Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/555221-000d-49f6-8335-4fd28c6619ae/1/XX7w2vPpzXRFuwUhQden5lCVCZQ.roa
File: XX7w2vPpzXRFuwUhQden5lCVCZQ.roa (raw, json)
Hash identifier: qufImvpEF3c9wVcCzVpZb6bGNeux1RbSpnlxjWKOWAA=
Subject key identifier: 5D:7E:F0:DA:F3:E9:CD:74:45:BB:05:21:41:D7:A7:E6:50:95:09:94
Certificate issuer: /CN=a66246b806e89aba40e7e58888f3576513a3934a
Certificate serial: 019424B3874594E4A89DAC497A8195F94AF1
Authority key identifier: A6:62:46:B8:06:E8:9A:BA:40:E7:E5:88:88:F3:57:65:13:A3:93:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pmJGuAbomrpA5-WIiPNXZROjk0o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/555221-000d-49f6-8335-4fd28c6619ae/1/XX7w2vPpzXRFuwUhQden5lCVCZQ.roa
Signing time: Thu 02 Jan 2025 01:48:52 +0000
ROA not before: Thu 02 Jan 2025 01:48:52 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208821
IP address blocks: 45.83.32.0/24 maxlen: 24
45.83.33.0/24 maxlen: 24
45.83.34.0/24 maxlen: 24
45.83.35.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:87:45:94:e4:a8:9d:ac:49:7a:81:95:f9:4a:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a66246b806e89aba40e7e58888f3576513a3934a
Validity
Not Before: Jan 2 01:48:52 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5d7ef0daf3e9cd7445bb052141d7a7e650950994
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:7d:ea:75:07:3d:ed:c6:cc:d7:db:ed:95:86:
9f:61:d1:d0:2d:f0:ae:13:99:d9:a1:2a:8f:bf:cd:
19:04:79:3a:75:e7:85:86:d6:3f:5d:63:2a:47:63:
b0:3d:19:82:84:4b:e7:53:f3:90:8a:90:cb:e6:7e:
0f:1d:9e:e6:c3:fe:ca:9f:be:bf:2b:0c:ea:c0:1f:
1b:3c:b8:26:86:36:38:6c:ca:33:46:81:a6:99:cc:
c3:67:72:46:8a:37:d3:af:14:44:46:9d:2d:49:66:
3f:a1:dd:11:d1:54:94:9c:ce:7f:7e:65:95:e0:86:
9b:1f:15:3b:36:05:30:41:f6:93:fd:20:25:4e:9f:
ac:82:80:22:b4:8b:f1:b7:ee:37:57:60:5a:48:08:
19:39:51:9e:5e:92:9e:42:75:9f:08:c8:95:0d:e4:
ce:dd:0e:67:39:76:4e:77:30:f3:c4:46:ea:eb:a2:
86:09:b7:43:b0:11:29:80:dc:2d:d4:34:68:e2:ac:
f2:bd:22:ba:9c:2e:61:d2:75:29:0c:df:d4:8f:8c:
c7:c2:53:37:35:0e:ec:e1:e5:cb:64:03:78:e5:02:
f1:57:6d:60:5f:59:f7:3b:0b:81:4a:a9:35:45:6a:
51:c0:80:78:9a:b4:ba:4b:b0:c8:74:1e:a7:b6:f9:
d5:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:7E:F0:DA:F3:E9:CD:74:45:BB:05:21:41:D7:A7:E6:50:95:09:94
X509v3 Authority Key Identifier:
keyid:A6:62:46:B8:06:E8:9A:BA:40:E7:E5:88:88:F3:57:65:13:A3:93:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pmJGuAbomrpA5-WIiPNXZROjk0o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/555221-000d-49f6-8335-4fd28c6619ae/1/XX7w2vPpzXRFuwUhQden5lCVCZQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/555221-000d-49f6-8335-4fd28c6619ae/1/pmJGuAbomrpA5-WIiPNXZROjk0o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.83.32.0/22
Signature Algorithm: sha256WithRSAEncryption
5c:f5:55:74:6b:fe:c2:95:1e:9a:78:ea:67:b6:44:bd:9e:87:
7e:fa:8d:c3:48:c5:ae:17:91:d0:e0:a2:d4:93:44:e9:04:1c:
c8:49:f8:cc:dc:98:c8:42:67:7b:29:28:c4:9c:5e:86:e6:54:
9d:08:7e:f9:53:11:d9:b9:c6:76:4b:69:0c:93:3f:0b:c5:6b:
d8:c7:5e:74:36:92:4c:04:e3:4e:29:20:52:e0:5b:86:c7:44:
59:b3:fc:10:d5:5b:89:c2:3a:3a:ef:ba:17:f7:b7:23:a9:15:
a2:72:40:7f:4a:07:65:c2:c5:10:5a:65:62:f6:f6:22:74:49:
1b:47:e2:d7:88:2d:5c:9a:95:16:db:19:c3:5e:3b:58:c4:44:
ee:8c:62:89:61:4a:9b:70:2f:51:f1:5a:12:a1:e3:d4:0e:d6:
de:ed:01:37:b3:01:ff:35:cb:33:32:15:58:cf:17:bc:e5:7f:
77:a9:5d:9b:25:f5:e3:02:22:f6:bb:97:64:5b:22:22:f6:1c:
9d:2a:c3:90:d0:d2:df:70:12:48:9a:b0:60:85:fe:92:3a:79:
a0:c5:4d:ec:6d:0a:14:cd:7e:27:66:ca:25:6c:a2:1b:9d:9b:
e0:cc:ad:a7:e2:23:66:e2:9c:33:fe:be:c4:37:56:8c:0e:18:
4c:fc:59:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:21:35 2025 by rpki-client