Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/f0e161-a43c-4d31-b65d-d4fed5085392/1/9wllcBQptpahKiXvdA8fp8dAnd4.roa
File: 9wllcBQptpahKiXvdA8fp8dAnd4.roa (raw, json)
Hash identifier: EZriZJeJYlorIY+q2d7CpiKRv59NpOmz9CDJjivHJGw=
Subject key identifier: F7:09:65:70:14:29:B6:96:A1:2A:25:EF:74:0F:1F:A7:C7:40:9D:DE
Certificate issuer: /CN=c66dc60d16dfe1649d86c1693e17858c2306387f
Certificate serial: 01942521CDCE571B8D7D425BE66589DECB8A
Authority key identifier: C6:6D:C6:0D:16:DF:E1:64:9D:86:C1:69:3E:17:85:8C:23:06:38:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xm3GDRbf4WSdhsFpPheFjCMGOH8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/f0e161-a43c-4d31-b65d-d4fed5085392/1/9wllcBQptpahKiXvdA8fp8dAnd4.roa
Signing time: Thu 02 Jan 2025 03:49:19 +0000
ROA not before: Thu 02 Jan 2025 03:49:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 39371
IP address blocks: 45.129.60.0/22 maxlen: 24
185.99.204.0/22 maxlen: 24
2a06:1480::/29 maxlen: 29
2a0e:44c0::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:cd:ce:57:1b:8d:7d:42:5b:e6:65:89:de:cb:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66dc60d16dfe1649d86c1693e17858c2306387f
Validity
Not Before: Jan 2 03:49:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f70965701429b696a12a25ef740f1fa7c7409dde
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:45:0e:ae:40:7e:e1:17:d1:bf:30:b1:27:28:
b0:d6:18:88:13:ba:c2:05:e4:9c:f0:50:6a:46:13:
36:24:7d:12:94:d6:eb:71:38:1b:99:bc:6e:7f:e5:
5c:dd:53:fe:bd:2c:92:92:70:0b:5c:7a:ab:24:4c:
a7:3e:88:a0:c2:fc:7f:00:8a:59:32:3a:90:c4:fb:
e3:48:b8:97:74:f8:ee:03:57:64:e9:c3:bd:54:0d:
7f:21:3e:90:75:ca:81:f5:50:40:df:2a:fd:c4:fb:
bf:09:37:18:d8:f7:e7:e7:d8:d9:6d:fd:8c:6b:4e:
0d:c8:e9:29:b4:76:c7:e2:2d:fd:84:7b:bf:7a:d0:
b7:1a:c3:5e:ca:d8:31:7a:c6:63:7f:46:32:26:d0:
31:3e:6b:67:50:ee:5f:ec:d3:53:b6:61:00:26:68:
de:42:03:f8:eb:9a:9c:5d:13:f8:8e:4f:66:98:28:
8b:49:0e:f7:98:53:f4:0c:43:b0:92:e5:fa:bf:f7:
75:c6:07:e0:81:42:7d:4a:85:35:23:84:c7:bc:03:
ce:4f:10:9c:a2:59:66:09:f4:74:5c:f6:73:2e:a9:
d4:d6:68:17:f3:2b:a5:b6:36:78:24:ed:2f:9f:a1:
ac:a4:5b:40:59:17:26:96:1c:f1:e2:bf:3a:45:d4:
42:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:09:65:70:14:29:B6:96:A1:2A:25:EF:74:0F:1F:A7:C7:40:9D:DE
X509v3 Authority Key Identifier:
keyid:C6:6D:C6:0D:16:DF:E1:64:9D:86:C1:69:3E:17:85:8C:23:06:38:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xm3GDRbf4WSdhsFpPheFjCMGOH8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/f0e161-a43c-4d31-b65d-d4fed5085392/1/9wllcBQptpahKiXvdA8fp8dAnd4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/f0e161-a43c-4d31-b65d-d4fed5085392/1/xm3GDRbf4WSdhsFpPheFjCMGOH8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.129.60.0/22
185.99.204.0/22
IPv6:
2a06:1480::/29
2a0e:44c0::/29
Signature Algorithm: sha256WithRSAEncryption
05:07:4f:a9:d8:47:57:3b:a4:8c:c1:c8:87:02:16:72:d3:3a:
75:62:61:8a:ca:a7:94:16:7b:90:98:69:2d:72:27:e4:92:c9:
d2:ba:8d:b2:cb:6d:f6:73:52:5c:e1:a0:37:37:5c:9d:a9:50:
6c:27:53:ee:92:c1:c6:0a:88:e8:6b:c8:77:bf:26:2a:7b:45:
7c:aa:e0:d7:1e:d2:be:d0:65:30:b0:53:4c:b7:dc:9d:a3:23:
0f:48:16:53:9f:0e:8d:84:ec:57:8b:5e:68:66:c4:fd:75:6e:
6d:0b:63:c9:22:d5:87:da:4a:66:2b:41:d3:b3:0e:24:a9:ab:
5d:d6:b0:28:4b:40:5d:a6:89:92:68:bb:8e:d6:87:4e:46:df:
45:a4:69:71:12:25:ae:20:ae:88:45:c2:f5:dd:a2:74:72:02:
c9:6e:12:e1:43:46:ad:48:b9:fc:28:cd:5c:74:96:8e:4a:66:
80:7f:a6:24:a2:6a:0e:96:d9:80:1a:41:e1:5a:ab:e9:aa:06:
dd:ec:72:8b:c5:8a:bc:76:ba:99:fd:32:64:9e:f2:d1:d5:f4:
d8:83:ab:64:82:24:77:a7:7a:fc:5a:28:6a:c8:0d:ee:a8:43:
e9:e0:da:b9:7a:d6:74:f8:7a:59:75:21:2e:d4:7e:69:4b:2f:
e9:6c:23:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:50:23 2025 by rpki-client