Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/2fb593-43f5-4db7-9819-0f9d57a5d4fa/1/GnY_25RaB7VB-Uit3iO_cOg1Kw4.roa
File: GnY_25RaB7VB-Uit3iO_cOg1Kw4.roa (raw, json)
Hash identifier: ZVEoTNxwNym6ttfGviMGg7HgfXQQGhqaSdVzNN7qtAU=
Subject key identifier: 1A:76:3F:DB:94:5A:07:B5:41:F9:48:AD:DE:23:BF:70:E8:35:2B:0E
Certificate issuer: /CN=d4c3b12c8d635190ec928437bbd6cb0e8c38f9a9
Certificate serial: 019423D7D5163CF60FAF64908565F1C5AFD9
Authority key identifier: D4:C3:B1:2C:8D:63:51:90:EC:92:84:37:BB:D6:CB:0E:8C:38:F9:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1MOxLI1jUZDskoQ3u9bLDow4-ak.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/2fb593-43f5-4db7-9819-0f9d57a5d4fa/1/GnY_25RaB7VB-Uit3iO_cOg1Kw4.roa
Signing time: Wed 01 Jan 2025 21:48:54 +0000
ROA not before: Wed 01 Jan 2025 21:48:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215518
IP address blocks: 45.151.94.0/24 maxlen: 24
45.151.95.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:d5:16:3c:f6:0f:af:64:90:85:65:f1:c5:af:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4c3b12c8d635190ec928437bbd6cb0e8c38f9a9
Validity
Not Before: Jan 1 21:48:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1a763fdb945a07b541f948adde23bf70e8352b0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:30:eb:ed:c4:2f:44:e6:5f:ea:89:a5:9c:5f:
98:d5:2f:07:a2:79:db:8d:78:bf:d5:87:8f:55:e0:
1d:71:72:64:df:af:31:6c:88:f5:1c:d8:ef:8e:5b:
bb:a3:81:a3:1e:ae:6c:cb:8b:2e:1f:38:ca:77:ad:
54:8e:37:e0:ec:eb:77:a9:d8:9d:5c:2d:7d:ce:7d:
63:35:f4:4d:ad:e8:02:d4:5b:1b:44:35:6d:e0:21:
40:89:e2:fc:36:0d:9b:82:eb:91:46:9d:71:69:62:
9f:2f:08:39:f0:8a:d2:b9:3a:5c:40:5b:3e:04:7f:
ed:ae:f3:6e:8c:d0:40:3b:d5:1b:c1:f4:13:47:ae:
1e:75:51:7a:a3:0a:c7:ae:b4:67:d9:89:55:13:81:
c3:90:e1:4d:a6:db:24:43:08:d5:29:0a:95:ab:9d:
0d:a6:c5:aa:59:9a:fd:b8:46:2e:ed:e7:c1:db:79:
a0:1d:b6:0f:f2:c8:dd:ec:ea:b5:5c:e5:2a:d9:c2:
b3:b7:d6:98:aa:ba:f9:dc:21:28:ac:07:ea:91:39:
d3:1e:52:02:e0:16:5a:b4:e8:06:71:e9:fb:a4:42:
a4:da:e1:cd:91:06:44:44:0f:14:bb:07:2a:67:ec:
3d:03:42:9c:d7:e6:20:69:30:18:9e:8b:43:72:16:
60:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:76:3F:DB:94:5A:07:B5:41:F9:48:AD:DE:23:BF:70:E8:35:2B:0E
X509v3 Authority Key Identifier:
keyid:D4:C3:B1:2C:8D:63:51:90:EC:92:84:37:BB:D6:CB:0E:8C:38:F9:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1MOxLI1jUZDskoQ3u9bLDow4-ak.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/2fb593-43f5-4db7-9819-0f9d57a5d4fa/1/GnY_25RaB7VB-Uit3iO_cOg1Kw4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/2fb593-43f5-4db7-9819-0f9d57a5d4fa/1/1MOxLI1jUZDskoQ3u9bLDow4-ak.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.151.94.0/23
Signature Algorithm: sha256WithRSAEncryption
0d:5b:74:c4:9d:75:bf:22:9b:04:0e:50:97:f9:7b:cd:f8:a3:
e1:0b:ed:c1:e0:a8:35:a4:e7:ac:7f:dc:ca:01:4c:20:a5:29:
e3:57:09:58:b9:a7:1d:7e:e5:66:55:cc:c9:7c:88:e0:16:ba:
60:4c:0e:e3:7b:e2:a9:13:a8:59:16:81:0b:69:95:29:ec:3c:
56:9f:41:b6:0a:b3:5e:9c:38:26:ac:eb:f9:26:54:77:8b:09:
7c:a2:5e:c7:1a:89:68:6b:63:09:e4:f3:ea:4a:fa:90:8f:ee:
54:63:3d:5a:a2:cb:3a:56:52:3d:0f:fb:29:65:47:3e:35:c3:
d2:c4:52:ae:93:61:2f:bc:57:ee:9c:2a:29:1e:9b:51:75:91:
2e:85:f7:09:46:d8:dc:7d:61:6f:89:3d:aa:92:ab:c0:a9:e7:
19:cb:4a:4b:0f:4e:ed:85:c6:66:88:85:3e:7b:dc:7f:73:b4:
00:05:de:ac:21:c2:7d:87:c3:1f:e9:3c:01:d9:9d:c6:91:ef:
ad:6f:b9:7d:11:dc:08:ee:c0:e1:d1:b0:7f:f8:4d:12:d8:f6:
89:33:cd:d1:8e:48:1f:47:3b:2e:88:6a:03:c2:50:52:1f:6f:
15:51:2e:ee:7b:b0:f6:ba:00:ff:45:86:98:b3:a9:ff:fa:d2:
11:4c:02:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:25:42 2025 by rpki-client