Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/0ad414-3df1-4b38-869e-c621e8df95ff/1/vPm_UYg8wre_NolD1hu0Cx9JGzE.roa
File: vPm_UYg8wre_NolD1hu0Cx9JGzE.roa (raw, json)
Hash identifier: Rws+EnLA4ahX/aasRkr6vitQH/K/D1I71mx2gpcNmkI=
Subject key identifier: BC:F9:BF:51:88:3C:C2:B7:BF:36:89:43:D6:1B:B4:0B:1F:49:1B:31
Certificate issuer: /CN=1f61aa5d1befd7a0fe3e4dfe3aa8da73efcfba34
Certificate serial: 019425FD54AD900EB4BD5D12F9A366183AC3
Authority key identifier: 1F:61:AA:5D:1B:EF:D7:A0:FE:3E:4D:FE:3A:A8:DA:73:EF:CF:BA:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H2GqXRvv16D-Pk3-Oqjac-_PujQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/0ad414-3df1-4b38-869e-c621e8df95ff/1/vPm_UYg8wre_NolD1hu0Cx9JGzE.roa
Signing time: Thu 02 Jan 2025 07:49:06 +0000
ROA not before: Thu 02 Jan 2025 07:49:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207821
IP address blocks: 45.95.205.0/24 maxlen: 24
45.95.206.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:54:ad:90:0e:b4:bd:5d:12:f9:a3:66:18:3a:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f61aa5d1befd7a0fe3e4dfe3aa8da73efcfba34
Validity
Not Before: Jan 2 07:49:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bcf9bf51883cc2b7bf368943d61bb40b1f491b31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:08:2f:fd:21:cc:f4:5c:8d:f8:b5:f8:14:51:
89:13:fa:c9:1f:7a:e9:da:7a:37:2b:36:3b:54:8b:
ce:87:3a:f2:fb:74:0c:bf:8d:53:36:02:9a:1c:a6:
89:00:fe:d3:58:ec:32:13:ae:58:c7:cd:29:8a:e3:
f7:c6:71:66:18:65:c9:da:8e:e6:d7:93:d0:05:1b:
1a:0e:d4:f7:75:f0:e8:5a:b7:c9:8b:5b:5e:fa:49:
ec:68:94:6e:d9:6a:49:bd:1a:87:5e:00:d7:f5:d0:
f0:93:a9:51:94:ac:9a:3b:e1:95:61:db:14:3d:26:
eb:77:55:64:99:07:b6:1b:2b:8a:73:db:7f:8f:f0:
f8:e1:3d:f2:82:3b:be:d2:bc:e3:03:e6:d4:8c:24:
26:a1:36:00:0b:b2:a3:36:27:89:d9:ed:43:b3:e4:
45:e5:e6:5f:5f:f6:ce:ba:8e:40:13:70:77:be:42:
a1:b3:89:33:2e:41:0a:5a:f9:35:52:b0:d2:2b:37:
e2:52:7c:66:c5:4b:c6:33:a9:91:79:e2:31:08:55:
75:1a:32:35:9d:de:d7:2a:65:07:b0:c3:cd:3e:54:
31:7c:c7:5e:6e:69:9f:96:be:c8:02:cc:c3:eb:8c:
51:0c:35:ad:97:63:06:6a:33:1d:2b:3f:e7:50:69:
74:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:F9:BF:51:88:3C:C2:B7:BF:36:89:43:D6:1B:B4:0B:1F:49:1B:31
X509v3 Authority Key Identifier:
keyid:1F:61:AA:5D:1B:EF:D7:A0:FE:3E:4D:FE:3A:A8:DA:73:EF:CF:BA:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H2GqXRvv16D-Pk3-Oqjac-_PujQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/0ad414-3df1-4b38-869e-c621e8df95ff/1/vPm_UYg8wre_NolD1hu0Cx9JGzE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/0ad414-3df1-4b38-869e-c621e8df95ff/1/H2GqXRvv16D-Pk3-Oqjac-_PujQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.95.205.0-45.95.206.255
Signature Algorithm: sha256WithRSAEncryption
44:cd:03:ac:51:36:61:a4:d7:46:5f:97:ac:57:b7:e3:32:82:
ce:2f:89:6f:31:78:48:53:0d:6b:23:7a:90:22:68:ca:2d:75:
9f:b0:d0:c7:3b:a9:ed:f8:ae:95:9a:d0:a1:37:ae:5f:be:e9:
0f:fb:b0:34:47:af:01:4a:d2:4b:d1:65:d5:d5:7e:39:95:a7:
48:02:3a:50:5a:f9:c3:41:83:0a:2b:53:1e:db:d9:02:b5:73:
cc:98:5f:77:a4:0c:ed:2f:99:ee:db:af:37:28:bb:99:74:24:
6a:aa:72:89:63:bc:6a:31:c3:57:84:15:20:37:4e:4a:f7:cf:
ea:81:42:5f:d8:a8:c1:69:95:ec:c6:91:72:dc:0d:34:30:1e:
94:23:34:2e:f7:e3:cd:9e:79:9b:ac:04:d1:d6:e1:5b:02:91:
bd:b2:61:d0:97:4b:3b:28:c2:31:23:00:69:e9:19:65:03:37:
ba:ff:39:f9:74:86:36:fb:49:84:0e:df:b6:e3:60:b1:84:74:
82:32:81:01:6e:14:27:cd:63:d7:4e:69:b9:c9:d9:9e:b9:37:
71:10:94:f6:d2:22:44:8c:ed:d8:90:a8:20:ba:a1:7a:c5:0c:
94:a7:e5:ea:34:8f:a7:9d:e1:75:87:6e:98:6a:92:44:95:94:
a5:82:1c:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:01:33 2025 by rpki-client