Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/8f0259-9bc8-4fdc-926d-1a80daffd796/1/Rq-lqv8nvaGlsC79el8fMA5_1rc.roa
File: Rq-lqv8nvaGlsC79el8fMA5_1rc.roa (raw, json)
Hash identifier: T0ctud47vtW/7aXgZpP0x6VHkVLrf38PbYskxMdhNRg=
Subject key identifier: 46:AF:A5:AA:FF:27:BD:A1:A5:B0:2E:FD:7A:5F:1F:30:0E:7F:D6:B7
Certificate issuer: /CN=661691ca9c58d0859b6b870230b0f581be66a58a
Certificate serial: 019427B3FC038333E436E1DC3E56FBED8ED0
Authority key identifier: 66:16:91:CA:9C:58:D0:85:9B:6B:87:02:30:B0:F5:81:BE:66:A5:8A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZhaRypxY0IWba4cCMLD1gb5mpYo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/8f0259-9bc8-4fdc-926d-1a80daffd796/1/Rq-lqv8nvaGlsC79el8fMA5_1rc.roa
Signing time: Thu 02 Jan 2025 15:48:14 +0000
ROA not before: Thu 02 Jan 2025 15:48:14 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 12874
IP address blocks: 45.84.195.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b3:fc:03:83:33:e4:36:e1:dc:3e:56:fb:ed:8e:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=661691ca9c58d0859b6b870230b0f581be66a58a
Validity
Not Before: Jan 2 15:48:14 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=46afa5aaff27bda1a5b02efd7a5f1f300e7fd6b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:2d:81:68:3e:ce:50:31:e4:b1:14:f3:4e:77:
42:99:fc:d1:7d:ec:15:86:15:99:d9:a2:e6:4b:cb:
7f:04:41:a3:2b:be:25:3e:c4:06:6e:bd:41:eb:23:
b5:07:4b:e9:18:bc:f2:34:b3:0a:ee:31:77:73:ca:
51:67:be:6a:b3:3c:1c:46:45:ea:aa:82:a0:35:0f:
ab:d1:2b:a3:60:d9:72:f8:7d:8a:ba:62:66:bc:3a:
d2:53:47:09:56:f4:a8:1a:fc:c3:f0:56:c0:15:6b:
90:23:6e:f1:5c:a0:bf:73:28:23:a2:81:96:95:7b:
14:47:7b:66:f0:5f:14:d7:ff:69:81:80:df:4c:46:
8c:0d:a1:88:73:b3:85:10:25:a2:d9:d1:08:e4:c7:
02:3b:5f:21:27:bb:62:cc:35:ec:a8:b4:16:99:ef:
7e:82:3d:72:71:61:e8:96:24:bb:18:10:38:c1:d7:
4d:c8:81:22:2e:2d:06:8a:08:7d:7f:16:73:f0:11:
d1:e2:76:94:76:b4:62:03:4c:04:a3:a9:51:ba:4f:
05:99:0f:91:5e:85:ea:b7:39:74:de:52:e4:fd:37:
95:5c:79:5d:a3:ae:7d:cb:f2:7f:95:38:b4:1e:aa:
b4:71:df:11:d4:2d:05:5d:9e:6a:1f:55:f1:b1:fa:
1f:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:AF:A5:AA:FF:27:BD:A1:A5:B0:2E:FD:7A:5F:1F:30:0E:7F:D6:B7
X509v3 Authority Key Identifier:
keyid:66:16:91:CA:9C:58:D0:85:9B:6B:87:02:30:B0:F5:81:BE:66:A5:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZhaRypxY0IWba4cCMLD1gb5mpYo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/8f0259-9bc8-4fdc-926d-1a80daffd796/1/Rq-lqv8nvaGlsC79el8fMA5_1rc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/8f0259-9bc8-4fdc-926d-1a80daffd796/1/ZhaRypxY0IWba4cCMLD1gb5mpYo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.84.195.0/24
Signature Algorithm: sha256WithRSAEncryption
90:bc:aa:dc:c1:79:d9:04:fe:9b:9c:7b:c5:20:e7:99:43:06:
e3:8e:a7:35:2b:68:27:dd:e2:85:aa:30:4c:e0:3f:dd:0f:2d:
05:1b:a2:d1:98:e8:ba:48:06:c1:79:9f:f2:74:26:30:96:fa:
b2:f6:ec:e6:ee:7c:7d:ba:45:be:bf:65:4e:f8:af:43:72:e7:
6b:07:44:0e:d5:0d:1b:b3:c9:c6:9a:c5:27:3d:9b:88:51:bd:
a4:6e:02:f6:af:7c:eb:39:b5:4b:f6:74:12:eb:da:09:e8:df:
9a:bb:54:80:89:9b:34:60:ad:55:ff:9c:77:bd:9e:ef:33:f7:
e1:75:3c:31:5b:b6:c1:19:b7:b5:47:b3:b1:23:9c:48:09:6a:
f2:38:f5:11:be:15:9c:96:0f:b5:10:4c:0b:19:25:54:92:6b:
05:81:39:84:e7:fa:e3:6f:6f:3f:94:8f:9d:4d:30:81:66:2c:
33:76:9a:b8:88:a8:f3:1f:16:ca:86:3d:a5:a3:75:49:92:13:
dd:d7:2b:53:a9:8a:3d:ce:93:e1:64:7f:2e:51:12:c1:34:52:
d6:a1:44:fa:79:99:e9:26:75:4c:c5:1a:bc:db:d1:e8:d6:0c:
3c:91:8b:b3:8c:2a:ba:03:0e:6f:0e:37:ea:10:79:2d:3f:5b:
77:6a:31:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 19:58:46 2025 by rpki-client