Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/c8aa4e-dd01-4a1a-8cc0-edf409fedfca/1/5ViHo8CP-gF060JRbv2sDnYVvwI.roa
File: 5ViHo8CP-gF060JRbv2sDnYVvwI.roa (raw, json)
Hash identifier: QuO6jCw1G7bEtuq5gtmVrfr4TZNPSxo88gcCHtVd/jE=
Subject key identifier: E5:58:87:A3:C0:8F:FA:01:74:EB:42:51:6E:FD:AC:0E:76:15:BF:02
Certificate issuer: /CN=554834da8600c96c5fde91278f520e6c0d26fff3
Certificate serial: 01941F8C4DA9063BDE33F58D22A4446D0D1B
Authority key identifier: 55:48:34:DA:86:00:C9:6C:5F:DE:91:27:8F:52:0E:6C:0D:26:FF:F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VUg02oYAyWxf3pEnj1IObA0m__M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/c8aa4e-dd01-4a1a-8cc0-edf409fedfca/1/5ViHo8CP-gF060JRbv2sDnYVvwI.roa
Signing time: Wed 01 Jan 2025 01:47:56 +0000
ROA not before: Wed 01 Jan 2025 01:47:56 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43414
IP address blocks: 45.149.44.0/22 maxlen: 22
185.185.244.0/22 maxlen: 22
2a0b:6980::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:4d:a9:06:3b:de:33:f5:8d:22:a4:44:6d:0d:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=554834da8600c96c5fde91278f520e6c0d26fff3
Validity
Not Before: Jan 1 01:47:56 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e55887a3c08ffa0174eb42516efdac0e7615bf02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:f1:7c:ce:00:87:dc:b2:60:ac:b7:65:2a:22:
c6:e8:93:9d:d6:45:ef:60:e3:28:8f:8f:1d:a9:27:
8f:05:92:6f:c2:82:b8:7a:d2:b9:16:68:86:24:3b:
d2:66:27:d7:a0:6f:da:3c:c6:06:f0:8b:5d:38:27:
de:b7:57:a9:f3:2b:27:17:fe:18:4b:7d:ea:e6:05:
7c:d8:92:3a:e0:68:1d:87:f3:ac:ef:53:88:f7:7d:
b9:ec:83:70:ef:38:ae:44:16:d8:d9:ca:5d:c8:b1:
9d:8b:88:46:e8:cb:b1:e5:62:20:5e:24:9f:c0:23:
f5:1b:d9:ce:ac:f7:f4:15:d7:63:d1:e7:c1:87:ec:
14:42:28:a0:a6:a3:e4:97:8d:94:d0:40:d3:11:94:
da:42:8c:50:14:c0:03:6f:c9:af:46:87:01:c8:ad:
9f:d5:65:87:94:01:b9:4f:57:7c:d9:b8:11:fe:14:
0c:13:a6:b1:0c:f4:3e:b1:bd:f6:ba:a1:e5:df:25:
cd:20:bc:34:d8:02:84:37:84:1c:4a:f9:7c:ea:81:
26:07:c3:98:02:15:ea:38:53:e5:77:8f:a8:f1:4f:
9e:83:d6:aa:84:c4:91:95:28:ab:d2:b2:5f:40:51:
29:40:cb:3a:20:86:4e:79:b9:91:01:77:e0:d5:b5:
39:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:58:87:A3:C0:8F:FA:01:74:EB:42:51:6E:FD:AC:0E:76:15:BF:02
X509v3 Authority Key Identifier:
keyid:55:48:34:DA:86:00:C9:6C:5F:DE:91:27:8F:52:0E:6C:0D:26:FF:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VUg02oYAyWxf3pEnj1IObA0m__M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/c8aa4e-dd01-4a1a-8cc0-edf409fedfca/1/5ViHo8CP-gF060JRbv2sDnYVvwI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/c8aa4e-dd01-4a1a-8cc0-edf409fedfca/1/VUg02oYAyWxf3pEnj1IObA0m__M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.149.44.0/22
185.185.244.0/22
IPv6:
2a0b:6980::/29
Signature Algorithm: sha256WithRSAEncryption
71:6f:39:37:4c:06:14:7d:d0:5a:8e:a0:6b:77:65:b4:40:44:
7d:b9:9d:43:25:2b:32:93:03:1f:d1:10:b8:e7:ac:84:14:7a:
01:1f:e3:13:e2:8a:9e:8e:ef:1b:97:dc:a2:41:d8:58:d5:5f:
1a:64:26:63:d3:27:20:d9:96:2b:56:73:46:81:18:bb:54:d1:
47:4c:38:5e:c9:a1:86:41:6c:e9:3c:21:30:ac:77:4d:39:a9:
75:6e:3d:65:41:c8:61:81:38:f5:ce:0c:ca:9d:ce:23:b2:f5:
a5:67:83:6f:0c:2c:35:ed:f2:59:97:3b:33:86:58:03:97:70:
05:d6:7a:4b:72:fc:a5:a2:40:71:9e:48:ac:3a:ec:f8:d7:8d:
cc:c8:db:f4:42:89:39:77:61:96:7b:f1:0c:c3:03:2c:65:74:
2d:4a:82:12:1a:0f:5d:fc:11:b8:3f:c5:36:3c:43:84:2b:0d:
54:fd:12:d7:ca:18:7a:46:ba:a3:c2:19:0e:d5:19:7b:b5:b9:
10:f6:75:5c:ab:77:ca:15:b9:9c:7f:fe:ea:b6:3d:e1:38:78:
24:b0:b4:b5:ea:c7:b6:9a:21:a6:ca:02:26:c5:56:a0:e9:89:
ad:79:11:4f:95:63:57:bc:86:84:87:79:cc:04:d2:39:7d:89:
33:a0:8a:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:47:16 2025 by rpki-client