Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/3e7654-5124-4a6e-9497-9a9ed1ef2e8d/1/D0WMwY3NHpPX5_dmK_570D9pBac.roa
File: D0WMwY3NHpPX5_dmK_570D9pBac.roa (raw, json)
Hash identifier: CbiqykEreMJuhwu1zLvtDfPL0dcdrsuGDFZiamJJth8=
Subject key identifier: 0F:45:8C:C1:8D:CD:1E:93:D7:E7:F7:66:2B:FE:7B:D0:3F:69:05:A7
Certificate issuer: /CN=21f10e34421baff174d60678f32fa5e35cdf957e
Certificate serial: 01941FFA0F803D1A8A88CD896824C5733CE5
Authority key identifier: 21:F1:0E:34:42:1B:AF:F1:74:D6:06:78:F3:2F:A5:E3:5C:DF:95:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IfEONEIbr_F01gZ48y-l41zflX4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/3e7654-5124-4a6e-9497-9a9ed1ef2e8d/1/D0WMwY3NHpPX5_dmK_570D9pBac.roa
Signing time: Wed 01 Jan 2025 03:47:49 +0000
ROA not before: Wed 01 Jan 2025 03:47:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48814
IP address blocks: 45.94.148.0/24 maxlen: 24
45.94.149.0/24 maxlen: 24
45.94.151.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:0f:80:3d:1a:8a:88:cd:89:68:24:c5:73:3c:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21f10e34421baff174d60678f32fa5e35cdf957e
Validity
Not Before: Jan 1 03:47:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0f458cc18dcd1e93d7e7f7662bfe7bd03f6905a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:6a:46:c5:24:d0:bb:97:08:9b:bf:16:c5:28:
9c:0f:32:86:63:4e:ea:42:db:2b:b5:29:d5:e1:ad:
91:3a:72:75:cd:a8:a5:54:28:7c:aa:4c:5d:e9:8d:
4f:cd:e5:a5:7c:97:48:95:7b:1c:6e:c5:b1:e4:43:
2e:c1:42:8d:70:d6:3d:f5:2b:48:2a:f4:42:82:3f:
3d:70:b5:a6:38:7c:01:92:59:6a:b1:87:db:78:bf:
d1:47:36:bb:c4:83:76:ea:37:65:4e:3e:3d:ec:9d:
3c:32:1a:d9:a8:7a:5f:37:ac:e8:27:2c:a6:c3:26:
9a:3f:74:53:db:82:7a:cb:ad:54:60:fe:fa:de:71:
90:ce:53:2c:4f:17:a6:af:20:cc:17:96:02:73:46:
5a:3b:73:69:d6:07:60:3d:32:dd:31:27:6b:fc:6b:
e6:24:7a:d6:1e:e9:d6:f1:73:e0:f6:e0:90:87:ef:
ce:71:a6:74:b5:78:4e:8a:8f:17:35:da:16:4b:61:
b0:f2:d9:e9:7b:19:c0:9a:e6:52:53:16:ea:d8:f6:
e9:53:69:89:1a:ce:f8:e9:b3:a2:7a:06:2e:5f:d4:
e7:13:8b:c7:14:8e:77:5e:2e:24:b5:88:70:ef:de:
30:df:9f:e3:5c:0c:71:50:b8:07:a2:b4:b1:f9:3e:
e1:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:45:8C:C1:8D:CD:1E:93:D7:E7:F7:66:2B:FE:7B:D0:3F:69:05:A7
X509v3 Authority Key Identifier:
keyid:21:F1:0E:34:42:1B:AF:F1:74:D6:06:78:F3:2F:A5:E3:5C:DF:95:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IfEONEIbr_F01gZ48y-l41zflX4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/3e7654-5124-4a6e-9497-9a9ed1ef2e8d/1/D0WMwY3NHpPX5_dmK_570D9pBac.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/3e7654-5124-4a6e-9497-9a9ed1ef2e8d/1/IfEONEIbr_F01gZ48y-l41zflX4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.94.148.0/23
45.94.151.0/24
Signature Algorithm: sha256WithRSAEncryption
af:50:24:89:80:09:4e:37:23:01:33:d7:09:a8:d8:a4:5a:0d:
31:c2:e8:e4:35:3c:b3:4d:ef:86:9d:5b:08:50:3b:c1:14:6a:
c0:fc:bf:45:a2:6d:22:a8:0f:e6:54:88:e5:d1:10:1e:f9:93:
a3:89:73:50:b1:4e:56:aa:af:2e:0b:bb:5f:5d:c4:8e:4b:05:
30:23:c1:6a:f3:b6:28:18:d3:40:60:21:17:ee:0f:f1:d7:85:
43:83:3d:58:0d:18:a2:c8:f7:1c:d9:ae:fb:9a:12:91:67:3d:
fd:a9:80:7c:b0:8f:8c:98:18:97:f5:9d:4e:8f:7a:be:ca:ea:
35:d9:7b:79:9b:fc:55:ce:ba:60:68:9a:8b:b8:e2:96:83:e1:
d7:fd:ad:f5:6e:7b:0b:87:0c:3a:c6:44:0c:20:de:bf:bc:60:
0c:6b:1e:08:27:5c:5b:44:9a:f6:53:a9:36:cd:b4:aa:bf:48:
5f:25:a8:3e:c9:b0:00:69:a5:16:4b:d0:97:85:d3:e5:25:3a:
8d:b6:f4:b6:0f:bc:d9:f1:bc:5e:fd:fd:0e:50:61:b9:b9:38:
45:eb:7c:eb:5f:e1:51:e4:78:68:1b:c7:01:44:38:6c:0d:ff:
d2:98:fd:3b:2e:f8:3e:34:90:23:ba:ca:a3:02:9f:73:19:89:
05:74:c7:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:53:10 2025 by rpki-client