Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/Xf1CkclHSLnAhVwYkDM0h6lD8E0.roa
File: Xf1CkclHSLnAhVwYkDM0h6lD8E0.roa (raw, json)
Hash identifier: EK2g0icJXzWtHLjhqtm1Ri8xLfzl4Uh2zXYeYeUYV40=
Subject key identifier: 5D:FD:42:91:C9:47:48:B9:C0:85:5C:18:90:33:34:87:A9:43:F0:4D
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 019428248A2FF64E416385B2FDD660EE2FDF
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/Xf1CkclHSLnAhVwYkDM0h6lD8E0.roa
Signing time: Thu 02 Jan 2025 17:51:10 +0000
ROA not before: Thu 02 Jan 2025 17:51:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 52041
IP address blocks: 45.84.91.0/24 maxlen: 24
87.121.44.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:24:8a:2f:f6:4e:41:63:85:b2:fd:d6:60:ee:2f:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jan 2 17:51:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5dfd4291c94748b9c0855c1890333487a943f04d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:1f:21:01:bd:ae:aa:6a:4d:ee:f9:c5:f3:75:
9e:3d:e4:7a:ba:3c:89:d2:a4:da:f5:10:2b:c3:06:
0b:12:79:0f:f9:d0:b2:3c:eb:27:84:a7:20:dc:8d:
79:e5:0d:cf:8e:7b:33:bb:c6:91:bf:a5:da:7b:cd:
aa:f8:54:1b:69:1c:95:77:62:8e:5e:ca:9b:e2:9a:
a9:8b:87:9b:46:ca:56:08:8b:8d:97:ac:da:fa:8f:
7d:57:c4:3e:98:58:1c:b8:c9:12:de:01:6b:b8:4a:
ed:b3:cd:01:b6:68:9e:ab:ef:47:19:18:87:56:45:
e4:bb:a2:f1:a2:e9:2e:80:cd:7d:5a:23:c3:ae:74:
4a:4a:e6:45:9a:eb:b5:eb:47:03:43:95:1f:a5:bd:
15:20:23:bd:ad:1f:b5:87:9e:83:91:08:82:62:b0:
97:de:64:3d:f2:9c:75:b6:d1:b9:dc:4b:85:80:3d:
8c:93:74:b4:0a:7a:a6:ff:f6:fc:d7:65:02:d0:d9:
20:62:21:81:24:df:15:f3:e9:a5:e5:46:70:16:04:
af:78:92:40:82:50:fb:59:9f:30:89:fd:43:bc:99:
0b:a1:64:05:b0:f9:1a:ef:67:34:85:cf:03:ad:55:
c8:da:af:7d:c4:e2:f7:2b:bb:57:ba:61:06:cf:98:
66:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:FD:42:91:C9:47:48:B9:C0:85:5C:18:90:33:34:87:A9:43:F0:4D
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/Xf1CkclHSLnAhVwYkDM0h6lD8E0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.84.91.0/24
87.121.44.0/24
Signature Algorithm: sha256WithRSAEncryption
58:e6:5c:10:b8:44:bc:d6:9a:60:bb:21:29:cd:f9:79:5f:18:
40:39:24:63:a0:1d:1e:1e:e6:87:59:06:b3:53:3d:f2:f8:e5:
6d:69:ef:22:17:74:09:be:f5:da:40:70:af:3e:88:36:d6:5d:
b5:79:f0:6b:05:c8:85:12:be:3c:e3:d4:4a:e0:7e:2e:70:5c:
36:c4:f3:97:7e:f7:b7:b6:e9:33:e0:80:79:ad:e3:ac:b4:c1:
35:68:96:6f:c4:ae:a3:40:35:7a:2c:ba:8f:c5:1e:c3:63:33:
d9:6c:5f:61:ac:d5:b5:7e:72:51:3e:96:5b:6b:3b:99:b2:c1:
35:0d:4b:c4:fc:45:45:91:68:54:89:6f:7e:82:a5:5e:70:ef:
18:c6:49:3a:c5:ce:c0:2b:e8:74:c0:29:81:42:78:25:39:c7:
7c:5d:f6:27:9d:69:79:00:dd:cc:61:c2:b4:af:28:d8:a5:bb:
3f:62:7e:9d:bd:40:fd:b6:60:3a:3d:d6:3b:d8:98:7d:3b:95:
80:c2:ed:a7:50:f1:ad:65:fe:39:0f:b1:ab:34:3a:c4:c5:47:
64:a5:66:1f:9c:c3:b9:9c:17:e0:b4:83:2d:b9:f9:4b:1a:c8:
5c:40:06:7a:a2:09:21:90:b3:15:1a:87:ae:af:ca:98:76:12:
c6:5e:db:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:03:06 2025 by rpki-client