Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/cp97l-1YDZWA2kDOD05xJj2gQyI.roa
File: cp97l-1YDZWA2kDOD05xJj2gQyI.roa (raw, json)
Hash identifier: A0t/JG4MOoUOvv+82rJo7iFC7ysfkI8YZXvZR0PJnZU=
Subject key identifier: 72:9F:7B:97:ED:58:0D:95:80:DA:40:CE:0F:4E:71:26:3D:A0:43:22
Certificate issuer: /CN=618478f198fe569010c3df6219142f530c4f5e56
Certificate serial: 0194258F8578ECC75DAE005E6A9C65F67D89
Authority key identifier: 61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/cp97l-1YDZWA2kDOD05xJj2gQyI.roa
Signing time: Thu 02 Jan 2025 05:49:10 +0000
ROA not before: Thu 02 Jan 2025 05:49:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16353
IP address blocks: 45.135.166.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:85:78:ec:c7:5d:ae:00:5e:6a:9c:65:f6:7d:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=618478f198fe569010c3df6219142f530c4f5e56
Validity
Not Before: Jan 2 05:49:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=729f7b97ed580d9580da40ce0f4e71263da04322
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:65:3e:c3:b2:1c:23:5a:5f:1d:36:69:9c:5c:
0b:8f:3c:3b:84:26:f1:04:d9:ce:04:ac:6b:ed:8d:
e4:b7:18:78:45:58:51:4d:9c:03:35:74:ae:e3:74:
dd:e7:d3:9a:07:ac:63:40:ee:5f:7c:ab:26:3a:f2:
37:95:57:26:3c:b9:84:4a:f8:31:2c:97:24:3c:be:
2f:0b:cc:c1:8a:93:77:39:53:01:43:af:eb:49:af:
87:87:c9:0d:cb:e3:59:58:16:96:92:a8:63:8b:c6:
8c:6e:44:46:05:1b:25:a2:ad:22:98:ca:c1:be:b1:
02:aa:43:94:f2:4a:0d:09:ca:14:8f:4d:7b:d7:8c:
fa:3c:19:d9:fd:be:e5:4c:0f:f0:d2:85:1f:04:13:
85:bf:b5:54:83:2b:c1:43:2d:9c:99:9e:81:6e:26:
19:f2:4e:65:3b:5e:e7:8b:99:36:90:b2:33:fc:85:
8a:7b:8a:74:db:fe:48:da:d5:a1:39:1c:29:56:b3:
26:63:98:82:f2:92:bf:3c:2a:36:cd:7c:ca:64:7d:
2e:d8:b0:f4:14:a4:9d:16:14:71:f9:0c:df:e0:38:
47:18:1f:49:f9:c3:46:81:dd:4d:b8:f3:fe:15:40:
4d:8e:29:61:cc:e4:74:5d:8c:ff:c7:cc:c0:ab:a1:
35:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:9F:7B:97:ED:58:0D:95:80:DA:40:CE:0F:4E:71:26:3D:A0:43:22
X509v3 Authority Key Identifier:
keyid:61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/cp97l-1YDZWA2kDOD05xJj2gQyI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.135.166.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:59:7c:09:6b:99:d5:50:60:f2:6f:ea:c3:55:d2:63:94:df:
06:a2:6d:31:15:d2:b7:69:fc:8e:a2:38:1b:f3:6d:21:3c:6a:
66:75:a2:8e:ff:c6:64:80:8f:c5:f4:3f:dd:94:21:f6:95:49:
fc:07:dd:6c:62:e6:75:6a:84:26:a1:50:51:43:b7:1f:2a:aa:
21:b4:c4:c1:5b:5a:95:14:7a:2e:4c:8d:b9:36:13:ff:e8:2a:
62:86:71:cb:a5:01:d3:75:ca:05:56:31:12:d2:dd:23:04:4d:
0e:5a:62:cd:c0:1e:44:46:da:2c:f1:ef:e2:b9:83:90:94:1d:
f1:31:4e:3c:86:c4:85:fc:88:ac:a4:91:3f:e7:cd:95:6f:df:
8f:d1:db:5c:c1:ea:c0:16:5c:65:e4:37:a1:7d:05:38:cc:2d:
a0:4e:d5:73:9f:40:e3:08:1c:de:5a:ae:e0:22:0a:a5:1d:96:
80:42:fb:23:32:50:d9:b4:ae:ac:61:ed:db:f5:40:03:ea:42:
23:4c:5f:38:af:03:0a:a4:0c:cc:1c:70:6c:c7:ac:ce:5f:80:
d3:98:f8:ed:10:13:f5:9f:32:ab:4c:26:f6:99:a4:ea:fe:d2:
16:8d:70:19:f3:55:c4:b0:21:4d:c3:ea:13:43:23:8e:2b:16:
1a:68:2d:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:00:12 2025 by rpki-client