Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/c5e52a-8023-47ac-b27a-4aebefac49b1/1/iuqsr8mDy4hdl6U1K1v1iSpNchQ.roa
File: iuqsr8mDy4hdl6U1K1v1iSpNchQ.roa (raw, json)
Hash identifier: 1qvvVB0UpfZrwtI6t2Uw+kulc+5R7APEpoKz6kq0OuA=
Subject key identifier: 8A:EA:AC:AF:C9:83:CB:88:5D:97:A5:35:2B:5B:F5:89:2A:4D:72:14
Certificate issuer: /CN=45b5004ec3cf5c1a755185d6f40683c646cc94ec
Certificate serial: 0194228D0A12A573C4234AF8F2C6BCA89466
Authority key identifier: 45:B5:00:4E:C3:CF:5C:1A:75:51:85:D6:F4:06:83:C6:46:CC:94:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RbUATsPPXBp1UYXW9AaDxkbMlOw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/c5e52a-8023-47ac-b27a-4aebefac49b1/1/iuqsr8mDy4hdl6U1K1v1iSpNchQ.roa
Signing time: Wed 01 Jan 2025 15:47:35 +0000
ROA not before: Wed 01 Jan 2025 15:47:35 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211181
IP address blocks: 94.101.111.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:0a:12:a5:73:c4:23:4a:f8:f2:c6:bc:a8:94:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45b5004ec3cf5c1a755185d6f40683c646cc94ec
Validity
Not Before: Jan 1 15:47:35 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8aeaacafc983cb885d97a5352b5bf5892a4d7214
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:f1:e1:cb:c3:59:05:28:0f:e3:0d:77:b9:f8:
60:39:33:00:ef:0a:f3:64:e0:11:e3:ef:27:79:c1:
f3:f3:6c:a2:b0:0e:7f:03:59:a9:82:b7:5c:13:06:
32:82:99:6d:9e:e4:19:9f:b8:e7:71:e9:3a:ef:bb:
39:e6:fb:0f:22:97:b8:08:79:ff:94:18:b0:57:05:
6a:3d:52:88:ad:03:fa:e7:54:4d:1a:05:4d:83:dc:
78:ed:5e:1a:d2:13:34:93:4d:2d:c1:a4:aa:14:82:
a8:a3:7b:be:d3:33:d0:63:42:31:11:b8:1f:fa:08:
62:1c:4c:c5:95:9d:fc:e7:5f:65:df:26:07:55:55:
97:10:38:ae:e8:b6:d5:3b:b0:4e:20:f9:f4:d3:fe:
93:30:48:08:b4:be:ad:cb:fc:a4:6f:aa:dd:37:cb:
d6:68:41:d3:7f:9f:59:68:ea:9f:11:e8:ad:41:38:
16:5a:34:7b:8f:7a:34:36:32:80:22:67:ff:28:b6:
ab:58:d9:93:ef:f4:5f:79:85:81:39:eb:f5:9f:f2:
b8:bc:c6:a8:0f:f9:9f:f0:ae:0b:6c:61:d9:a5:27:
79:df:da:7e:50:72:3a:c6:73:36:15:92:96:4e:49:
2c:7a:2b:6f:6d:e1:4c:80:e1:53:96:9d:8d:e6:fa:
72:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:EA:AC:AF:C9:83:CB:88:5D:97:A5:35:2B:5B:F5:89:2A:4D:72:14
X509v3 Authority Key Identifier:
keyid:45:B5:00:4E:C3:CF:5C:1A:75:51:85:D6:F4:06:83:C6:46:CC:94:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RbUATsPPXBp1UYXW9AaDxkbMlOw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/c5e52a-8023-47ac-b27a-4aebefac49b1/1/iuqsr8mDy4hdl6U1K1v1iSpNchQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/c5e52a-8023-47ac-b27a-4aebefac49b1/1/RbUATsPPXBp1UYXW9AaDxkbMlOw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.101.111.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:6a:df:cf:9a:06:94:25:d2:ce:ef:b7:bb:9f:89:dd:48:87:
30:38:73:87:3e:22:b7:2a:5e:5a:17:39:48:89:bf:db:21:b1:
b7:fd:43:d3:2d:56:1e:f1:83:9a:25:fd:10:4f:28:a2:65:3f:
7e:58:9c:92:f5:bf:03:ec:3a:eb:22:4a:12:7c:e1:02:60:de:
19:0a:0f:07:4d:88:09:97:fe:dd:b8:6e:0d:08:68:e1:48:e0:
82:af:b4:94:1b:ee:2f:5a:0f:0b:1d:3a:2b:73:17:fb:b9:9f:
e5:d1:b0:d4:c0:7c:a8:4d:49:d1:e1:dd:fe:2e:26:6d:27:c1:
8e:ac:28:c5:9c:85:5b:96:f2:07:ac:fa:9c:66:6b:0c:53:ed:
fc:93:57:d0:a9:e0:c1:29:d7:dc:de:c3:19:ae:99:43:99:02:
fa:77:f2:76:cb:9b:40:6b:01:c9:0a:03:1b:50:a5:f5:9e:b8:
9d:7b:d4:12:fe:14:c1:ac:29:f3:82:e9:9d:45:90:6d:0a:2b:
68:63:56:0e:66:70:e9:f4:d4:1f:d2:cb:40:50:e3:43:bb:50:
45:00:a3:42:88:e8:f2:a9:e9:4f:27:97:4c:4b:df:a3:0e:b7:
6b:cc:52:3b:18:9c:50:94:52:88:54:49:22:dd:b5:94:c1:1a:
eb:09:d2:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:45:18 2025 by rpki-client