Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/720f9f-f0b8-44d2-8367-f81fdf74e655/1/TvcD9AMtT0yWtHonps0hocI3dlg.roa
File: TvcD9AMtT0yWtHonps0hocI3dlg.roa (raw, json)
Hash identifier: fuU4HZNYKHN5G71TXaO9NMKHsWQTf51zKQ44BmOWV1o=
Subject key identifier: 4E:F7:03:F4:03:2D:4F:4C:96:B4:7A:27:A6:CD:21:A1:C2:37:76:58
Certificate issuer: /CN=aaf4969842de9c4c1e1a5759d98d1ed5c0d62ef8
Certificate serial: 0194258F4B7692E92CD2CEE61937D8D17D73
Authority key identifier: AA:F4:96:98:42:DE:9C:4C:1E:1A:57:59:D9:8D:1E:D5:C0:D6:2E:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qvSWmELenEweGldZ2Y0e1cDWLvg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/720f9f-f0b8-44d2-8367-f81fdf74e655/1/TvcD9AMtT0yWtHonps0hocI3dlg.roa
Signing time: Thu 02 Jan 2025 05:48:55 +0000
ROA not before: Thu 02 Jan 2025 05:48:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50046
IP address blocks: 45.152.70.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:4b:76:92:e9:2c:d2:ce:e6:19:37:d8:d1:7d:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aaf4969842de9c4c1e1a5759d98d1ed5c0d62ef8
Validity
Not Before: Jan 2 05:48:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4ef703f4032d4f4c96b47a27a6cd21a1c2377658
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:04:8b:77:0d:e6:b1:b3:b9:de:31:0a:fa:c2:
91:e0:61:27:12:73:63:6e:b5:95:d9:6b:6c:ce:39:
00:fa:f9:29:39:91:c7:7a:9f:2d:57:a7:1f:82:54:
aa:21:01:f1:e6:1d:1f:31:ad:59:97:8f:3a:a8:eb:
a8:47:7b:8c:89:72:68:a2:d9:c2:e1:d2:1d:07:95:
50:b0:b8:df:89:b2:58:61:57:61:f8:49:d3:1b:9a:
6d:b3:9b:74:00:45:72:8d:d7:0a:72:23:37:7f:ed:
d8:fe:7d:eb:2c:5f:f7:a8:7c:9d:99:3e:4a:24:fb:
7c:7e:91:7b:6e:45:77:df:d7:0c:69:e2:a6:fd:42:
b4:07:7a:75:b3:0a:4a:4d:ef:74:38:3e:22:fd:1b:
5b:aa:dd:bc:c0:b5:9a:77:ee:cf:db:f0:d4:76:59:
19:25:59:79:59:50:12:8b:21:31:ae:e5:ab:9c:ed:
df:ae:4b:7d:0e:78:9d:e3:5a:af:3c:82:b9:91:69:
3d:a3:34:6c:5f:20:4f:51:16:07:9a:69:1c:63:81:
bb:73:c2:df:72:45:3a:b4:24:97:cf:ae:78:93:d5:
ff:c2:6f:67:69:40:01:0c:35:ff:21:0f:91:13:c7:
35:b7:45:c5:ed:89:01:ab:0f:ce:1a:a6:2e:19:fc:
81:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:F7:03:F4:03:2D:4F:4C:96:B4:7A:27:A6:CD:21:A1:C2:37:76:58
X509v3 Authority Key Identifier:
keyid:AA:F4:96:98:42:DE:9C:4C:1E:1A:57:59:D9:8D:1E:D5:C0:D6:2E:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qvSWmELenEweGldZ2Y0e1cDWLvg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/720f9f-f0b8-44d2-8367-f81fdf74e655/1/TvcD9AMtT0yWtHonps0hocI3dlg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/720f9f-f0b8-44d2-8367-f81fdf74e655/1/qvSWmELenEweGldZ2Y0e1cDWLvg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.152.70.0/24
Signature Algorithm: sha256WithRSAEncryption
78:c9:83:04:5f:48:f2:e8:95:4f:b7:56:26:19:c8:d7:07:24:
eb:fc:b8:9f:d3:aa:34:9b:96:e4:31:92:2b:3d:31:2a:de:09:
10:fb:7d:e5:da:f2:7f:2f:0b:e6:c8:d1:c0:00:19:1b:8c:e0:
b8:17:4e:ce:f8:26:69:11:83:7b:9e:55:34:6d:10:57:39:aa:
46:2a:31:75:7b:30:fe:10:da:61:61:91:c6:db:e9:42:79:44:
9a:6b:f0:38:17:fc:3e:ac:74:a4:c9:a3:8c:f3:3a:41:8b:c3:
58:b5:a1:cf:ec:46:f2:81:58:50:91:a9:45:e1:b4:5e:d8:39:
3c:08:bb:68:33:93:81:7e:87:93:9f:47:49:17:f0:29:53:9d:
6d:a4:4c:d6:9b:63:41:0d:b2:1b:e6:d8:2c:eb:c3:d5:92:50:
44:4f:47:b5:80:47:53:64:59:64:2c:13:e1:a2:86:a3:18:5f:
5c:9a:e6:b5:68:4a:72:c3:3f:a9:b9:66:52:4a:e9:a0:7f:b1:
c6:28:2d:2f:6c:d3:4c:b9:84:91:3a:6a:7e:ab:bd:aa:6e:2d:
a5:59:5b:fa:65:67:80:a9:f3:00:dd:69:67:46:5e:6f:ae:eb:
00:f2:0e:30:79:22:49:c7:f1:ae:92:70:ae:4a:c3:95:3c:5d:
67:18:f3:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:16 2025 by rpki-client on console.sobornost.net