Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/9bdf34-729d-4be0-b15f-5de0871182ba/1/dAIhcdZ8fwYvVo-M_emgqHoK7ZU.roa
File: dAIhcdZ8fwYvVo-M_emgqHoK7ZU.roa (raw, json)
Hash identifier: SjeXAqHoVFgHw2EHHXptMICe3kneOtC1TL1zW8otQdA=
Subject key identifier: 74:02:21:71:D6:7C:7F:06:2F:56:8F:8C:FD:E9:A0:A8:7A:0A:ED:95
Certificate issuer: /CN=17cf12a6589e998c9bec139af8fce70ac475ad72
Certificate serial: 01942827D0A855CA96A3D59DA30806CE2C65
Authority key identifier: 17:CF:12:A6:58:9E:99:8C:9B:EC:13:9A:F8:FC:E7:0A:C4:75:AD:72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F88SpliemYyb7BOa-PznCsR1rXI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/9bdf34-729d-4be0-b15f-5de0871182ba/1/dAIhcdZ8fwYvVo-M_emgqHoK7ZU.roa
Signing time: Thu 02 Jan 2025 17:54:45 +0000
ROA not before: Thu 02 Jan 2025 17:54:45 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44176
IP address blocks: 45.81.188.0/22 maxlen: 24
45.118.184.0/22 maxlen: 24
216.205.160.0/19 maxlen: 24
2a0e:5e80::/29 maxlen: 32
2a0e:5e80::/40 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:27:d0:a8:55:ca:96:a3:d5:9d:a3:08:06:ce:2c:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17cf12a6589e998c9bec139af8fce70ac475ad72
Validity
Not Before: Jan 2 17:54:45 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=74022171d67c7f062f568f8cfde9a0a87a0aed95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:0a:1b:9e:c7:8e:7b:20:d9:4d:6b:13:e7:0d:
6d:1e:28:98:31:4e:87:21:00:fa:b2:94:81:12:d4:
3f:93:ba:e6:90:9b:80:92:ab:c0:a0:c7:5f:e2:07:
65:72:85:6c:45:8e:1d:b3:b7:ad:35:22:1c:27:97:
90:36:3c:aa:26:e0:c9:64:91:a8:af:57:5e:1a:01:
dd:d7:b5:e0:26:05:20:e8:d4:6a:9e:3e:34:c2:c7:
50:b5:7a:30:68:1b:53:4b:24:98:ea:a3:23:55:aa:
7a:d9:bd:36:38:a0:f7:46:26:66:13:d2:7f:50:45:
d3:c3:86:70:42:bf:61:ce:e2:bb:c9:f5:8a:29:ba:
68:74:92:24:d9:fb:a0:e1:a8:ad:ac:83:c6:4a:ad:
d0:74:fe:51:fd:d8:42:ab:00:af:23:02:e6:b3:51:
2e:88:99:56:aa:03:e5:b1:ef:bd:1f:df:9c:ad:cd:
76:f6:65:16:5e:06:f4:4b:9f:48:dc:fa:80:dc:f1:
cc:50:2e:88:28:c1:c4:89:37:2c:a8:b7:7f:17:a8:
79:5a:f9:5f:b8:45:11:5f:d0:20:04:24:52:3d:b5:
53:b7:c2:2a:5d:d6:69:9c:f8:53:a0:9f:93:0c:ce:
59:e2:c3:16:d8:fd:94:bb:55:33:9e:80:1c:4c:fb:
f7:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:02:21:71:D6:7C:7F:06:2F:56:8F:8C:FD:E9:A0:A8:7A:0A:ED:95
X509v3 Authority Key Identifier:
keyid:17:CF:12:A6:58:9E:99:8C:9B:EC:13:9A:F8:FC:E7:0A:C4:75:AD:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F88SpliemYyb7BOa-PznCsR1rXI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/9bdf34-729d-4be0-b15f-5de0871182ba/1/dAIhcdZ8fwYvVo-M_emgqHoK7ZU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/9bdf34-729d-4be0-b15f-5de0871182ba/1/F88SpliemYyb7BOa-PznCsR1rXI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.81.188.0/22
45.118.184.0/22
216.205.160.0/19
IPv6:
2a0e:5e80::/29
Signature Algorithm: sha256WithRSAEncryption
9f:30:13:58:5b:e2:ab:d7:be:36:d8:5b:1d:71:3f:cd:f9:66:
f6:91:f6:6f:4c:62:54:46:dd:c3:35:7b:fb:00:f7:a7:79:60:
dd:06:0d:4a:6b:bf:13:27:1c:6a:4f:bc:d4:92:9e:1f:33:3d:
15:39:01:7f:de:ff:5a:48:6d:48:89:29:e7:63:f1:7f:76:02:
49:fc:5b:0f:6b:62:31:cf:92:b1:d3:bf:5d:33:20:2d:0f:2f:
5d:dc:20:23:c0:40:0c:67:6c:36:a5:d5:ea:b2:ed:e7:a4:f7:
7b:75:7c:b5:94:e0:e9:14:e3:32:ee:f6:18:43:f1:bd:1d:00:
7e:f6:26:67:fe:4e:11:f6:e3:49:5f:4b:43:50:f3:22:54:41:
5e:79:83:58:d0:02:af:0c:35:dc:25:df:b7:7c:9f:c8:33:b8:
3e:8a:ee:f3:d3:5a:7f:d2:82:99:db:ac:17:2c:09:45:cf:b6:
4d:b3:94:2a:20:dc:41:02:6c:2e:75:43:73:c6:4a:ec:0f:35:
02:af:8f:9e:82:92:c7:c8:ad:62:5a:3f:a5:4d:27:90:23:75:
ff:39:e7:17:9c:c1:05:18:a1:95:bc:5f:8b:9e:fd:a5:de:e4:
67:7e:c7:bb:04:4c:50:44:f5:7f:f9:0a:6f:23:2f:7c:2f:16:
0d:7d:fb:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:01:20 2025 by rpki-client