Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/e411e8-0dc6-46e2-b3a7-d0debcfffd76/1/6R7l5Zc0F8S-RPgHqG7ELPTEGWs.roa
File: 6R7l5Zc0F8S-RPgHqG7ELPTEGWs.roa (raw, json)
Hash identifier: qKcKkoUboZrcqtoprL7lO+GfuPllhw7eINNwNRAw7pk=
Subject key identifier: E9:1E:E5:E5:97:34:17:C4:BE:44:F8:07:A8:6E:C4:2C:F4:C4:19:6B
Certificate issuer: /CN=110aaf9016a68752fc9132149b91e8fab16e24be
Certificate serial: 019421B1C629B418E5A63F118782D01762B8
Authority key identifier: 11:0A:AF:90:16:A6:87:52:FC:91:32:14:9B:91:E8:FA:B1:6E:24:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EQqvkBamh1L8kTIUm5Ho-rFuJL4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/e411e8-0dc6-46e2-b3a7-d0debcfffd76/1/6R7l5Zc0F8S-RPgHqG7ELPTEGWs.roa
Signing time: Wed 01 Jan 2025 11:48:06 +0000
ROA not before: Wed 01 Jan 2025 11:48:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 47755
IP address blocks: 45.90.164.0/22 maxlen: 24
2a0e:2c0::/29 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b1:c6:29:b4:18:e5:a6:3f:11:87:82:d0:17:62:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=110aaf9016a68752fc9132149b91e8fab16e24be
Validity
Not Before: Jan 1 11:48:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e91ee5e5973417c4be44f807a86ec42cf4c4196b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:4d:58:a5:b0:97:6e:af:71:4d:9b:8d:9f:b0:
72:30:33:2e:ea:f0:e2:09:cf:de:4a:98:8b:c3:bf:
0d:53:f0:b2:a2:76:89:65:5e:db:f9:c5:e1:23:dc:
c3:29:22:b1:d1:72:ab:14:72:f7:3b:e2:ad:e4:41:
b3:bb:ca:0c:0f:64:8a:18:9c:0c:ed:fb:fc:24:f4:
64:67:f9:00:83:b8:bc:fa:1d:1e:97:77:3b:d9:81:
07:45:1e:32:ca:9d:4f:b4:34:99:82:cd:e6:56:24:
16:18:c7:89:80:c8:79:70:4a:5c:2a:be:72:66:18:
8a:77:f1:94:3d:9a:c6:5c:59:ff:c2:73:95:3e:d8:
f9:cf:fc:a0:19:e2:8f:fd:fe:aa:b4:cc:82:39:8e:
81:30:fc:86:22:76:cc:67:43:57:6e:92:19:4f:f2:
fd:a9:cd:0a:f4:7a:be:dd:52:a0:9d:86:45:ad:7f:
1b:0b:67:37:aa:7b:4c:a7:2e:9d:10:96:2e:05:dc:
10:65:ed:48:b4:4d:ca:ac:b2:9a:af:c4:64:8b:20:
62:c7:a2:50:fa:23:da:a8:86:95:7a:1f:70:61:6d:
77:38:35:b6:6a:10:0a:cd:1c:5e:1e:e8:db:31:1b:
d8:2d:68:3e:53:99:98:b7:c4:a9:90:61:e6:85:d3:
17:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:1E:E5:E5:97:34:17:C4:BE:44:F8:07:A8:6E:C4:2C:F4:C4:19:6B
X509v3 Authority Key Identifier:
keyid:11:0A:AF:90:16:A6:87:52:FC:91:32:14:9B:91:E8:FA:B1:6E:24:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EQqvkBamh1L8kTIUm5Ho-rFuJL4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/e411e8-0dc6-46e2-b3a7-d0debcfffd76/1/6R7l5Zc0F8S-RPgHqG7ELPTEGWs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/e411e8-0dc6-46e2-b3a7-d0debcfffd76/1/EQqvkBamh1L8kTIUm5Ho-rFuJL4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.90.164.0/22
IPv6:
2a0e:2c0::/29
Signature Algorithm: sha256WithRSAEncryption
09:f9:a2:6b:d8:40:59:b4:cf:37:c5:d8:71:9f:cf:e6:a2:62:
6d:38:45:0b:44:12:f4:da:5c:2a:9e:fb:e9:63:ea:b8:90:e2:
9d:9c:eb:3d:d4:86:83:c9:75:5c:46:8a:4a:35:7d:cd:ef:0d:
6c:4a:95:67:7f:6e:d8:fc:a0:27:8d:0a:c9:93:2f:4a:78:df:
ca:ef:d3:27:1e:9b:63:19:84:c5:5c:6a:9e:80:27:8d:b5:7f:
c6:64:8f:05:1e:4a:88:14:55:e7:18:bc:da:11:62:4b:45:90:
ca:5e:f5:c7:ad:a0:d7:9b:cf:32:14:ef:40:7e:09:99:73:86:
f6:33:0c:d8:f6:6b:62:99:17:69:d9:61:01:ab:68:23:7a:27:
04:0f:7e:4a:d7:77:da:23:27:5f:23:b3:d5:39:fd:89:8b:ef:
1a:e5:f2:c2:f6:61:20:0c:cc:54:36:a3:c5:47:ea:d5:3e:0e:
21:10:f0:d6:da:85:ff:28:cc:a8:f1:c3:72:ba:1a:6a:74:d1:
eb:6a:97:ed:30:2c:d9:29:d2:91:57:bb:30:8a:6f:a6:9e:10:
03:17:d4:12:1c:48:a1:12:47:4b:12:83:e1:1b:bc:67:65:5d:
55:f0:91:ab:64:d9:3c:e3:83:8d:61:ed:81:a6:ea:cd:f3:81:
67:cb:25:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 16:47:55 2025 by rpki-client