:bb:5a:f8:08:4a:81:86:54:a2:
8a:30:fb:ba:3e:0a:be:5c:b7:41:08:0c:6b:62:94:7a:d2:9d:
fd:bb:3e:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:16:34 2025 by rpki-client