Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/vAx_VrKuXs6fW_dI0Wfg2zqQKyY.roa
File: vAx_VrKuXs6fW_dI0Wfg2zqQKyY.roa (raw, json)
Hash identifier: 5ByrVJIYv2RUjs1ehBX3+MAJFx5uaR9Ai9D+J0IoBzs=
Subject key identifier: BC:0C:7F:56:B2:AE:5E:CE:9F:5B:F7:48:D1:67:E0:DB:3A:90:2B:26
Certificate issuer: /CN=18101772248996b87d90840c2d27d62549458173
Certificate serial: 0194221F6AB68BEB83DF9DDA62929A57EA52
Authority key identifier: 18:10:17:72:24:89:96:B8:7D:90:84:0C:2D:27:D6:25:49:45:81:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GBAXciSJlrh9kIQMLSfWJUlFgXM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/vAx_VrKuXs6fW_dI0Wfg2zqQKyY.roa
Signing time: Wed 01 Jan 2025 13:47:51 +0000
ROA not before: Wed 01 Jan 2025 13:47:51 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8100
IP address blocks: 45.146.234.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:6a:b6:8b:eb:83:df:9d:da:62:92:9a:57:ea:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18101772248996b87d90840c2d27d62549458173
Validity
Not Before: Jan 1 13:47:51 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bc0c7f56b2ae5ece9f5bf748d167e0db3a902b26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:bf:8e:87:38:88:b5:c2:1a:22:fb:63:a9:84:
de:46:fb:79:39:a5:51:bf:2f:a4:97:37:cc:42:dd:
b3:32:30:11:20:a3:a9:b3:9d:94:bc:42:dc:65:8e:
53:50:82:63:de:ce:53:45:3f:44:3f:af:e2:e9:03:
c4:42:d6:1a:2f:9f:7b:bc:1b:b6:c3:38:68:ad:5e:
df:cb:70:52:82:3c:cb:87:fe:14:e9:fa:75:aa:2f:
ea:80:04:20:c2:42:ab:65:24:2c:7e:f7:89:43:f0:
f9:d9:ae:66:30:f7:83:c1:e9:c3:05:40:34:90:8e:
32:24:32:d6:81:ba:1c:98:81:65:38:e6:07:16:c7:
cc:20:ea:a1:a5:90:ad:dd:1c:f2:68:44:fb:84:5f:
43:54:6e:6b:08:94:66:8f:ac:38:74:2f:8a:c7:b9:
39:97:fd:a7:b7:dc:fb:c0:c3:f4:e2:54:37:12:06:
d1:1e:66:68:5f:2d:80:a4:5b:3e:2e:4d:33:b8:fc:
30:2a:52:4f:5c:2c:3a:86:81:27:ed:f2:e5:08:35:
f2:35:dc:b2:99:94:b8:58:42:9f:a2:1d:bd:5e:8a:
ae:b5:33:46:e4:24:32:36:7c:89:4a:5e:6c:f0:38:
94:8e:61:2a:51:99:08:6b:c8:f2:d7:1d:6b:21:60:
02:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:0C:7F:56:B2:AE:5E:CE:9F:5B:F7:48:D1:67:E0:DB:3A:90:2B:26
X509v3 Authority Key Identifier:
keyid:18:10:17:72:24:89:96:B8:7D:90:84:0C:2D:27:D6:25:49:45:81:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GBAXciSJlrh9kIQMLSfWJUlFgXM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/vAx_VrKuXs6fW_dI0Wfg2zqQKyY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/GBAXciSJlrh9kIQMLSfWJUlFgXM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.146.234.0/23
Signature Algorithm: sha256WithRSAEncryption
83:03:6e:ce:d5:31:81:7b:22:df:9e:d9:1a:55:d1:89:6b:e0:
25:3f:f8:3b:9e:4f:bc:fe:6b:86:97:9f:b6:98:ad:c9:f1:e3:
fb:43:6c:cb:b0:37:e9:4d:c1:17:5a:4a:57:e8:c8:51:e5:ef:
f0:43:ba:ee:3a:58:ca:a3:3f:74:4e:14:20:5c:35:f4:ab:0a:
82:fc:e3:5b:20:45:40:89:bc:66:6a:ab:68:45:da:30:2d:c1:
73:d5:02:4d:7f:77:74:3f:cd:71:af:f0:0f:8a:d3:2a:c9:d0:
5e:a5:59:f9:2e:2c:48:be:76:58:2a:2b:9b:71:5b:7b:d3:88:
ef:21:ed:59:ef:fd:78:13:4a:2f:e6:c6:40:38:a2:9e:df:95:
f5:26:f9:98:7c:e3:02:2c:d4:e2:b4:f7:14:6c:56:34:b6:f9:
5f:0a:8c:f8:8e:a7:8c:d7:5e:fe:6d:46:50:df:fc:b1:f2:91:
95:8b:82:a1:2a:c5:b5:b8:d6:70:ee:ca:41:26:94:e1:36:ff:
94:76:ed:36:88:18:33:71:06:7e:9c:62:52:e3:78:f4:41:be:
8c:38:b1:99:8b:6c:90:8f:09:71:4b:48:3e:d9:7c:15:46:ce:
94:04:df:1b:ef:f7:cd:95:91:1a:70:03:62:6a:fb:7e:ec:e6:
a4:75:ee:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 14:19:41 2025 by rpki-client