Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/e82de9-25f4-466e-9c0c-c08997a7a08f/1/_ZGs7yyYUfcWFHaeoN_irFYY-Fs.roa
File: _ZGs7yyYUfcWFHaeoN_irFYY-Fs.roa (raw, json)
Hash identifier: k/ZQQ+Kv/qHUrbi6eDGukQ6+rynVgaxf2EU7N8rlEaQ=
Subject key identifier: FD:91:AC:EF:2C:98:51:F7:16:14:76:9E:A0:DF:E2:AC:56:18:F8:5B
Certificate issuer: /CN=814edbd19634cbb91a0d2dafd759d4c9a7e77b7a
Certificate serial: 019425FBF12421B963554EF477BDACB6E574
Authority key identifier: 81:4E:DB:D1:96:34:CB:B9:1A:0D:2D:AF:D7:59:D4:C9:A7:E7:7B:7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gU7b0ZY0y7kaDS2v11nUyafne3o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/e82de9-25f4-466e-9c0c-c08997a7a08f/1/_ZGs7yyYUfcWFHaeoN_irFYY-Fs.roa
Signing time: Thu 02 Jan 2025 07:47:35 +0000
ROA not before: Thu 02 Jan 2025 07:47:35 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 12552
IP address blocks: 45.92.12.0/24 maxlen: 24
45.92.13.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fb:f1:24:21:b9:63:55:4e:f4:77:bd:ac:b6:e5:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=814edbd19634cbb91a0d2dafd759d4c9a7e77b7a
Validity
Not Before: Jan 2 07:47:35 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fd91acef2c9851f71614769ea0dfe2ac5618f85b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:10:14:97:2a:ad:d8:86:30:25:d2:18:f8:a7:
be:99:48:00:9a:92:2c:1a:41:bd:cf:ee:5e:82:06:
a5:ce:85:f5:8b:98:9c:1b:27:e2:d9:f3:56:00:08:
da:95:a7:5b:06:62:22:7a:e2:27:aa:c6:6a:ab:30:
cf:28:33:ab:55:bb:6d:53:fd:c6:b5:36:34:73:63:
3d:75:8d:35:8d:89:b5:bf:25:21:d3:02:29:5c:f2:
a8:ad:27:72:ad:9b:c4:dc:22:89:04:f1:ea:bb:31:
b2:fd:61:c0:7c:6d:e4:4c:1c:1f:72:81:e3:70:47:
b9:10:c0:fb:dd:a1:d8:d3:b7:43:94:4a:c3:0f:f5:
58:92:df:b6:f7:97:06:90:a6:60:cd:b9:9d:32:22:
3e:c5:e6:2b:42:e8:ab:f6:2f:a5:0c:26:48:44:66:
aa:9f:52:4e:23:10:63:7a:55:15:0b:d2:39:15:c7:
e4:c9:9d:ca:14:92:4e:46:6b:c9:16:f6:5d:6c:88:
e0:37:a4:28:b5:c4:85:7a:83:49:f5:b4:8b:47:87:
42:28:e2:85:29:0f:5a:ac:f0:18:df:59:99:7f:b8:
b6:99:b4:c1:50:47:95:1d:99:2b:88:1e:16:a7:0c:
18:8d:94:a1:e5:a0:84:4c:8a:db:c2:dc:b5:af:f8:
8b:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:91:AC:EF:2C:98:51:F7:16:14:76:9E:A0:DF:E2:AC:56:18:F8:5B
X509v3 Authority Key Identifier:
keyid:81:4E:DB:D1:96:34:CB:B9:1A:0D:2D:AF:D7:59:D4:C9:A7:E7:7B:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gU7b0ZY0y7kaDS2v11nUyafne3o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/e82de9-25f4-466e-9c0c-c08997a7a08f/1/_ZGs7yyYUfcWFHaeoN_irFYY-Fs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/e82de9-25f4-466e-9c0c-c08997a7a08f/1/gU7b0ZY0y7kaDS2v11nUyafne3o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.92.12.0/23
Signature Algorithm: sha256WithRSAEncryption
57:8c:e2:7b:d2:f5:d7:93:37:f2:0a:a3:66:83:c6:52:7b:8c:
43:e3:a4:f2:00:0c:15:4f:7e:a2:9e:dc:5a:b1:8b:a8:d9:23:
c5:2b:6f:e6:5b:17:32:5a:4d:8b:62:ef:e3:fb:4d:dc:70:49:
5d:72:02:76:80:a5:d8:d5:5f:df:2c:d0:28:a6:d4:67:aa:98:
6a:fb:25:5b:7d:7a:93:31:46:05:72:a9:d3:99:f1:e0:ff:ce:
66:9d:bd:0b:99:a8:03:0b:89:d7:3e:1d:3e:e8:49:b6:6f:a7:
36:17:a1:4c:e2:ae:a9:83:e3:5b:17:00:89:2d:ff:c0:f9:d9:
24:e3:4b:1a:d8:6d:db:6e:60:95:8a:96:9d:da:c5:42:af:8b:
91:58:1e:75:cf:b9:3c:53:3f:ec:dc:b0:53:f1:41:ed:e2:86:
02:1e:4b:8a:3c:8d:ec:9f:f8:70:c9:5b:70:b8:6d:5b:2a:5e:
7c:49:86:28:6a:cf:a9:25:f9:7c:08:94:23:04:ab:b1:e1:53:
be:71:17:f0:3f:a9:0d:6f:d2:c7:bd:9f:f6:60:b6:40:f7:80:
0f:d7:64:7e:b3:ed:a5:33:46:89:91:48:be:90:cd:f9:ba:c1:
8b:1f:06:72:53:c6:6e:69:14:13:2c:02:c2:64:6e:e6:4d:20:
1c:18:e4:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:04:38 2025 by rpki-client