Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/8c5f5f-a1b8-4a2c-9b3c-b0f6ccd46387/1/gEYhgGeiO3CvO7L61btMp6FMtUk.roa
File: gEYhgGeiO3CvO7L61btMp6FMtUk.roa (raw, json)
Hash identifier: t7slYmPenDTs/a8GzhHgCqRYrDeOIVUNfoJ1LIoBLf8=
Subject key identifier: 80:46:21:80:67:A2:3B:70:AF:3B:B2:FA:D5:BB:4C:A7:A1:4C:B5:49
Certificate issuer: /CN=8f084f3a80b4a1df4811642aab8d7951639a2e58
Certificate serial: 01941F8C3624E336D4D828CFCEBAC5CD837A
Authority key identifier: 8F:08:4F:3A:80:B4:A1:DF:48:11:64:2A:AB:8D:79:51:63:9A:2E:58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jwhPOoC0od9IEWQqq415UWOaLlg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/8c5f5f-a1b8-4a2c-9b3c-b0f6ccd46387/1/gEYhgGeiO3CvO7L61btMp6FMtUk.roa
Signing time: Wed 01 Jan 2025 01:47:50 +0000
ROA not before: Wed 01 Jan 2025 01:47:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49447
IP address blocks: 45.9.148.0/24 maxlen: 24
45.9.149.0/24 maxlen: 24
45.9.150.0/23 maxlen: 23
2a0e:fa00::/48 maxlen: 48
2a0e:fa00:1::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:36:24:e3:36:d4:d8:28:cf:ce:ba:c5:cd:83:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f084f3a80b4a1df4811642aab8d7951639a2e58
Validity
Not Before: Jan 1 01:47:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8046218067a23b70af3bb2fad5bb4ca7a14cb549
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:64:32:b2:83:2d:b5:66:e4:51:f8:0b:e8:56:
7e:2a:b0:a7:12:19:92:9c:f3:ee:e6:9f:c5:49:b4:
c3:53:94:19:40:57:db:83:36:2a:65:07:5b:c4:41:
2a:54:01:7b:16:2e:3a:29:39:1a:ac:f2:3b:e7:ca:
b5:04:8b:af:2c:01:bc:44:9a:84:f6:d8:b3:cc:58:
db:df:cb:f5:75:ed:33:3d:28:82:2c:6f:99:f3:08:
59:5b:57:f4:f6:0a:6f:52:3a:e6:b0:41:94:1c:cf:
ad:c2:f8:68:f8:3b:35:e1:15:ec:e0:46:94:62:d5:
a8:9d:3f:a2:42:15:5c:47:60:9d:5f:75:82:f4:ed:
fa:53:3c:7d:28:e7:79:54:6d:9c:d4:0a:5a:aa:d6:
a6:2c:cc:cd:11:ab:0d:34:37:14:13:b9:37:c0:c4:
64:58:7e:77:24:e2:97:d4:15:52:5e:28:04:f4:58:
b0:d0:20:50:2a:4a:d6:d8:4c:ed:1c:78:5f:62:d3:
17:18:48:89:b1:93:d8:ee:24:99:30:39:88:ab:ad:
92:e0:55:d1:d1:18:b0:ec:fe:80:bb:0d:72:57:f1:
04:76:73:de:58:6e:6f:21:39:d4:4e:37:14:03:3a:
93:06:b8:15:a6:f4:f9:3d:d5:2d:d0:67:23:30:5e:
da:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:46:21:80:67:A2:3B:70:AF:3B:B2:FA:D5:BB:4C:A7:A1:4C:B5:49
X509v3 Authority Key Identifier:
keyid:8F:08:4F:3A:80:B4:A1:DF:48:11:64:2A:AB:8D:79:51:63:9A:2E:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jwhPOoC0od9IEWQqq415UWOaLlg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/8c5f5f-a1b8-4a2c-9b3c-b0f6ccd46387/1/gEYhgGeiO3CvO7L61btMp6FMtUk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/8c5f5f-a1b8-4a2c-9b3c-b0f6ccd46387/1/jwhPOoC0od9IEWQqq415UWOaLlg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.9.148.0/22
IPv6:
2a0e:fa00::/47
Signature Algorithm: sha256WithRSAEncryption
72:c9:e1:be:16:91:da:ce:b4:7f:55:b8:84:2b:21:a3:6d:a5:
38:86:d5:7e:05:10:5d:38:6c:a6:c0:4f:03:95:94:fb:db:e9:
14:9e:d9:85:00:5d:3b:82:27:75:61:c7:07:48:fc:3c:e1:5a:
52:e4:7b:76:39:8a:b8:fe:46:70:ed:94:78:41:c7:af:d2:2f:
fb:69:b8:70:37:18:8f:e9:de:81:bd:03:ae:bc:fd:14:5f:13:
c9:b2:cb:33:91:a4:77:e2:34:07:93:8f:a0:46:75:52:ca:04:
fa:93:63:20:5f:01:c6:2d:c5:bd:a3:dd:7b:9e:c2:f6:09:39:
10:d4:ac:98:54:00:7e:6c:6b:26:0d:ef:32:81:d1:f0:ba:2e:
d0:ae:7d:e7:fc:6b:4f:f9:62:d1:49:6a:47:32:3d:f2:fa:37:
0d:93:58:0a:6a:30:5f:af:d1:52:99:fd:55:4e:57:db:aa:76:
00:aa:93:ef:46:8e:a0:d2:28:20:7f:48:9e:56:3d:8d:a5:8a:
fb:01:43:fc:f4:13:8a:97:aa:24:24:b5:8e:9a:8c:2e:51:c9:
de:ef:57:df:f1:84:fd:cc:4c:c4:fe:80:00:8c:85:5d:97:92:
73:0b:f4:1b:e3:bb:71:4e:9e:00:c2:10:24:bf:1b:c8:cc:b2:
ca:c2:92:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 07:02:19 2025 by rpki-client