Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/5b4185-b080-498e-8cc7-6a6af5b74d38/1/68zFv9YtD3NrAFeU4wp9olsTM-s.roa
File: 68zFv9YtD3NrAFeU4wp9olsTM-s.roa (raw, json)
Hash identifier: pnT0iUdcMHrqvl0nnH7oLBNpzo/eCuulVPG8TY9HMQI=
Subject key identifier: EB:CC:C5:BF:D6:2D:0F:73:6B:00:57:94:E3:0A:7D:A2:5B:13:33:EB
Certificate issuer: /CN=d2323101b29596ff442d3749373b8e9983354670
Certificate serial: 01942444B2BD2334A5631337D808B0CB3946
Authority key identifier: D2:32:31:01:B2:95:96:FF:44:2D:37:49:37:3B:8E:99:83:35:46:70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0jIxAbKVlv9ELTdJNzuOmYM1RnA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/5b4185-b080-498e-8cc7-6a6af5b74d38/1/68zFv9YtD3NrAFeU4wp9olsTM-s.roa
Signing time: Wed 01 Jan 2025 23:47:49 +0000
ROA not before: Wed 01 Jan 2025 23:47:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 198310
IP address blocks: 45.152.27.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:44:b2:bd:23:34:a5:63:13:37:d8:08:b0:cb:39:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2323101b29596ff442d3749373b8e9983354670
Validity
Not Before: Jan 1 23:47:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ebccc5bfd62d0f736b005794e30a7da25b1333eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:42:59:9a:9d:36:88:c7:91:9f:0d:4a:5e:2e:
8f:eb:54:8c:3f:44:67:d9:74:0e:d2:9b:e5:69:51:
c7:24:a2:1b:cb:37:a9:a5:9a:93:8b:16:2a:be:ba:
30:ea:08:87:5a:86:54:92:a1:23:52:ff:ea:7a:58:
c0:0d:ac:a6:27:37:37:2c:b1:57:50:99:b6:e1:55:
e1:63:aa:2a:a7:d5:39:20:97:49:1f:82:b4:d1:0a:
38:1f:44:44:bc:35:22:d2:9f:83:df:06:a0:31:bc:
72:8b:98:26:27:12:95:3a:14:17:7c:f5:e3:64:25:
73:23:f6:90:72:36:f8:cc:e7:d0:14:5e:e7:71:f4:
4a:8e:f7:68:57:19:95:26:a3:22:fd:51:7e:d5:b5:
b4:ef:ff:df:21:f2:f9:0c:43:10:a9:d7:04:06:33:
aa:8b:12:26:64:eb:7a:71:4d:bc:c5:7e:ea:1c:81:
b5:4b:f6:f8:64:d4:5d:11:d7:ca:da:f0:9f:aa:a6:
6b:1d:c5:da:28:01:1c:25:61:a2:f9:e0:73:3b:e3:
b3:89:63:ba:89:5b:7f:83:eb:b7:11:96:42:e4:da:
de:fb:c3:a9:04:84:b3:10:bf:8f:f0:1e:3e:48:79:
1b:63:c4:c5:a4:e7:01:51:c5:87:6a:48:29:72:15:
03:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:CC:C5:BF:D6:2D:0F:73:6B:00:57:94:E3:0A:7D:A2:5B:13:33:EB
X509v3 Authority Key Identifier:
keyid:D2:32:31:01:B2:95:96:FF:44:2D:37:49:37:3B:8E:99:83:35:46:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0jIxAbKVlv9ELTdJNzuOmYM1RnA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/5b4185-b080-498e-8cc7-6a6af5b74d38/1/68zFv9YtD3NrAFeU4wp9olsTM-s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/5b4185-b080-498e-8cc7-6a6af5b74d38/1/0jIxAbKVlv9ELTdJNzuOmYM1RnA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.152.27.0/24
Signature Algorithm: sha256WithRSAEncryption
32:16:6c:08:88:4d:df:17:0a:da:8c:06:85:59:f2:34:88:fb:
e3:a5:2b:07:53:29:45:64:8e:a7:32:77:84:78:f7:97:85:d4:
a9:bf:2d:c4:33:81:62:35:3c:e6:41:7b:af:35:a6:37:d5:ab:
0f:67:60:74:81:72:a7:f2:a0:6c:5f:2e:74:f6:73:2d:bc:8c:
b2:dd:b0:b2:9f:d6:70:1e:4e:3b:c3:93:b9:13:c3:90:ef:95:
ed:c6:83:72:86:7e:0f:a5:80:39:bb:bc:82:44:32:07:4b:02:
5c:76:67:d7:f9:93:f2:3d:50:13:e6:75:73:2a:8e:ba:76:58:
a2:0c:dd:d0:6a:a2:eb:a7:e0:66:d7:86:a5:b9:ca:91:f6:1e:
c8:4e:a1:96:98:48:d5:6d:d8:5f:53:5d:be:88:aa:12:d9:c5:
00:3c:bc:6d:ed:95:21:e6:a5:fb:f0:05:2e:96:13:9f:6b:9c:
55:fd:29:12:a8:9f:64:5b:c1:b4:9d:b2:77:8e:89:38:ac:3a:
3b:66:8d:3c:54:1d:4d:8c:33:2b:52:a0:d5:35:c4:6a:b9:bc:
f8:9c:59:55:23:33:ad:a1:d1:37:c3:1e:03:bb:f4:6c:7a:03:
2f:6d:ed:75:cd:13:a5:c1:b5:95:c6:49:93:56:a0:18:58:08:
c3:f7:f7:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 00:42:00 2025 by rpki-client