Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/25c95e-7f27-4d69-856d-a38b6795fb24/1/eS-Yps_K0BfpUzrN4bMosqiVEAA.roa
File: eS-Yps_K0BfpUzrN4bMosqiVEAA.roa (raw, json)
Hash identifier: knd4qm/EVOSf2FqADVl0W40hB9YRaDz2Ugn/a5rKfkk=
Subject key identifier: 79:2F:98:A6:CF:CA:D0:17:E9:53:3A:CD:E1:B3:28:B2:A8:95:10:00
Certificate issuer: /CN=d5e6733fa239c5fb0c438c82f7c230f55d478cb1
Certificate serial: 0194244554A01F84AEF473D1F23546F62733
Authority key identifier: D5:E6:73:3F:A2:39:C5:FB:0C:43:8C:82:F7:C2:30:F5:5D:47:8C:B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1eZzP6I5xfsMQ4yC98Iw9V1HjLE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/25c95e-7f27-4d69-856d-a38b6795fb24/1/eS-Yps_K0BfpUzrN4bMosqiVEAA.roa
Signing time: Wed 01 Jan 2025 23:48:30 +0000
ROA not before: Wed 01 Jan 2025 23:48:30 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 46475
IP address blocks: 45.81.253.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:45:54:a0:1f:84:ae:f4:73:d1:f2:35:46:f6:27:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5e6733fa239c5fb0c438c82f7c230f55d478cb1
Validity
Not Before: Jan 1 23:48:30 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=792f98a6cfcad017e9533acde1b328b2a8951000
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:c1:91:87:ee:a5:9f:7e:76:58:87:26:af:96:
0e:4b:95:b0:b9:28:4b:99:18:2a:aa:76:77:d3:44:
14:dc:58:79:18:dc:12:1c:2e:23:18:33:4c:97:1a:
93:7d:1f:4f:5c:8f:f8:d3:78:b3:a8:2a:8c:eb:75:
3e:c6:89:55:31:99:9e:15:98:15:d2:b3:ba:14:c8:
46:3b:39:51:4f:67:74:0a:bb:b9:b1:46:48:fb:9b:
8a:c8:05:93:2a:cc:1b:11:a0:7c:a8:ac:8e:cd:9b:
82:a4:48:18:61:18:20:0e:80:dc:67:a2:4f:c4:54:
48:99:4b:1b:09:88:0d:2a:e5:2b:f7:ad:f1:5b:d7:
4f:49:dc:51:0f:19:73:59:41:e4:33:79:32:07:6d:
bc:f2:ee:e2:24:a1:0d:a9:73:52:69:59:fd:f2:28:
7b:cd:26:e2:d4:78:50:56:0c:27:53:5e:de:dd:f5:
ab:2e:fa:eb:28:f4:c8:3f:29:d9:ae:18:89:fe:51:
4c:39:5a:c9:e2:3e:85:84:ed:69:ce:98:fc:94:4b:
f6:a3:22:db:2a:08:17:ae:70:a6:af:b2:c0:23:95:
b4:77:99:bd:f9:eb:af:5b:ed:d9:b1:af:3d:da:88:
e1:03:5a:1f:57:8d:ce:b5:98:ba:a6:2e:e4:01:63:
d0:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:2F:98:A6:CF:CA:D0:17:E9:53:3A:CD:E1:B3:28:B2:A8:95:10:00
X509v3 Authority Key Identifier:
keyid:D5:E6:73:3F:A2:39:C5:FB:0C:43:8C:82:F7:C2:30:F5:5D:47:8C:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1eZzP6I5xfsMQ4yC98Iw9V1HjLE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/25c95e-7f27-4d69-856d-a38b6795fb24/1/eS-Yps_K0BfpUzrN4bMosqiVEAA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/25c95e-7f27-4d69-856d-a38b6795fb24/1/1eZzP6I5xfsMQ4yC98Iw9V1HjLE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.81.253.0/24
Signature Algorithm: sha256WithRSAEncryption
21:7e:f6:96:bb:92:df:ad:19:6f:26:72:f3:13:7d:dd:b9:56:
17:f7:b8:ad:f5:23:cf:bf:e2:11:b3:bc:0d:c2:3f:2c:dc:57:
61:27:b4:d3:e4:8a:b5:31:52:88:16:65:2f:f9:05:5d:a7:e8:
19:8b:4c:b1:49:74:f0:7f:4d:6e:af:0f:ef:b0:e3:01:67:81:
64:64:fd:cd:4e:f2:cb:44:25:4d:d2:89:39:d6:88:15:f3:4f:
a5:80:52:7f:17:8f:d6:f4:6a:f7:9c:2f:d3:ab:85:47:93:60:
fe:cc:ff:b0:6d:17:2c:29:77:1f:5e:cc:15:8c:03:99:6c:f4:
45:ff:83:66:08:6a:76:15:32:05:8a:78:5c:35:1f:9d:77:3f:
c3:43:ce:59:53:25:74:f1:2a:b2:28:e3:98:7a:ad:21:d7:ad:
af:c9:e0:ee:0c:87:18:a7:db:a5:db:08:ff:e8:37:5f:0a:e4:
6c:28:b7:85:32:65:29:44:a3:66:fd:45:ec:9d:4f:9e:47:43:
1f:b9:0e:2f:22:8a:ae:71:90:f1:6c:43:7a:97:b7:e5:8f:60:
3f:62:21:98:63:d3:83:3e:dc:af:15:75:75:4d:bf:50:94:72:
f5:4c:ef:90:06:d8:46:b6:b7:3f:ff:25:3f:9f:fa:ee:53:57:
44:99:53:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:03:06 2025 by rpki-client