Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/259fbe-2855-4e19-918f-62c1b1ff3a26/1/sAkyj21t8-IWELVSrcuIx5gPSVk.roa
File: sAkyj21t8-IWELVSrcuIx5gPSVk.roa (raw, json)
Hash identifier: iR95lFASykLAMl0dgv405uAOE69TMGevQ+/+DeWufdg=
Subject key identifier: B0:09:32:8F:6D:6D:F3:E2:16:10:B5:52:AD:CB:88:C7:98:0F:49:59
Certificate issuer: /CN=00911779c767d2364e86f4e27ef8c5fe9bb01090
Certificate serial: 01941FFA4065485EB7C5DA5F3920B6BF6917
Authority key identifier: 00:91:17:79:C7:67:D2:36:4E:86:F4:E2:7E:F8:C5:FE:9B:B0:10:90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AJEXecdn0jZOhvTifvjF_puwEJA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/259fbe-2855-4e19-918f-62c1b1ff3a26/1/sAkyj21t8-IWELVSrcuIx5gPSVk.roa
Signing time: Wed 01 Jan 2025 03:48:01 +0000
ROA not before: Wed 01 Jan 2025 03:48:01 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 198867
IP address blocks: 5.45.190.0/24 maxlen: 24
5.45.191.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:40:65:48:5e:b7:c5:da:5f:39:20:b6:bf:69:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00911779c767d2364e86f4e27ef8c5fe9bb01090
Validity
Not Before: Jan 1 03:48:01 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b009328f6d6df3e21610b552adcb88c7980f4959
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:62:29:a7:a5:3e:80:4b:7a:7d:a1:c6:a2:5f:
a8:ba:e9:e4:69:e7:f4:cc:0e:c7:22:69:3d:b8:69:
58:21:ed:52:03:cd:54:a7:d2:b5:e7:4b:1a:a8:33:
01:35:73:8c:3e:bc:a9:7b:d8:c6:f4:85:c2:7b:41:
5d:b9:f8:72:e3:e1:e2:3a:24:f9:5d:78:04:33:04:
d4:eb:29:b5:83:4e:a7:1c:b7:27:b5:eb:86:e2:c5:
43:7b:4c:82:13:8a:46:88:f4:1a:c1:98:8f:99:52:
d6:90:94:a9:3c:a2:f6:fa:bf:3d:1a:55:6a:00:1e:
9d:3e:13:26:9b:94:b6:d4:ac:a5:e0:1d:13:22:d6:
98:84:a6:ea:b0:05:ed:65:48:66:3e:00:c1:13:19:
f3:09:a4:35:fc:9a:55:63:64:05:4d:84:8a:48:d7:
33:ce:08:ce:2f:f9:bb:1c:05:36:51:44:95:25:8c:
e8:1e:e6:ac:e1:bd:4e:45:99:7c:83:ab:b6:06:4b:
ec:b2:c3:43:5d:29:2e:95:a0:28:84:6d:be:6e:b1:
3d:6a:77:fa:2e:ae:1b:99:0a:86:2b:d8:5e:7b:6a:
81:22:b9:5b:18:7f:7d:c2:7c:2e:75:0f:e7:7c:1b:
65:2b:c2:90:79:af:03:e1:43:3c:32:49:84:b4:7a:
d2:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:09:32:8F:6D:6D:F3:E2:16:10:B5:52:AD:CB:88:C7:98:0F:49:59
X509v3 Authority Key Identifier:
keyid:00:91:17:79:C7:67:D2:36:4E:86:F4:E2:7E:F8:C5:FE:9B:B0:10:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AJEXecdn0jZOhvTifvjF_puwEJA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/259fbe-2855-4e19-918f-62c1b1ff3a26/1/sAkyj21t8-IWELVSrcuIx5gPSVk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/259fbe-2855-4e19-918f-62c1b1ff3a26/1/AJEXecdn0jZOhvTifvjF_puwEJA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.45.190.0/23
Signature Algorithm: sha256WithRSAEncryption
59:65:c3:e5:e5:e2:22:11:69:32:74:ee:15:7d:a3:81:0e:d3:
46:e5:e8:e2:f9:88:6b:4e:a7:95:22:17:20:7d:5a:56:c4:07:
0c:42:58:13:7e:f7:82:f8:04:58:0f:c5:74:62:d1:f0:2e:24:
0a:15:21:d0:45:9b:05:75:98:67:e5:96:1b:88:a8:9d:c3:f6:
93:39:62:bc:5b:c1:35:dd:70:01:51:27:14:e6:98:a2:c6:fa:
a6:c0:4d:56:fb:e8:99:a9:f0:d0:2f:72:23:73:50:36:bd:3d:
2d:e2:34:ec:ae:06:1c:3c:c7:70:02:bc:e8:c2:bf:04:2e:e6:
67:3b:8a:c0:fe:15:a6:e5:d1:3a:a3:5d:7c:09:f8:32:f7:c5:
9c:78:81:ca:4e:f3:3e:e3:6a:b3:2c:87:fd:a3:92:97:a9:23:
1e:1d:fc:75:b1:83:46:b8:06:be:6a:7f:c9:6c:c2:3b:34:d2:
f1:78:37:c9:af:10:99:90:f0:f1:a1:d6:d4:df:b0:b6:d0:47:
3f:2b:80:b1:de:1a:18:d8:a9:68:db:a7:52:f4:cc:22:13:f2:
13:01:d6:91:96:ea:12:c5:e3:2a:ef:00:0b:2a:c7:6a:ff:dd:
d8:e9:07:7b:9e:d1:39:0f:7b:94:10:f9:b6:1f:b7:3e:eb:69:
a2:b7:97:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:13:30 2025 by rpki-client