Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/6c0530-1074-4b35-be0c-cd7d61913288/1/OloEbYDAzotqcqXrtsOE7C-nKdM.roa
File: OloEbYDAzotqcqXrtsOE7C-nKdM.roa (raw, json)
Hash identifier: 1KugMutAlYxY9yVUop07GWwG3g/6VO6RKLlHRWpDAD8=
Subject key identifier: 3A:5A:04:6D:80:C0:CE:8B:6A:72:A5:EB:B6:C3:84:EC:2F:A7:29:D3
Certificate issuer: /CN=72c26abc9e06c1afef9b5fd2da40412e7aee6b47
Certificate serial: 0194228E40F2F7CD41776F5E781C9C2D398C
Authority key identifier: 72:C2:6A:BC:9E:06:C1:AF:EF:9B:5F:D2:DA:40:41:2E:7A:EE:6B:47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/csJqvJ4Gwa_vm1_S2kBBLnrua0c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/6c0530-1074-4b35-be0c-cd7d61913288/1/OloEbYDAzotqcqXrtsOE7C-nKdM.roa
Signing time: Wed 01 Jan 2025 15:48:55 +0000
ROA not before: Wed 01 Jan 2025 15:48:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 5405
IP address blocks: 45.153.81.0/24 maxlen: 24
45.153.82.0/23 maxlen: 24
91.247.160.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8e:40:f2:f7:cd:41:77:6f:5e:78:1c:9c:2d:39:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72c26abc9e06c1afef9b5fd2da40412e7aee6b47
Validity
Not Before: Jan 1 15:48:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3a5a046d80c0ce8b6a72a5ebb6c384ec2fa729d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:b4:de:aa:e5:9e:51:6d:6b:e4:ba:42:28:08:
08:22:94:88:d7:cc:59:73:fa:ca:4d:a4:d0:44:df:
8e:c8:e0:4b:5a:43:48:d9:c2:4c:67:8b:0e:43:3c:
bb:59:0c:fa:8e:0a:b8:10:4a:3d:b5:b9:83:cb:a4:
a1:70:17:e7:4f:c8:54:24:0f:9e:b2:9c:12:b9:e4:
1f:3d:58:2b:8f:5e:3a:5c:e0:da:e5:b3:45:19:0b:
6e:94:36:a0:83:aa:08:0c:62:09:b2:25:f1:74:e4:
be:44:f8:a5:7a:5b:88:fd:a4:20:72:70:2e:d8:43:
a5:bc:42:fe:a1:38:49:d5:41:01:ad:1e:70:44:43:
35:00:f3:0c:c4:d8:d9:e1:9c:b4:95:8b:c8:f8:54:
b8:13:e9:d4:54:1f:04:11:fa:4b:9b:e9:94:b1:f0:
8c:b7:ed:c0:df:bd:a4:0e:e7:f0:9d:32:8c:76:3d:
a3:f4:6c:6f:fc:eb:a2:49:69:54:47:bb:db:ac:98:
21:9f:eb:4f:02:5b:ea:65:1b:be:a5:37:10:20:77:
c7:ae:83:dd:6c:8b:f2:05:a0:68:e6:47:d0:78:64:
42:7f:44:32:79:35:4a:17:34:b3:6b:64:67:00:0c:
c0:e9:96:a9:32:bf:d4:32:b1:0b:b6:98:62:39:ab:
6e:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:5A:04:6D:80:C0:CE:8B:6A:72:A5:EB:B6:C3:84:EC:2F:A7:29:D3
X509v3 Authority Key Identifier:
keyid:72:C2:6A:BC:9E:06:C1:AF:EF:9B:5F:D2:DA:40:41:2E:7A:EE:6B:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/csJqvJ4Gwa_vm1_S2kBBLnrua0c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/6c0530-1074-4b35-be0c-cd7d61913288/1/OloEbYDAzotqcqXrtsOE7C-nKdM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/6c0530-1074-4b35-be0c-cd7d61913288/1/csJqvJ4Gwa_vm1_S2kBBLnrua0c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.153.81.0-45.153.83.255
91.247.160.0/24
Signature Algorithm: sha256WithRSAEncryption
38:52:f0:ea:7b:0b:bc:81:77:2f:d1:7c:be:77:e4:db:26:28:
fb:69:4e:d6:fd:ee:40:78:aa:a0:38:28:79:db:5d:72:ed:00:
69:19:11:75:ea:a3:5e:24:dc:85:45:be:7b:3a:75:75:b1:57:
cd:72:66:11:c3:8a:0c:d2:fd:7e:3b:7b:bb:96:60:06:b4:ec:
65:eb:89:87:21:57:0f:7c:19:f9:d9:b6:b4:6a:b1:b9:f3:31:
00:df:9b:a0:d0:fe:a2:fc:c2:99:6b:e3:79:0a:6d:27:62:81:
53:36:a5:26:93:d9:d9:4a:e1:9f:fd:96:07:86:95:f6:dc:8f:
96:43:c1:25:33:08:bc:5c:5e:4c:65:df:fd:75:0d:e2:f9:42:
1c:4e:28:a9:f8:8f:14:ab:8f:dd:86:e2:c5:9b:47:ee:de:00:
af:d9:fb:36:18:4e:be:3f:a0:3e:95:ed:6c:43:c6:bd:33:cc:
f6:f0:82:d0:81:c6:b2:4f:14:5e:e4:c3:61:c3:48:d7:f0:91:
e2:42:f2:f6:9f:e7:92:e3:18:e8:c8:78:4f:40:3e:0f:7f:4a:
2b:c2:dc:d8:13:52:d8:61:16:44:99:77:eb:79:f4:5b:9b:ff:
c3:2f:45:2e:1c:0a:8c:fb:ef:0c:61:5f:8b:8e:4c:57:53:5a:
0d:2f:79:78
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Apr 25 04:37:17 2025 by rpki-client