Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/a6b613-66bd-4312-8f0c-36b5dda9fbe8/1/iOSgDas4E473RISs54ZCqJXEL1Y.roa
File: iOSgDas4E473RISs54ZCqJXEL1Y.roa (raw, json)
Hash identifier: cm025SWzl2vuQDv4U8M4vf0+/0CnnGay76ie0c/nESQ=
Subject key identifier: 88:E4:A0:0D:AB:38:13:8E:F7:44:84:AC:E7:86:42:A8:95:C4:2F:56
Certificate issuer: /CN=2e19966c0ea5df3a987f8365524b5128cba7fc90
Certificate serial: 0194266C1262CB32EFA6B4393BEB657BEA13
Authority key identifier: 2E:19:96:6C:0E:A5:DF:3A:98:7F:83:65:52:4B:51:28:CB:A7:FC:90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LhmWbA6l3zqYf4NlUktRKMun_JA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/a6b613-66bd-4312-8f0c-36b5dda9fbe8/1/iOSgDas4E473RISs54ZCqJXEL1Y.roa
Signing time: Thu 02 Jan 2025 09:50:04 +0000
ROA not before: Thu 02 Jan 2025 09:50:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57743
IP address blocks: 45.136.52.0/24 maxlen: 24
45.136.53.0/24 maxlen: 24
45.136.54.0/24 maxlen: 24
45.136.55.0/24 maxlen: 24
2a07:df40::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6c:12:62:cb:32:ef:a6:b4:39:3b:eb:65:7b:ea:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e19966c0ea5df3a987f8365524b5128cba7fc90
Validity
Not Before: Jan 2 09:50:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=88e4a00dab38138ef74484ace78642a895c42f56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:ae:94:96:27:d9:30:f7:1f:2e:e3:60:90:64:
67:bd:f2:8c:79:8f:f0:73:1b:01:fd:d7:87:43:89:
23:79:48:16:e7:88:4f:51:c7:a9:f9:0c:d9:aa:0e:
b1:50:fe:8c:45:ff:e4:1a:47:a8:d9:5d:ef:cd:df:
f8:56:a8:9b:19:60:61:64:98:2a:f7:dd:e8:5c:12:
3d:9e:90:ef:7c:8c:2c:62:c2:66:d7:8e:20:5e:cd:
43:56:5a:30:cf:e9:ba:8d:cf:2f:4f:06:61:d5:73:
3b:65:90:5d:5f:35:5f:74:75:1e:83:13:c5:1b:1f:
2a:a2:6e:bf:d8:37:2b:0a:17:5b:bf:be:1e:1c:53:
3d:10:d2:22:81:84:15:56:5c:4e:88:54:cb:79:8f:
7f:22:b8:cf:3b:8f:53:4b:70:42:2f:44:63:34:bd:
8a:cd:95:7b:f6:e5:da:6f:73:0f:95:e2:b7:36:ab:
6c:0d:6a:2e:58:32:96:86:6d:e3:31:8b:71:58:b7:
6a:6a:ee:75:ec:24:e3:90:ee:97:79:b7:01:20:76:
47:f0:09:1a:1d:ac:3a:cd:2c:b8:c4:88:29:1b:45:
1d:f8:44:df:54:e4:db:0d:6b:d7:c7:63:5b:a4:9b:
1c:7a:cd:bd:2d:1b:bc:9a:10:7a:e6:e3:d9:91:45:
e3:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:E4:A0:0D:AB:38:13:8E:F7:44:84:AC:E7:86:42:A8:95:C4:2F:56
X509v3 Authority Key Identifier:
keyid:2E:19:96:6C:0E:A5:DF:3A:98:7F:83:65:52:4B:51:28:CB:A7:FC:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LhmWbA6l3zqYf4NlUktRKMun_JA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/a6b613-66bd-4312-8f0c-36b5dda9fbe8/1/iOSgDas4E473RISs54ZCqJXEL1Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/a6b613-66bd-4312-8f0c-36b5dda9fbe8/1/LhmWbA6l3zqYf4NlUktRKMun_JA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.136.52.0/22
IPv6:
2a07:df40::/29
Signature Algorithm: sha256WithRSAEncryption
0a:2d:33:14:e8:0a:85:cd:36:28:37:60:93:56:32:24:14:7c:
14:42:36:10:11:77:bc:79:12:b3:0c:26:9a:01:c4:f7:d3:14:
38:04:06:c1:2d:30:a3:21:39:d8:fb:c7:e3:b8:30:5d:94:43:
3d:d0:44:b4:eb:84:a0:97:9d:ab:80:15:3e:4a:fb:9a:4f:1f:
f6:e5:22:55:d0:37:d0:6d:e2:43:30:a1:47:8a:66:07:cc:51:
71:4d:13:e6:4b:35:35:7d:a6:10:ff:e9:e8:53:46:7a:01:d4:
0e:0a:fa:f0:3f:84:0f:dd:64:6b:14:1f:bb:c9:c6:59:fe:88:
2b:84:9d:f5:2e:38:75:43:90:df:e2:da:04:79:59:10:95:a9:
e9:d0:73:30:24:81:ff:9d:8b:e3:e1:c9:0d:b9:84:97:2e:1e:
75:47:c5:4f:bc:32:84:30:43:a1:60:92:8d:68:a2:a2:ef:f6:
c6:76:88:98:cb:3a:88:b6:eb:77:85:3a:49:7c:3c:54:3f:fe:
46:be:cd:b3:ca:de:08:8c:73:d0:18:e0:63:63:5a:0c:e5:a9:
fc:01:d0:7b:1d:51:e9:4d:e6:5b:5a:38:63:06:b0:72:dc:a9:
62:a2:6b:86:f7:2c:f1:b7:a8:8c:bf:29:1a:c2:4d:ff:a9:cd:
00:0d:f8:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:48:31 2025 by rpki-client