Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/4e1b5b-0b7e-4004-bf9d-114039d5a9e1/1/Cix_eBgiG7Fqy3HRMtuFfKqBxPw.roa
File: Cix_eBgiG7Fqy3HRMtuFfKqBxPw.roa (raw, json)
Hash identifier: LyxliVU+Ui2drGVFtDTYOnKQe9lGhdf8S4FTOXnC3JU=
Subject key identifier: 0A:2C:7F:78:18:22:1B:B1:6A:CB:71:D1:32:DB:85:7C:AA:81:C4:FC
Certificate issuer: /CN=0dce7e26ac1de4de6dff75aba004a1cfca787664
Certificate serial: 019420D5E0E17FB7A00A1D06416B54AAA5EF
Authority key identifier: 0D:CE:7E:26:AC:1D:E4:DE:6D:FF:75:AB:A0:04:A1:CF:CA:78:76:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dc5-Jqwd5N5t_3WroAShz8p4dmQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/4e1b5b-0b7e-4004-bf9d-114039d5a9e1/1/Cix_eBgiG7Fqy3HRMtuFfKqBxPw.roa
Signing time: Wed 01 Jan 2025 07:47:55 +0000
ROA not before: Wed 01 Jan 2025 07:47:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208028
IP address blocks: 45.80.140.0/22 maxlen: 22
45.80.140.0/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d5:e0:e1:7f:b7:a0:0a:1d:06:41:6b:54:aa:a5:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0dce7e26ac1de4de6dff75aba004a1cfca787664
Validity
Not Before: Jan 1 07:47:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0a2c7f7818221bb16acb71d132db857caa81c4fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:27:b8:29:14:7b:77:aa:f7:f6:2d:3c:d1:32:
d1:b5:90:1c:2b:d4:3c:bf:41:00:32:63:54:23:72:
12:bb:b0:5e:b8:25:93:58:c1:a3:25:76:52:95:4e:
bc:6c:a1:44:d7:4d:15:90:46:fa:9b:4e:93:17:f1:
f1:fc:37:e6:e3:de:8c:d5:9a:a3:8c:4d:94:4b:af:
e2:25:43:5f:d2:43:98:7a:84:44:e6:6b:f0:3d:76:
5a:75:46:99:c5:1a:8a:5b:32:82:63:c5:bd:1b:e1:
99:a0:ca:9d:f8:d2:40:d4:a4:98:2d:2e:7c:0a:9c:
56:29:46:db:35:d0:a8:1d:5f:20:67:7a:c2:a9:bb:
0e:81:1b:32:2a:d3:d2:27:1a:e5:69:85:7c:6c:9f:
17:7b:44:12:5c:b4:34:78:a2:27:dd:80:cf:4b:c3:
10:ac:3b:4b:8f:85:35:a7:28:ee:99:e0:92:92:1d:
d1:96:86:4e:12:b7:80:11:8d:49:c3:aa:95:ba:4e:
5e:fb:f1:72:71:26:7c:61:58:b7:82:29:4a:61:6d:
10:5b:e9:6c:50:f1:ea:83:1f:ea:0d:eb:c3:53:b8:
f9:a1:37:21:52:7c:2f:ac:c2:89:f1:80:85:0d:f1:
c8:1a:fa:69:cb:92:72:2d:e4:95:21:64:d9:33:74:
42:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:2C:7F:78:18:22:1B:B1:6A:CB:71:D1:32:DB:85:7C:AA:81:C4:FC
X509v3 Authority Key Identifier:
keyid:0D:CE:7E:26:AC:1D:E4:DE:6D:FF:75:AB:A0:04:A1:CF:CA:78:76:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dc5-Jqwd5N5t_3WroAShz8p4dmQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/4e1b5b-0b7e-4004-bf9d-114039d5a9e1/1/Cix_eBgiG7Fqy3HRMtuFfKqBxPw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/4e1b5b-0b7e-4004-bf9d-114039d5a9e1/1/Dc5-Jqwd5N5t_3WroAShz8p4dmQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.80.140.0/22
Signature Algorithm: sha256WithRSAEncryption
a8:10:fe:eb:08:94:06:eb:54:45:dd:99:fe:63:f8:d0:16:25:
f9:02:30:46:36:8a:c3:d5:8c:a0:82:ad:5d:aa:ec:ae:10:1b:
fb:81:98:34:61:de:1a:c1:54:11:50:9e:f2:bd:d6:f6:46:45:
70:a8:0a:4b:00:03:02:3b:d9:bb:82:c6:3a:51:9e:68:03:37:
e5:6e:19:8e:ee:d8:88:c0:80:42:b4:83:4e:04:9f:cb:a9:e0:
2b:91:70:03:bd:6a:95:04:06:23:40:71:78:ed:ce:08:7e:28:
58:46:51:35:ec:c1:a2:39:18:a8:d3:5c:2c:99:1f:34:0e:87:
38:65:60:f5:60:b6:bf:b7:89:65:f2:ba:fb:0d:f2:b9:c3:f8:
4a:7b:93:e8:b0:49:e0:4a:29:4a:ad:11:83:d7:3b:45:c8:71:
7a:72:88:9b:99:cc:0f:e3:89:93:6b:c5:eb:f3:98:c6:61:41:
25:06:01:67:0d:14:c8:11:85:44:39:47:26:eb:05:fc:12:19:
6e:e5:6c:4a:fa:21:ac:05:09:62:63:66:f7:86:38:c7:66:41:
ed:4b:ed:a2:61:9b:37:ac:32:be:f9:e0:37:fd:3e:3e:04:d9:
dd:92:f7:08:d1:1a:c8:df:dd:03:9f:5c:03:87:33:47:c5:1d:
6b:88:e7:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:36:46 2025 by rpki-client