Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/1f45e9-e839-467b-b5ab-3d1f30e0923b/1/0D1cZUMTiqausR0yB4Xw8AGD91Y.roa
File: 0D1cZUMTiqausR0yB4Xw8AGD91Y.roa (raw, json)
Hash identifier: P0VFSa5grr5g9c7ABjsVrUERemiG8ev+nwOdbvgc3k0=
Subject key identifier: D0:3D:5C:65:43:13:8A:A6:AE:B1:1D:32:07:85:F0:F0:01:83:F7:56
Certificate issuer: /CN=c738807abb9ce15b7a892592b6f003f1a3e16b60
Certificate serial: 0194266A5259EE318FE3621DFBFC184A8887
Authority key identifier: C7:38:80:7A:BB:9C:E1:5B:7A:89:25:92:B6:F0:03:F1:A3:E1:6B:60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xziAeruc4Vt6iSWStvAD8aPha2A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/1f45e9-e839-467b-b5ab-3d1f30e0923b/1/0D1cZUMTiqausR0yB4Xw8AGD91Y.roa
Signing time: Thu 02 Jan 2025 09:48:09 +0000
ROA not before: Thu 02 Jan 2025 09:48:09 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 13044
IP address blocks: 45.84.36.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6a:52:59:ee:31:8f:e3:62:1d:fb:fc:18:4a:88:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c738807abb9ce15b7a892592b6f003f1a3e16b60
Validity
Not Before: Jan 2 09:48:09 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d03d5c6543138aa6aeb11d320785f0f00183f756
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:21:4a:83:7a:7f:2b:7d:8f:bf:63:0d:0b:c8:
47:89:1e:8b:13:61:08:c1:00:d4:03:8b:ed:37:9f:
de:f4:40:e9:9b:cd:8b:99:45:3d:6c:e6:9a:85:15:
48:0f:7a:14:9b:c9:0e:e5:cd:cc:fd:dd:1e:6e:bb:
30:c1:e1:56:46:34:22:f3:4d:15:02:69:7e:6e:a7:
a0:31:70:ec:7c:51:d5:6b:5f:88:08:77:77:e8:09:
bf:ab:a6:26:f2:3d:08:80:2a:29:9f:c2:49:ca:bf:
63:5e:21:89:b4:5e:de:18:e3:88:ff:be:76:54:51:
97:bc:f4:f7:4f:6f:8d:7a:0e:54:ee:19:f3:c7:10:
8f:3d:f6:ab:db:34:5f:85:7e:84:6f:d7:54:dc:19:
0f:41:a0:99:e6:0a:a6:76:16:9f:83:aa:8c:6c:0e:
f1:42:e9:9a:67:10:1e:06:e9:8b:d3:b9:40:85:86:
34:21:7f:e1:f9:96:4c:92:7d:ef:a4:b1:ff:67:91:
8e:d7:20:6a:5e:dd:a2:71:5c:99:69:15:a0:36:6b:
d3:9c:ca:d8:7d:e6:76:4c:b0:ec:9c:7f:a3:85:e9:
96:5c:19:fd:7e:b4:65:b1:6c:f8:bc:0b:4c:ad:02:
fe:94:b9:d7:1b:6c:2a:10:05:96:f9:d7:d8:b7:55:
1b:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:3D:5C:65:43:13:8A:A6:AE:B1:1D:32:07:85:F0:F0:01:83:F7:56
X509v3 Authority Key Identifier:
keyid:C7:38:80:7A:BB:9C:E1:5B:7A:89:25:92:B6:F0:03:F1:A3:E1:6B:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xziAeruc4Vt6iSWStvAD8aPha2A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/1f45e9-e839-467b-b5ab-3d1f30e0923b/1/0D1cZUMTiqausR0yB4Xw8AGD91Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/1f45e9-e839-467b-b5ab-3d1f30e0923b/1/xziAeruc4Vt6iSWStvAD8aPha2A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.84.36.0/24
Signature Algorithm: sha256WithRSAEncryption
ad:c6:c3:5b:f6:f7:a2:e7:52:76:c3:3c:45:84:f9:48:48:e2:
ba:56:a6:8b:91:a9:84:80:cd:ac:e1:8a:3f:98:d1:65:bc:6d:
99:0b:7f:33:7c:24:a8:d5:3e:f1:ee:50:48:7e:c8:2c:13:ff:
46:09:af:03:b8:e4:4f:f6:5c:55:67:1c:63:9a:cb:43:7e:42:
b2:c4:61:a1:be:f8:e2:7a:4a:df:45:ba:95:ee:fe:b0:14:50:
ab:ee:88:cd:1c:55:e1:5e:28:e8:7e:3c:07:98:dd:66:d9:12:
d7:ff:2b:00:f8:9c:8f:e7:97:90:02:f7:e7:73:6b:ed:85:df:
b3:f1:2f:f1:1a:9a:fa:ed:81:b5:55:f1:1a:2f:b3:3b:43:55:
dd:95:59:e8:da:b8:ba:a6:10:ea:9f:76:ad:9c:7f:c1:87:1f:
c4:0a:60:87:ca:5a:cf:f7:9d:6d:ec:27:fd:01:0d:72:d9:91:
68:43:c7:10:e3:91:0d:30:43:2f:d0:84:f6:02:35:fe:ea:79:
a7:f8:83:48:90:fd:8e:d1:2d:7f:8f:bb:35:ae:96:37:53:23:
9c:92:e5:8c:90:ea:6e:3a:26:6f:0b:49:da:2f:d7:8d:17:06:
9d:6e:1f:14:a0:4f:e8:ac:ce:3b:d4:65:57:d7:ab:ac:c1:69:
5f:43:db:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:45:25 2025 by rpki-client