Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/MWgxbThPyOz3z82eRdNy72X67r4.roa
File: MWgxbThPyOz3z82eRdNy72X67r4.roa (raw, json)
Hash identifier: xqtU/JIjXZTfQ9fOkZzoUWNH4yJuqo5PeV0s3xZSZ24=
Subject key identifier: 31:68:31:6D:38:4F:C8:EC:F7:CF:CD:9E:45:D3:72:EF:65:FA:EE:BE
Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Certificate serial: 01942220123218612753BF94E339360E66D5
Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/MWgxbThPyOz3z82eRdNy72X67r4.roa
Signing time: Wed 01 Jan 2025 13:48:34 +0000
ROA not before: Wed 01 Jan 2025 13:48:34 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 53356
IP address blocks: 45.151.140.0/24 maxlen: 24
45.151.141.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:20:12:32:18:61:27:53:bf:94:e3:39:36:0e:66:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Validity
Not Before: Jan 1 13:48:34 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3168316d384fc8ecf7cfcd9e45d372ef65faeebe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:fa:a6:87:12:e5:ea:d2:50:5c:16:17:2f:68:
41:a4:51:73:d0:37:ee:0f:55:04:ad:2d:1e:d6:25:
05:c2:c6:1c:b4:0e:87:31:e5:04:e9:d6:a7:3a:cf:
1e:cf:e3:ae:23:e6:44:51:65:dd:49:23:b4:91:5b:
0f:2f:59:02:f8:ed:b0:1b:e3:03:f2:84:fb:4e:40:
01:8f:3b:40:b7:90:6b:de:89:d2:d3:bf:c0:6c:01:
7d:d7:58:ce:6c:90:cf:3d:51:f2:f5:5f:40:4b:cc:
2a:2b:67:d3:20:51:31:2f:de:e1:37:73:e1:11:2b:
a3:62:ec:e0:56:da:84:c8:86:eb:eb:e6:b5:0a:2b:
f8:40:54:30:44:55:13:ff:b2:22:0f:fd:c9:37:79:
28:ac:e7:0d:2d:88:ab:82:e0:6c:fe:da:9e:80:ea:
48:13:8b:c6:6f:db:dd:c8:81:19:49:60:c0:d1:42:
2d:48:81:c0:17:9e:60:ed:9e:c0:ed:31:48:7c:41:
f9:39:27:8a:ee:2f:65:b9:03:70:29:5c:09:0d:98:
51:b5:88:99:f6:41:dc:4c:67:99:6f:5b:17:a7:26:
31:26:1f:28:e6:f8:92:06:8a:83:5f:1e:0e:d0:84:
74:de:2d:77:4d:8f:fb:9c:17:b8:b5:df:34:cd:a8:
8a:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:68:31:6D:38:4F:C8:EC:F7:CF:CD:9E:45:D3:72:EF:65:FA:EE:BE
X509v3 Authority Key Identifier:
keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/MWgxbThPyOz3z82eRdNy72X67r4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.151.140.0/23
Signature Algorithm: sha256WithRSAEncryption
a6:82:f9:68:ad:36:9c:99:5d:9f:ec:bd:ba:08:c1:25:14:c1:
c9:d2:6c:d3:dd:90:6e:e3:fa:20:a6:03:e9:a5:11:d9:60:ad:
be:f3:ee:38:ca:4c:6e:dc:53:7b:c9:db:e3:79:d3:c5:e5:72:
b5:28:6d:a0:79:c3:9e:83:0d:2b:71:3b:71:78:18:a1:9a:0f:
9b:18:77:55:ba:48:4e:91:99:28:4b:4c:90:c4:68:b4:80:3f:
52:b2:f3:22:d7:8d:5a:8a:3e:fd:1a:4d:c8:40:8d:af:ff:15:
79:60:69:f4:21:44:23:3e:b0:be:3f:60:30:35:c6:6d:0f:e6:
3f:28:fa:fe:05:1a:1c:03:84:af:ec:7f:ca:1f:ff:7e:5c:fa:
12:02:25:15:54:20:06:80:f6:56:4e:b6:92:ff:51:72:50:4d:
96:1c:de:73:d4:a4:08:5e:87:3d:39:8a:c4:5f:de:e4:d1:0a:
14:88:d4:da:93:b3:2f:f0:07:2e:8f:c3:e5:0a:34:be:16:bf:
90:20:5b:4f:f6:c9:a4:ee:26:bd:f3:cb:b1:bc:c9:17:43:c1:
50:c4:58:e1:3e:c5:5a:2e:12:b3:31:15:58:1e:5d:f4:3c:54:
d0:83:97:b0:6f:bc:b6:ce:ab:b9:5f:39:23:61:23:b2:4e:2d:
85:f6:27:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:57:19 2025 by rpki-client