Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/03c0aa-7f94-40c1-9742-ddb0484a6da2/1/svKZo3SYe3cv8Mz7OTgmT4eXdPY.roa
File: svKZo3SYe3cv8Mz7OTgmT4eXdPY.roa (raw, json)
Hash identifier: hDRuttNUPmkUswD/PN5v7bjO2pBa9L/1t8q5gG/jwI0=
Subject key identifier: B2:F2:99:A3:74:98:7B:77:2F:F0:CC:FB:39:38:26:4F:87:97:74:F6
Certificate issuer: /CN=add6d7576cd28245c679f9af3575c035b8a22c9e
Certificate serial: 01942143A15163BA275518317AE7F1412996
Authority key identifier: AD:D6:D7:57:6C:D2:82:45:C6:79:F9:AF:35:75:C0:35:B8:A2:2C:9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rdbXV2zSgkXGefmvNXXANbiiLJ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/03c0aa-7f94-40c1-9742-ddb0484a6da2/1/svKZo3SYe3cv8Mz7OTgmT4eXdPY.roa
Signing time: Wed 01 Jan 2025 09:47:47 +0000
ROA not before: Wed 01 Jan 2025 09:47:47 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 59909
IP address blocks: 45.9.220.0/22 maxlen: 24
45.9.220.0/24 maxlen: 24
45.9.221.0/24 maxlen: 24
45.9.222.0/24 maxlen: 24
45.9.223.0/24 maxlen: 24
2a0e:1500::/29 maxlen: 38
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:43:a1:51:63:ba:27:55:18:31:7a:e7:f1:41:29:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=add6d7576cd28245c679f9af3575c035b8a22c9e
Validity
Not Before: Jan 1 09:47:47 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b2f299a374987b772ff0ccfb3938264f879774f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:26:a1:d2:b2:e2:50:1b:56:18:8b:ac:00:15:
73:e0:80:ce:36:f2:32:35:92:97:12:2c:8a:67:56:
02:2c:f3:29:c2:55:67:66:37:39:ac:87:ed:04:e0:
99:63:be:a9:19:cf:7c:41:79:d5:50:4d:84:9b:83:
ab:63:33:90:ab:c1:73:3e:96:9c:d3:0b:ba:5c:0a:
f8:d2:2a:3e:84:1d:50:c7:77:89:00:9d:70:26:dc:
91:c3:f5:d3:b4:ce:7c:8a:88:42:c9:a9:54:23:1d:
ad:0a:d9:d6:70:f0:dd:81:c7:8a:50:9c:d7:e2:67:
fc:17:8f:a1:b4:4a:76:b8:ab:ff:45:98:27:d6:f4:
ce:f4:79:51:f0:61:9c:36:be:12:a7:e3:4b:69:d5:
fd:3e:e3:9f:11:be:d7:ca:82:d0:2c:68:5b:fd:80:
83:06:b3:7b:46:aa:d4:8f:5a:7a:42:ca:07:ec:f7:
49:49:7a:a9:e7:4e:f6:24:30:80:00:ab:c3:38:2e:
fe:67:8b:b5:4f:06:43:1e:56:63:1d:ab:4a:42:2b:
09:41:26:e5:bb:02:c7:a8:be:32:9b:3d:d6:73:a1:
a1:40:49:f2:9d:5b:1d:b9:ca:02:c4:a3:da:ea:7c:
95:2b:e3:c0:cf:7d:34:3b:8c:03:98:c4:63:37:e8:
1c:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:F2:99:A3:74:98:7B:77:2F:F0:CC:FB:39:38:26:4F:87:97:74:F6
X509v3 Authority Key Identifier:
keyid:AD:D6:D7:57:6C:D2:82:45:C6:79:F9:AF:35:75:C0:35:B8:A2:2C:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rdbXV2zSgkXGefmvNXXANbiiLJ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/03c0aa-7f94-40c1-9742-ddb0484a6da2/1/svKZo3SYe3cv8Mz7OTgmT4eXdPY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/03c0aa-7f94-40c1-9742-ddb0484a6da2/1/rdbXV2zSgkXGefmvNXXANbiiLJ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.9.220.0/22
IPv6:
2a0e:1500::/29
Signature Algorithm: sha256WithRSAEncryption
3b:ab:31:55:1f:97:f4:7c:54:b5:97:85:1a:f7:a6:2c:75:d4:
98:bc:be:9b:8e:d3:80:c8:09:c0:a7:4a:71:64:aa:c9:2b:02:
5a:81:c0:2e:53:1a:34:6a:44:5b:ad:36:10:49:2b:19:82:2c:
3d:35:60:4b:d0:11:80:be:60:86:78:4b:bb:6c:bb:1e:32:15:
c3:82:87:9e:92:2c:79:c3:64:8f:9a:cc:c7:ab:d9:37:f4:f4:
32:c3:67:06:11:22:f7:5f:48:80:c6:8b:34:89:0b:85:7b:5f:
72:ae:65:4c:39:a6:9b:28:7a:27:a6:77:4c:38:4d:3b:49:79:
cc:94:bf:68:7f:a4:98:7f:c0:8d:df:e5:fd:0e:a9:82:f3:77:
67:3e:04:5b:45:be:5a:cd:f2:97:33:c3:d7:95:c6:6b:4e:95:
fc:82:a2:4b:50:bf:f6:27:13:13:71:b3:cb:d8:bd:ed:d7:ea:
7f:85:56:52:ab:00:5d:eb:c8:3d:6e:ef:ec:2c:a1:e7:d3:88:
e9:7d:72:df:f4:e7:2e:56:75:e8:8b:d7:a7:a5:7c:b3:eb:62:
be:a0:84:1a:fa:58:08:8e:18:c0:d8:51:7c:2e:39:2f:c4:a4:
72:55:79:f6:cf:50:da:8b:45:14:92:7d:f7:b8:c3:ec:10:05:
c5:41:7a:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:13:48 2025 by rpki-client