Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/27db7c-64b6-4361-a030-9b88abed6264/1/pZt3ngFeHMLCYRctddSSVqyWLjE.roa
File: pZt3ngFeHMLCYRctddSSVqyWLjE.roa (raw, json)
Hash identifier: 5bKbQPRPEL96MgpUc8HDOLgV+nQrWiSTGSjPvFzOvNc=
Subject key identifier: A5:9B:77:9E:01:5E:1C:C2:C2:61:17:2D:75:D4:92:56:AC:96:2E:31
Certificate issuer: /CN=15e0c079ebbee9453adf40783340016497710e08
Certificate serial: 019420684C498C7F90FBAD2C693D8531BD25
Authority key identifier: 15:E0:C0:79:EB:BE:E9:45:3A:DF:40:78:33:40:01:64:97:71:0E:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FeDAeeu-6UU630B4M0ABZJdxDgg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/27db7c-64b6-4361-a030-9b88abed6264/1/pZt3ngFeHMLCYRctddSSVqyWLjE.roa
Signing time: Wed 01 Jan 2025 05:48:13 +0000
ROA not before: Wed 01 Jan 2025 05:48:13 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208805
IP address blocks: 45.84.164.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:68:4c:49:8c:7f:90:fb:ad:2c:69:3d:85:31:bd:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15e0c079ebbee9453adf40783340016497710e08
Validity
Not Before: Jan 1 05:48:13 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a59b779e015e1cc2c261172d75d49256ac962e31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:fa:7d:de:b2:89:66:81:35:06:fa:4b:18:a9:
66:71:91:ea:67:56:9f:8e:01:e3:3b:d0:3b:fc:df:
52:68:27:91:27:21:eb:f3:12:32:70:10:1e:a0:74:
76:46:db:d2:4e:a1:cc:35:4e:43:95:3b:56:98:74:
33:0b:ab:0f:d2:d2:c9:b9:5f:a9:2d:28:06:6f:7d:
c6:d3:f8:58:e2:39:9a:fd:9c:40:69:f4:8b:d6:1f:
5b:69:f8:b1:be:a2:ac:d6:91:e8:7d:b4:61:06:c0:
02:8b:cd:0e:4a:a8:b2:53:a7:dd:fb:0b:7f:c4:e8:
66:4c:7e:f0:96:98:ca:c4:20:5c:60:ef:c1:14:78:
4e:e6:08:08:59:d9:25:d2:84:d7:0a:a9:cb:bd:f3:
30:d4:37:7d:bf:5f:83:27:a3:e6:4c:e8:a5:4e:24:
9a:08:72:32:0d:0a:94:07:e9:53:cc:ca:da:10:5d:
bf:ec:22:d4:b2:40:d5:3b:66:fd:5a:36:0b:ae:36:
79:8d:92:c0:c3:18:15:8f:fd:21:1e:04:28:87:f0:
31:67:ec:4e:ab:87:13:74:d8:46:76:7c:f9:ad:16:
43:c6:b1:6b:0d:eb:ca:a7:29:c7:ee:18:f6:93:79:
70:ba:14:ab:18:48:7f:ae:63:b5:6b:6d:3e:d2:b8:
d6:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:9B:77:9E:01:5E:1C:C2:C2:61:17:2D:75:D4:92:56:AC:96:2E:31
X509v3 Authority Key Identifier:
keyid:15:E0:C0:79:EB:BE:E9:45:3A:DF:40:78:33:40:01:64:97:71:0E:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FeDAeeu-6UU630B4M0ABZJdxDgg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/27db7c-64b6-4361-a030-9b88abed6264/1/pZt3ngFeHMLCYRctddSSVqyWLjE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/27db7c-64b6-4361-a030-9b88abed6264/1/FeDAeeu-6UU630B4M0ABZJdxDgg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.84.164.0/22
Signature Algorithm: sha256WithRSAEncryption
0f:98:e8:5a:f4:27:5f:31:48:e6:9a:b3:a0:67:d0:e1:82:fe:
71:d5:b1:d9:b2:fa:42:42:28:62:07:b4:ba:11:2e:3f:8c:b1:
64:66:05:7f:d4:95:b8:ee:92:11:66:02:1b:97:c9:05:96:a5:
ea:c6:4f:89:d0:bc:45:cf:c9:1f:54:73:a6:66:8e:40:5e:ca:
e6:a4:6e:49:35:a7:13:ea:0a:dc:79:65:36:13:05:20:36:41:
01:19:23:fe:ec:9c:0f:10:48:cd:7c:7c:68:56:7e:27:96:a4:
d4:35:9a:58:0e:d7:96:43:08:c8:87:09:74:e6:4c:c1:2e:1e:
68:13:9b:7b:0b:51:c1:0d:1f:39:78:14:19:b9:25:db:10:c2:
1f:a6:d9:4a:59:48:3b:a5:03:e1:f2:7a:03:15:46:b1:d0:98:
e3:24:30:4d:91:96:24:4b:54:ac:ee:60:d5:73:82:65:48:e5:
8d:aa:8e:30:6e:18:eb:b3:6b:b0:b4:1d:8c:8c:de:1e:81:bc:
0f:5b:e4:47:28:0e:e0:81:a0:ee:e8:f3:d2:16:9a:60:21:2d:
6a:df:72:36:00:75:96:b0:a0:39:89:c2:2e:26:e0:16:c7:db:
39:0d:3a:a6:e5:b4:85:e8:0f:86:c4:b3:4d:85:26:8f:ae:15:
08:fb:91:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:05:03 2025 by rpki-client