Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/6558bc-7d3a-4f6f-b73a-62a3562c72ba/1/p0QXsp4w5wGQ69G08TDsPy1mPRM.roa
File: p0QXsp4w5wGQ69G08TDsPy1mPRM.roa (raw, json)
Hash identifier: viuANp3uqgANQPYvajNcRDfYwh8Tr9E4g9FS/j0tP9Q=
Subject key identifier: A7:44:17:B2:9E:30:E7:01:90:EB:D1:B4:F1:30:EC:3F:2D:66:3D:13
Certificate issuer: /CN=139602ef760adc0a5b7a48583cfbf9b60fcb7130
Certificate serial: 019426D94378B56588E824D28F20BBE85230
Authority key identifier: 13:96:02:EF:76:0A:DC:0A:5B:7A:48:58:3C:FB:F9:B6:0F:CB:71:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E5YC73YK3ApbekhYPPv5tg_LcTA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/6558bc-7d3a-4f6f-b73a-62a3562c72ba/1/p0QXsp4w5wGQ69G08TDsPy1mPRM.roa
Signing time: Thu 02 Jan 2025 11:49:20 +0000
ROA not before: Thu 02 Jan 2025 11:49:20 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206195
IP address blocks: 45.15.116.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:43:78:b5:65:88:e8:24:d2:8f:20:bb:e8:52:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=139602ef760adc0a5b7a48583cfbf9b60fcb7130
Validity
Not Before: Jan 2 11:49:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a74417b29e30e70190ebd1b4f130ec3f2d663d13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:1d:66:c4:1a:50:a8:14:6c:7a:db:c6:5b:fe:
3c:53:70:f6:68:08:0b:9c:05:7d:20:14:48:fb:0d:
6b:b8:25:f3:7f:8f:8c:b6:7e:f7:67:b2:ee:32:59:
c9:7b:1a:a3:dc:3c:ee:53:f1:53:4f:6f:0f:51:14:
68:c9:4f:4a:7c:1b:fa:87:9d:86:50:71:d8:7a:1e:
f7:c9:54:4a:e6:94:3b:8d:90:6c:8b:26:a1:92:d8:
1f:61:67:9d:44:c3:fb:a9:b3:d2:77:79:4e:d0:29:
5f:98:e5:73:fc:20:51:5c:5f:95:bf:71:38:2e:f9:
ee:71:fb:a7:aa:04:e8:99:8e:1b:0f:bb:a9:57:a4:
38:f1:ff:42:cd:50:43:02:60:5a:6d:c5:b2:c6:a2:
7d:a2:95:70:b5:eb:dc:86:b8:15:3b:3d:49:31:57:
19:40:43:bf:83:c2:e1:3c:e4:cb:c0:ef:f1:4f:0d:
db:dc:11:51:94:00:fc:f0:e2:18:72:24:36:a6:2b:
51:32:3a:93:b0:ca:cb:24:15:08:92:ef:48:30:13:
cf:bc:6d:97:c0:e9:ab:cd:8d:72:f4:3a:a0:a3:93:
d9:ef:51:ba:4c:5c:b5:1b:5e:6e:5f:9f:89:91:67:
b3:da:9f:b6:5f:16:91:06:79:ad:36:9d:42:85:f1:
a2:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:44:17:B2:9E:30:E7:01:90:EB:D1:B4:F1:30:EC:3F:2D:66:3D:13
X509v3 Authority Key Identifier:
keyid:13:96:02:EF:76:0A:DC:0A:5B:7A:48:58:3C:FB:F9:B6:0F:CB:71:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E5YC73YK3ApbekhYPPv5tg_LcTA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/6558bc-7d3a-4f6f-b73a-62a3562c72ba/1/p0QXsp4w5wGQ69G08TDsPy1mPRM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/6558bc-7d3a-4f6f-b73a-62a3562c72ba/1/E5YC73YK3ApbekhYPPv5tg_LcTA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.15.116.0/22
Signature Algorithm: sha256WithRSAEncryption
9c:7e:87:7f:ee:be:53:16:a5:90:0d:02:75:9b:21:eb:a9:e2:
a1:a1:6b:63:84:11:93:33:3c:50:8e:a2:e0:13:21:06:b5:3c:
ff:cf:23:05:dd:bb:27:2f:81:49:63:82:8e:09:07:4c:fd:5b:
28:dd:eb:5e:b3:bf:66:5d:95:29:c0:c8:dd:36:52:23:09:0a:
e5:12:4a:bd:dd:a3:ab:4b:b3:04:7f:77:69:31:e1:60:5c:b0:
22:b1:16:c3:a4:bd:9b:55:5e:38:76:56:a2:5c:eb:86:a7:64:
19:30:fc:68:03:6a:40:04:36:67:09:91:11:f8:b1:dd:3a:80:
d4:aa:7f:0e:01:c6:45:ab:29:81:24:00:50:bc:a7:66:44:d1:
8c:61:4e:d8:43:7b:cb:1d:98:bd:64:b9:ac:d3:36:20:6c:7c:
af:a0:9e:a7:4d:b4:b8:31:cc:0f:a1:16:e0:75:b1:5f:16:b2:
aa:f8:56:cd:f1:9f:2d:fc:b2:8c:28:af:2b:73:c2:61:9f:a5:
67:74:33:26:f2:1f:a0:c0:25:cc:8d:4b:78:55:73:32:16:98:
aa:c3:3a:cd:0f:9f:3b:f5:f1:2a:46:2d:df:cb:e4:81:f0:a3:
51:cf:29:de:be:4e:89:34:c2:9e:7a:7a:6f:45:c7:e0:87:c0:
a2:0e:e2:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:17:37 2025 by rpki-client