Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/2c57e5-402b-4896-929f-54341cd13a9d/1/AXJBq8yUHFkgykgslA-fSWXTVKA.roa
File: AXJBq8yUHFkgykgslA-fSWXTVKA.roa (raw, json)
Hash identifier: 7rldJllcwwKofvRznEIMSA9gArb4oK2i6gZ8ozpzOqo=
Subject key identifier: 01:72:41:AB:CC:94:1C:59:20:CA:48:2C:94:0F:9F:49:65:D3:54:A0
Certificate issuer: /CN=edee25a78a816bde362c40c86e39b947d0ee2ff3
Certificate serial: 01942143DB895CC9510AC08ECBBCDEC9389E
Authority key identifier: ED:EE:25:A7:8A:81:6B:DE:36:2C:40:C8:6E:39:B9:47:D0:EE:2F:F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7e4lp4qBa942LEDIbjm5R9DuL_M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/2c57e5-402b-4896-929f-54341cd13a9d/1/AXJBq8yUHFkgykgslA-fSWXTVKA.roa
Signing time: Wed 01 Jan 2025 09:48:02 +0000
ROA not before: Wed 01 Jan 2025 09:48:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 201800
IP address blocks: 45.159.104.0/22 maxlen: 24
188.68.188.0/24 maxlen: 24
188.68.191.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:43:db:89:5c:c9:51:0a:c0:8e:cb:bc:de:c9:38:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=edee25a78a816bde362c40c86e39b947d0ee2ff3
Validity
Not Before: Jan 1 09:48:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=017241abcc941c5920ca482c940f9f4965d354a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:cc:4b:f4:5f:00:7a:8b:53:01:01:14:88:45:
d2:ce:f3:c1:99:c1:a2:f9:1f:61:ea:3a:05:5f:89:
f2:bc:5e:47:40:e6:21:b5:7f:fb:38:64:fb:a2:68:
e0:49:79:12:21:52:92:96:61:d5:32:d1:ac:3f:d7:
60:da:11:80:69:c1:1d:94:8b:c9:61:4e:aa:41:31:
59:95:f9:32:1e:8d:0c:1a:c2:8c:b4:72:d3:96:b6:
84:e5:d9:67:bd:b8:9c:83:09:23:77:28:b7:2c:80:
91:6a:87:95:90:7d:cc:97:92:00:56:7a:8e:8f:a9:
9e:d3:ea:4f:40:33:9a:47:46:54:79:ab:1f:19:52:
7c:2f:35:12:3d:92:f2:2f:38:a4:89:9f:49:24:a4:
55:ad:31:f2:02:e9:39:df:2d:06:d9:45:25:59:ff:
8a:f7:d0:76:6c:dd:e7:14:28:be:49:0e:bd:ab:27:
e7:48:a8:54:0a:61:ff:cd:20:36:62:ee:90:a5:c5:
36:50:90:d3:da:04:de:76:b8:1a:2a:49:c9:55:8a:
7f:dd:50:21:c7:69:4a:59:eb:85:ca:9a:ea:40:d4:
e3:7a:c9:af:ec:4c:b9:64:ad:31:0f:96:e7:16:e3:
ab:5f:3b:3c:cb:ac:5a:4f:bf:76:98:22:fa:1c:00:
3a:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:72:41:AB:CC:94:1C:59:20:CA:48:2C:94:0F:9F:49:65:D3:54:A0
X509v3 Authority Key Identifier:
keyid:ED:EE:25:A7:8A:81:6B:DE:36:2C:40:C8:6E:39:B9:47:D0:EE:2F:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e4lp4qBa942LEDIbjm5R9DuL_M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/2c57e5-402b-4896-929f-54341cd13a9d/1/AXJBq8yUHFkgykgslA-fSWXTVKA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/2c57e5-402b-4896-929f-54341cd13a9d/1/7e4lp4qBa942LEDIbjm5R9DuL_M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.159.104.0/22
188.68.188.0/24
188.68.191.0/24
Signature Algorithm: sha256WithRSAEncryption
09:6c:bc:21:5d:bf:60:ac:47:33:bb:23:21:2c:04:ab:f4:7d:
fc:3e:fe:d9:ea:49:b1:ae:19:d8:de:d0:0c:fd:b5:a6:2c:7d:
da:fd:17:7e:78:c3:a9:44:d6:1d:25:c0:85:12:39:26:72:5b:
ad:38:ee:6b:11:64:00:b9:3e:c6:93:44:de:52:82:61:35:db:
ba:ef:7e:2a:0a:75:ef:b7:59:c1:f4:12:4a:7f:10:b4:10:d7:
8a:84:08:07:82:d7:c7:45:d2:f2:c0:1e:72:5d:f8:36:ef:70:
c0:df:fb:8b:64:d4:7b:66:3e:49:8f:2a:d8:ac:a8:51:20:24:
0f:8f:73:95:ec:f8:a4:0a:2e:dd:d6:06:f1:8c:53:0a:48:b5:
a1:42:e0:8d:22:d3:d5:7a:b5:be:34:18:6a:33:17:a6:8d:45:
59:7e:59:97:21:3a:ec:07:59:be:46:82:12:27:91:b5:bd:32:
59:4a:da:c9:4a:75:7e:4e:b4:db:39:dc:bb:30:61:5a:41:a9:
4b:35:0f:5a:2d:02:12:2e:67:6a:9e:15:e9:42:67:6a:45:0c:
f8:f1:d7:fc:86:5a:76:77:38:a3:3f:66:e9:7e:4d:1e:ac:c0:
96:52:e3:1c:35:33:7c:2e:90:72:92:6a:6e:09:6f:ab:75:b2:
43:fe:a9:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:52:09 2025 by rpki-client